User guide

A
RF45-PRO
User Guide
Ref. 11-06-V0-ffr
p 64
- Entering the shared secret, which must match the shared secret
previously entered on the RADIUS server.
EAP-TLS based deployment
There are several steps that have to be carried out in order to deploy the
EAP-TLS based security mode on the ARF45-PRO device.
The EAP-TLS method requires authentication certificates on both the network
side (that is on the authentication RADIUS server) and the ARF45-PRO side.
Certificate generation
So the very first step
(after having configured the RADIUS server and the
Access Point) consists of generating two certificates: the user/client
certificate (along with its private key) and the Certificate Authority (CA) root
certificate.
Here are described below the steps to follow in order to generate the client
certificate:
- Make sure that Certificate Services are running on the Windows
server. Open the Services program though the Start Menu (Start-
>Administrative Tools->Services). Find the Certificate Services line
and check if the status shows up as “Started”. If not, right click on
the Certificate Services line and select Start.