Mesa Wi-Fi 802 1 x PEAP and EAP-TLS

Mesa Wi-Fi 802. 1 x PEAP and EAP-TLS Authentication for Wi-Fi

Exporting a Certificate • This section, exporting a certificate, is provided for reference and testing purposes only! • This shows the method that I used to save a certificate for testing purposes. • Refer to other documentation for appropriate ways to issue and distribute certificates!

Exporting a Certificate • In the Certificate snap -in, find the certificate, right-click, choose All Tasks, choose Export

Exporting a Certificate • Click Next

Exporting a Certificate • Choose Yes, export the private key • Click Next

Exporting a Certificate • Choose Include all certificates in the certification path if possible

Exporting a Certificate • Create a password (write it down because you will need this password when you install the certificate) • Click Next

Exporting a Certificate • Click Browse and select a location and name to save the certificate • Click Next

Exporting a Certificate • Click Finish • Click OK

Importing the Certificate • Copy the certificate to the Mesa • Use File Explorer to find the. pfx file • Tap on the. pfx file and follow the instructions to install the certificate. • Use the password that you created for the certificate when it was exported.

Importing the Certificate • Enter password you created when the certificate was exported. • Tap More

Importing the Certificate • Tap Install • Tap ok

Importing the Certificate • Start > Settings > System > Certificates • Observe that a Personal certificate was installed (this is used for EAP-TLS, not required for PEAP) • Observe that no Intermediate certificates were imported (not needed for this)

Importing the Certificate • Observe that the root CA certificate is installed in the root certificate store (may be needed for PEAP)

Configuring PEAP • Select the network to configure the connection • My test network is using WPA 2 with AES Encryption

Configuring PEAP • Tap Finish • Observe that it is “Connecting”

Configuring PEAP • When prompted, enter the user name and password • Choose the Save password option if you don’t want to have to enter your password each time you connect to the Wi-Fi network. • Observe that it reports “Connected”

Configuring EAP-TLS • Select the wireless network to configure

Configuring EAP-TLS • My network is using WPA 2 with AES Encryption • Tap Next • Select Smart Card or Certificate for EAPTLS • Tap Properties

Configuring EAP-TLS • Observed that your certificate is listed. • Note: You will not be able to access this screen if there are no personal certificates installed on the Mesa. • Select the certificate.

Configuring EAP-TLS • Enter the appropriate user name • Tap OK • Observe that it is “Connecting”

Configuring EAP-TLS • Observe that it is “Connected”