Specifications

Creating the Windows Security Infrastructure

Summit WM Series WLAN Switch and Altitude Access Point Software Version 4.1 Technical Reference Guide

wizard, export the private key and select Delete the private key if the import is successful. Save

this file to a floppy disk and deliver it to the user of the wireless client computer.

3 On the wireless client computer, import the user certificate. For more information, see the “Import a

certificate” procedure in this section.

Export a certificate

1 Open an MMC console containing Certificates - Current User.

2 Open Personal, and then open Certificates

3 In the details pane, right-click the certificate you want to export, point to All Tasks, and then click

Export.

4 In the Certificate Export Wizard, click Yes, export the private key. (This option will appear only if

the private key is marked as exportable and you have access to the private key.) Click Next.

5 Select Personal Information Exchange – PKCS (.PFX) as the export file format and click Next.

6 On the Password page, type a password in Password and Confirm password to protect the private

key in the certificate and then click Next.

7 On the File to Export page, type the certificate filename or click Browse to specify the name and

location of the certificate file. Click Next.

8 On the Completing the Certificate Export Wizard page, click Finish

Import a certificate

1 Open an MMC console containing Certificates - Current User

2 Open Personal, and then open Certificates.

3 In the details pane, right-click the certificate you want to export, point to All Tasks, and then click

Import.

4 Type the file name containing the certificate to be imported. (You can also click Browse and navigate

to the file.)

5 If it is a PKCS #12 file, do the following: Type the password used to encrypt the private key.

(Optional) If you want to be able to use strong private key protection, select the Enable strong

private key protection check box. (Optional) If you want to back up or transport your keys at a later

time, select the Mark key as exportable check box.

6 Do one of the following: If the certificate should be automatically placed in a certificate store based

on the type of certificate, select Automatically select the certificate store based on the type of

certificate.

7 If you want to specify where the certificate is stored, select Place all certificates in the following

store, click Browse, and select the certificate store to use.

Step 9: Configuring Wireless Clients for EAP-TLS

If you have configured Wireless Network (IEEE 802.11) Policies Group Policy settings and specified the

use of EAP-TLS authentication (the Smart Card or other Certificate EAP type) for your wireless

network, then no other configuration is needed for wireless clients running Windows XP with SP1,

Windows XP with SP2, or Windows Server 2003.