User's Manual

Chapter 3 — Configuring the CK32 I-Safe
70 CK32 I-Safe Handheld Computer User’s Manual
9 Tap Additional Settings to Certificate Settings.
10 Check Validate Server Certificate to verify the identity of the
authentication server based on its certificate when using TLS.
11 Tap Root CA, select a root certificate, and then tap OK.
12 Enter the Common Names of trusted servers.
13 Tap OK.
Configuring TTLS Security With Profile Wizard
TTLS protocol provides authentication like EAP-TLS but does
not require user certificates. User authentication is done using a
password or other credentials that are transported in a securely
encrypted “tunnel” established using server certificates.
To configure TTLS security
1 In the Profile Wizard, select the Security page.
2 For 8021x Security, choose TTLS.
3 For Association, choose Open, WPA, WPA2, or Network
EAP.
4 For Encryption, choose TKIP or AES if you selected WPA2
for association, or WEP or CKIP if you selected Network
EAP for association.
5 For Username, type a unique username for this protocol.
6 In the Password field, type a unique password for this
protocol.
7 Select Prompt for password to have the user enter this
password each time to access the protocol, or select Use
following password to use the protocol without entering a
password each time you use the CK32 I-Safe.
8 (Optional) Tap Get Certificates to obtain or import server
certificates. For help with certificates, see “Loading a
Certificate” on page 76.
9 Tap Additional Settings to assign an inner TTLS
authentication, inner EAP, and set options for server
certificate validation and trust.