User's Manual

5-41
Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide
OL-4211-05
Chapter 5 Configuring the Client Adapter
Setting Security Parameters
f. Choose one of these PAC store options to determine where the imported PAC file will be stored and
to whom it will be accessible:
Global—PACs that are stored in the global PAC store can be accessed and used by any user at
any logon stage. Global PACs are available before or during logon or after the user is logged off
if the profile is not configured with the No Network Connection Unless User Is Logged In
option.
Private—PACs that are stored in the private store can be accessed and used only by the user
who provisioned them or the system administrator. They are not accessible until the user is
logged onto the local system. This is the default option.
g. Click Import.
h. If the Enter Password window appears (see Figure 5-14), enter the PAC file password, which can be
obtained from your system administrator, and click OK.
Figure 5-14 Enter Password Window
Note PAC file passwords are optional. The PAC authority determines whether to issue PAC files
that require user-supplied passwords. Nevertheless, all PAC files (even those without
passwords) are encrypted and protected. PAC file passwords are different from EAP-FAST
passwords and need to be entered only once, at the time a PAC is imported.
i. If you try to import a PAC file with the same PAC ID as a previously imported PAC file, you are
asked if you want to update the existing PAC. If you click Ye s , the existing PAC is replaced by the
new one from the imported file.
j. If the PAC file was imported successfully, the following message appears: “The EAP-FAST PAC file
was imported and is ready for use.” Click OK to return to the Manage PACs window.
k. The imported PAC now appears in the PAC tree on the Manage PACs window.
l. To delete a group or manually provisioned PAC file from storage, select the item and click Delete.
When a message appears asking you to confirm your decision, click Ye s. The PAC file is removed
from the tree.
m. Click Close to return to the Configure EAP-FAST window.
n. The name of the PAC authority that issued the PAC now appears in the PAC authority list on the
Configure EAP-FAST window. Select the desired PAC authorities or groups from the list.
Step 9 Check the Use Any PAC Belonging to the Same Group check box to use any PAC authority in the
selected groups for PAC provisioning.