HX2 Reference Guide - Delfi

Sign-On vs. Stored CredentialsSign-On vs. Stored CredentialsWhen using wireless security that requires a user name and password to be entered, the Summit Client Utility offers thesechoices:• The Username and Password may be entered on the Credentials screen. If this method is selected, anyone using thedevice can access the network.• The Username and Password are left blank on the Credentials screen. When the device attempts to connect to the network,a sign on screen is displayed. The user must enter the Username and Password at that time to authenticate.How to: Use Stored Credentials1. After completing the other entries in the profile, click on the Credentials button.2. Enter the Username and Password on the Credentials screen and click the OK button.3. Click the Commit button.4. For LEAP and WPA/LEAP, configuration is complete.5. For PEAP-MSCHAP and PEAP-GTC, importing the CA certificate into the Windows certificate store is optional.6. For EAP-TLS, import the CA certificate into the Windows certificate store. Also import the User Certificate into the Windowscertificate store.7. Access the Credentials screen again. Make sure the Validate server and Use MS store checkboxes are checked.8. The default is to use the entire certificate store for the CA certificate. Alternatively, use the Browse button next to theCA Cert (CA Certificate Filename) on the Credentials screen to select an individual certificate.9. For EAP-TLS, also enter the User Cert (User Certificate filename) on the credentials screen by using the Browse button.10. If using EAP FAST and manual PAC provisioning, input the PAC filename and password..11. Click the OK button then the Commit button.12. If changes are made to the stored credentials, click Commit to save those changes before making any additionalchanges to the profile or global parameters.13. Verify the device is authenticated by reviewing the Status tab. When the device is property configured, the Status tabindicates the device is Authenticated and the method used.Note: See Configuring the Profile for more details.Note: If invalid credentials are entered into the stored credentials, the authentication will fail. No error message isdisplayed and the user is not prompted to enter valid credentials.How to: Use Sign On Screen1. After completing the other entries in the profile, click on the Credentials button. Leave the Username and Passwordblank. No entries are necessary on the Credentials screen for LEAP or LEAP/WPA.2. For PEAP-MSCHAP and PEAP-GTC, importing the CA certificate into the Windows certificate store is optional.3. For EAP-TLS, import the CA certificate into the Windows certificate store. Also import the User Certificate into the Windowscertificate store.4. Access the Credentials screen again. Make sure the Validate server and Use MS store checkboxes are checked.5. The default is to use the entire certificate store for the CA certificate. Alternatively, use the Browse button next to theCA Cert (CA Certificate Filename) on the Credentials screen to select an individual certificate.6. For EAP-TLS, also enter the User Cert (User Certificate filename) on the credentials screen by using the Browse button.7. Click the OK button then the Commit button.8. When the device attempts to connect to the network, a sign-on screen is displayed.9. Enter the Username and Password. Click the OK button.E-EQ-HX2RG-M [ 214 ] HX2 Reference Guide