Operation Manual

Configurable SettingsAppendix —A
244 700 Series Color Mobile Computer User’s Manual
Additional Settings
1 Check Validate Server Certificate to verify the identity of the authenti-
cation server based on its certificate when using PEAP or TLS.
2 Enter the Co mmon Names of trusted servers. Note that if these fields are
left blank, the server certificate trust validation is not performed or required.
3 Click ok to return to the Security page.
TTLS (EAP-Tunneled TLS)
This protocol provides authentication like EAP-TLS (see page 242) but
does not require certificates for every user. Instead, authentication servers
are issued certificates. User authentication is done using a password or oth-
er credentials that are transported in a securely encrypted “tunnel” estab-
lished using server certificates.
EAP-TTLS works by creating a secure, e ncrypted tunnel through which
you present your credentials to the authentication server. Thus, inside
EAP-TTLS there is another inner authentication protocol that you must
configure via Additional Settings.
Use “TTLS” to configure the use of EAP-TTLS as an authentication pro-
tocol, and select either “Open” or “WPA” as an association mode.
ToEnableTTLSwithanOpenAssociation(default configuration)
1 Set 8021x Security as “TTLS.”
2 Set Association to “Open.”
3 Enter your unique user name and password to use this protocol. Select
Prompt for password to have the user enter this password each time to
access the protocol, or leave Use following password as selected to auto-
matically use the protocol without entering a password.
4 Tap Get Certificates to obtain or import server certificates (page 247).
5 Tap Additional Settings to assign an inner TTLS authentication and an
inner EAP, and set server certificate validation and trust (page 246).