User's Manual

ORiNOCO Client Utility ORiNOCO
®
802.11a/b/g/n USB Adapter User Guide
38
• Check the Use Machine PAC for Domain Logon check box if you want the client to attempt to log into a domain
using machine authentication with user credentials rather than user authentication. Doing so enables your
computer to connect to the network prior to user logon. The default setting is unchecked.
4. From the Select one or more PAC Authorities, highlight the PAC authorities associated with the network defined by
the profile's SSID. The list contains the names of all the authentication servers from which you have previously
provisioned a PAC.
5. Click Manage. The Manage PACs window appears.
The Manage PACs window enable you group PAC authorities to facilitate authentication while roaming. For example,
if there are three PAC authorities at a certain site covering different areas of the site, you can create a group
containing these authorities and select one of them in the PAC list. In this way, if you're roaming around the site, the
other authorities in the group will allow you access to the network.
A group consists of one or more authorities. Each authority may have one or more PAC files. A PAC authority can
belong to only one group.
1. To create a new group in the Manage PACs window, click New Group. A group consists of one or more authority
servers that the user can trust. To rename the group, right-click the group and choose Rename. You can also
rename the group by clicking it and typing the new name.
2. When you create a new group, you can either import a PAC file into it using the Import button or you can move a
PAC from another group to the new group.
1. To import a PAC, click Import. The Import EAP-FAST PAC File window appears. Do the following:
• Click Browse and select a PAC file to import. The default location is C:/Program Files/ORiNOCO.
• Select the PAC file (*.pac) and click Open. The file appears in the PAC File Name box.
— If you try to import a PAC file with the same PAC ID as a previously imported PAC file, you are asked
to update the existing PAC. If you click Yes, the existing PAC is replaced by the new one from the
imported file.
— If the PAC file was imported successfully, the following message appears: "EAP-FAST PAC file was
imported and is ready for use.” Click OK to return to the PAC Import window.
• If the Enter Password window appears, enter the PAC file password, which can be obtained from you
system administrator, and click OK.
NOTE: PAC file passwords are optional. The PAC authority determines whether to issue PAC files that require
user-supplied passwords. Nevertheless, all PAC files (even those without passwords) are encrypted
and protected. PAC file passwords are different from EAP-FAST passwords and need to be entered
only once, at the time a PAC is imported.
• Click one of these PAC store options to determine where the imported PAC file will be stored and by whom
it will be accessible
— Global - PACs that are stored in the global PAC store can be accessed and used by any user at any
logon stage. Global PACs are available before or during logon or after the user is logged off if the
profile is not configured with the No Network Connection Unless User is Logged In option.
— Private - PACS that are stored in the private store can be accessed and used only by the user who
provisioned them or the system administrator. They are not accessible until the user is logged onto the
local system. This is the default option.
2. Click Import. The PAC file appears under the selected group.
3. To delete a group, select the group and click Delete. You can also delete the group by right-clicking the group
and choosing Delete.
6. To close the Manage PACs window, click Close.
7. Click OK, when you have completed the configuring of EAP-FAST.
Using EAP-TLS Security
To use EAP-TLS security In the ORiNOCO Client Utility, access the Security Tab in the Profile Management window.