User's Manual

Setting up Profile Security
Step 2 of 2: PEAP Server
Certificate Issuer
The server certificate received during the PEAP message exchange must have been issued by this
certificate authority. Trusted intermediate certificate authorities and root authorities whose certificates
exist in the system store are available for selection in the list box. If Any Trusted CA is selected, any CA
in the list is acceptable.
● Allow intermediate certificates: The server certificate received during negotiation may have been
issued directly by the certificate authority indicated in the “Certificate issuer” field, or additionally by
one of its intermediate certificate authorities. Check this box to allow a number of unspecified
certificates to be in the server certificate chain between the server certificate and the specified CA.
If unchecked, then the specified CA must have directly issued the server certificate.
Specify Server/Certificate Name
Click this option if you want to specify your server/certificate name.
● Server name must match exactly: When selected, the server name entered must match exactly
the server name found on the certificate. The server name should include the complete domain
name (e.g., Servername.Domain name) in this field.
● Domain name must end in specified name: When selected, the server name field identifies a
domain and the certificate must have a server name belonging to this domain or to one of its sub-
domains (e.g. zeelans.com, where the server is blueberry.zeelans.com)
Note: These parameters should be obtained from the system administrator.
LEAP Authentication
Name Description
Use the Windows logon user name and
password
Selecting this feature, the user credentials are retrieved from the Windows Logon process.
Prompt for the user name and
password
Selecting this feature, prompts for user name and password before you connect to the wireless network.
The user name and password must be first set in the authentication server by the system administrator.
file:///C|/CX2%20Muroc%20UG/6-15-04/wepsetup.htm (16 of 19) [6/15/2004 3:40:10 PM]