User's Manual

Table Of Contents
802.11a/g Router User’s Guide
CA Settings
If you enable the “Built-in Certificate Authority” function at the “Radius Server Settings” page, you can
see the “CA Settings” in the left side menu on “Advanced Settings” pages.
The CA (Certification Authority) allows you to request certificates for WLAN clients/stations and for
RADIUS servers. A certificate is required for a WLAN client and/or the RADIUS server when the
WLAN security policy is 802.1x or WPA with the EAP type as TLS, PEAP, and TTL…. In the case
where the RADIUS server will authenticate a WLAN client, the WLAN client needs to have a
certificate for itself, and the RADIUS server needs to have the certificate of the CA issuing the client’s
certificate. In the case where a WLAN client will authenticate the RADIUS server, the RADIUS server
needs to have a certificate for itself, and the WLAN client needs to have the certificate of the CA
issuing the RADIUS server’s certificate.
To acquire a certificate for a WLAN client or a RADIUS server, enter the name and password for the
client or server, and select the corresponding certificate type (“Normal User” for a WLAN client and
Radius Server for a RADIUS server). Then click the EXPORT button and specify the file path to
save the certificate on your PC. The User Name is used to identify the holder of the certificate to be
issued, and the holder need the Password in order to use the issued certificate (so people not knowing
the password cannot use the certificate). Currently the supported format for a “Normal User”
certificate is PKCS #12 (extension file name: .p12), and the supported format for a “Radius Server”
certificate is PEM (extension file name: .pem).
To get the CA’s certificate, just click the EXPORT button and specify the file path to save the certificate
on your PC. The format for the CA’s certificate is DER encoded binary X.509 (extension file
name: .CER).
51