Administrator's Guide

Table 4-3 Wireless configuration parameters (continued)
Item Description
WEP — Enterprise
Select WEP — Enterprise security if your network uses WEP with EAP/802.1x
authentication. This type of security utilizes a central authentication server, such as
RADIUS, to authenticate users on the network. For WEP — Enterprise, the HP Jetdirect
print server supports these server-based authentication protocols: LEAP PEAP EAP-TLS.
Provide the following if you select WEP — Enterprise:
Enabled Protocols: Select LEAP, PEAP, or EAP-TLS. LEAP (Lightweight Extensible
Authentication Protocol) is a proprietary protocol from Cisco Systems that uses
passwords for mutual authentication (the client and the server authenticate each
other). PEAP (Protected Extensible Authentication Protocol) is a mutual authentication
protocol that uses digital certificates for server authentication and passwords for
client authentication. For additional security, the authentication exchanges are
encapsulated within TLS (Transport Level Security). EAP-TLS (EAP using Transport
Level Security) is a mutual authentication protocol based on digital certificates.
User Name: Enter an EAP/802.1X user name, which cannot exceed 128
characters, for this device. The default user name is the default host name of the print
server, NPIxxxxxx, where xxxxxx are the last six digits of the LAN hardware (MAC)
address.
Password and Confirm Password: Enter an EAP/802.1X user password (up to
128 characters) for this device and then confirm the password by entering it again.
Server ID: Specify the Server ID validation string identifying and validating the
authentication server. This string is specified on the digital certificate issued by a
trusted Certificate Authority (CA) for the authentication server. The entry can be a
partial string unless you select Require Exact Match.
Encryption Strength: Specify the minimum encryption strength to use during
communications with the authentication server. You can select Low, Medium, or High
encryption strength. For each encryption strength, ciphers are specified to identify
the weakest cipher allowed.
Jetdirect Certificate: A self-signed HP Jetdirect certificate is preinstalled and used
to validate the identity of the HP Jetdirect device to clients and to network
authentication servers. This allows the HP Embedded Web Server to use HTTPS and
appear as a secure site when accessed by a Web browser. Click Configure to
update the certificate or install a new one.
CA Certificate: To validate the authentication server's identity, a CA (or Root)
certificate must be installed on the print server. This CA certificate must be issued by
the Certificate Authority who signed the authentication server's certificate. Click
Configure to configure or install a CA certificate.
WPA (WiFi Protected Access)
Your network uses WPA. Choose WPA – Personal, which uses a pre-shared key typically
generated by a passphrase. Or, select WPA – Enterprise which is commonly used in
enterprise-level networks. A dedicated server verifies the identity of a user or device
requesting access to the network before granting that access.
Select the WPA Version (Auto, WPA, or WPA-2), and then select the Encryption,
using Auto, advanced encryption standard (AES), or temporal key integrity protocol
(TKIP).
72 Chapter 4 HP Embedded Web Server (V.40.xx)