220 likes | 252 Views
Mesa Wi-Fi 802.1x. PEAP and EAP-TLS Authentication for Wi-Fi. Exporting a Certificate. This section, exporting a certificate, is provided for reference and testing purposes only! This shows the method that I used to save a certificate for testing purposes.
E N D
Mesa Wi-Fi 802.1x PEAP and EAP-TLS Authentication for Wi-Fi
Exporting a Certificate • This section, exporting a certificate, is provided for reference and testing purposes only! • This shows the method that I used to save a certificate for testing purposes. • Refer to other documentation for appropriate ways to issue and distribute certificates!
Exporting a Certificate • In the Certificate snap-in, find the certificate, right-click, choose All Tasks, choose Export
Exporting a Certificate • Click Next
Exporting a Certificate • Choose Yes, export the private key • Click Next
Exporting a Certificate • Choose Include all certificates in the certification path if possible
Exporting a Certificate • Create a password (write it down because you will need this password when you install the certificate) • Click Next
Exporting a Certificate • Click Browse and select a location and name to save the certificate • Click Next
Exporting a Certificate • Click Finish • Click OK
Importing the Certificate • Copy the certificate to the Mesa • Use File Explorer to find the .pfx file • Tap on the .pfx file and follow the instructions to install the certificate. • Use the password that you created for the certificate when it was exported.
Importing the Certificate • Enter password you created when the certificate was exported. • Tap More
Importing the Certificate • Tap Install • Tap ok
Importing the Certificate • Start > Settings > System > Certificates • Observe that a Personal certificate was installed (this is used for EAP-TLS, not required for PEAP) • Observe that no Intermediate certificates were imported (not needed for this)
Importing the Certificate • Observe that the root CA certificate is installed in the root certificate store (may be needed for PEAP)
Configuring PEAP • Select the network to configure the connection • My test network is using WPA2 with AES Encryption
Configuring PEAP • Tap Finish • Observe that it is “Connecting”
Configuring PEAP • When prompted, enter the user name and password • Choose the Save password option if you don’t want to have to enter your password each time you connect to the Wi-Fi network. • Observe that it reports “Connected”
Configuring EAP-TLS • Select the wireless network to configure
Configuring EAP-TLS • My network is using WPA2 with AES Encryption • Tap Next • Select Smart Card or Certificate for EAP-TLS • Tap Properties
Configuring EAP-TLS • Observed that your certificate is listed. • Note: You will not be able to access this screen if there are no personal certificates installed on the Mesa. • Select the certificate.
Configuring EAP-TLS • Enter the appropriate user name • Tap OK • Observe that it is “Connecting”
Configuring EAP-TLS • Observe that it is “Connected”