User Manual

Appendix C: Configuring Security Settings On Wireless Clients
WPA/WPA2 Enterprise (RADIUS) Client Using EAP-TLS Certificate
C-24
Psion Teklogix 9160 Wireless Gateway User Manual
ing a Certificate Authority (CA), server configured on your network. It is
beyond the scope of this document to describe these configuration of the
RADIUS server, PKI, and CA server. Consult the documentation for those
products.
Some good starting points available on the Web for the Microsoft Windows
PKI software are:
“How to Install/Uninstall a Public Key Certificate Authority for Windows
2000” at
http://support.microsoft.com/default.aspx?scid=kb;en-us;231881 , and
How to “Configure a Certificate Server” at
http://support.microsoft.com/default.aspx?scid=kb;en-us;318710#3 .
To use this type of security, you must do the following:
1. Add the 9160 Wireless Gateway to the list of RADIUS server clients.
(See “Configuring An External RADIUS Server To Recognize The
9160 Wireless Gateway” on page C-30.)
2. Configure the 9160 Wireless Gateway to use your RADIUS server (by
providing the RADIUS server IP address as part of the “WPA/WPA2
Enterprise [RADIUS]” security mode settings).
3. Configure wireless clients to use WPA security and “Smart Card or
other Certificate” as described in this section.
4. Obtain a certificate for this client as described in “Obtaining A TLS-
EAP Certificate For A Client” on page C-34.