Enabling Host-Based Eap; Obtaining And Importing Ca And User Certificates; Obtaining Ca And User Certificates - Cisco AIR-PCM352 - Aironet 350 Series 11Mbps Wireless LAN PC Card Adapter Installation And Configuration Manual

Chapter 5 Configuring the Client Adapter

Enabling Host-Based EAP

Before you can enable host-based EAP authentication, your network devices must meet the following
requirements:
•
•
•
•

Obtaining and Importing CA and User Certificates

EAP-TLS and PEAP authentication require the use of certificates. EAP-TLS requires both a Certificate
Authority (CA) certificate and a user certificate while PEAP requires only a CA certificate. After you
import the necessary certificates, you should not have to repeat this procedure until the certificates expire
(at a time that is predetermined by the certificate server).
Chapter 8
Note

Obtaining CA and User Certificates

If you have not yet obtained a CA certificate (for EAP-TLS or PEAP) and a user certificate (for
EAP-TLS), follow these steps.
Obtain the certificate file(s) (*.cer or *.crt) from your system administrator.
Step 1
Establish an ActiveSync connection between your laptop or PC and your Windows CE device.
Step 2
Step 3 Open Windows Explorer on your laptop or PC.
Step 4 Copy the certificate file(s) and paste them into a folder under My Computer > Mobile Device.
Follow the steps in the
Step 5
Certificate" section on page 5-27
OL-1375-04
The Windows CE device must be a PPC 2002 device.
PPC 2003 and other Windows CE .NET 4.2 devices can be configured for EAP-TLS or
Note
PEAP authentication if you configure your client adapter through Windows CE .NET instead
of ACU. See Appendix E
Client adapters must support WEP.
Access points to which your client adapter will attempt to authenticate must use the following
firmware versions or later: 11.23T (340 and 350 series access points), 12.2(4)JA (1100 series access
points), or 11.54T (1200 series access points).
All necessary infrastructure devices such as access points, servers, gateways, and user databases
must be properly configured for the authentication type you plan to enable on the client.
provides instructions for viewing and removing certificates, if necessary.
"Importing a CA Certificate" section on page 5-26
Cisco Aironet 350 Series Wireless LAN Client Adapters Installation and Configuration Guide for Windows CE
for instructions.
to import the certificate file(s) for your Windows CE device.

Enabling Host-Based EAP

and the "Importing a User
5-25