User's Manual

match exactly the server name found on the certificate. The server name should
include the fully qualified domain name (for example, Servername.Domain name).
● Domain name must end in specified name: When selected, the server name
identifies a domain and the certificate must have a server name belonging to this
domain or to one of its sub-domains (for example, zeelans.com, where the server is
blueberry.zeelans.com). NOTE: These parameters should be obtained from the
administrator.
3. Click OK to close the security settings.
Set up a Client with AES-CCMP Data Encryption and TTLS Network
Authentication
TTLS authentication: These settings define the protocol and credentials used to authenticate
a user. The client uses EAP-TLS to validate the server and create a TLS-encrypted channel
between the client and server. The client can use another authentication protocol, typically
password-based protocols (for example, MD5 Challenge over this encrypted channel to enable
server validation). The challenge and response packets are sent over a non-exposed TLS
encrypted channel. The following example describes how to use WPA with AES-CCMP
encryption with TTLS authentication.
To set up a client with TTLS Network Authentication:
1. Click Profiles on the Intel PROSet/Wireless main window.
2. On the Profile page, click Add to open the Profile Wizard's General Settings.
3. Profile Name: Enter a descriptive profile name.
4. Wireless Network Name (SSID): Enter the network identifier.
5. Operating Mode: Click Network (Infrastructure).
6. Click Next to access the Security Settings.
7. Click Enterprise Security.
8. Network Authentication: Select WPA-Enterprise or WPA2-Enterprise.
9. Data Encryption: Select TKIP or AES-CCMP (Recommended).
10. Enable 802.1x: Selected.
11. Authentication Type: Select TTLS to be used with this connection.
Step 1 of 2: TTLS User
1. Authentication Protocol: This parameter specifies the authentication protocol operating
over the TTLS tunnel. The protocols are:
PAP (Default), CHAP, MD5, MS-CHAP and MS-
CHAP-V2. See
Security Overview for more information.
For PAP, CHAP, MD5, MS-CHAP, and MS-CHAP-V2 protocols, select one of these
authentication methods:
● Use the Windows logon: Select to retrieve the user's credentials from the user's
Windows logon process.
NOTE: This option is unavailable if Pre-Logon Connect is not selected during
installation of the Intel PROSet/Wireless software. Refer to
Install or Uninstall the
Single Sign On Feature.