91R5900102 /11 ClickShare CX-20
5.12 Wi-Fi settings, Wireless Client, EAP-TLS
About EAP-TLS
EAP-TLS (Transport Layer Security) is an EAP method based on certificates which allows mutual
authentication between client and server. It requires a PKI (Public Key Infrastructure) to distribute server and
client certificates. For some organizations this might be too big of a hurdle, for those cases EAP-TTLS and
PEAP provide good alternatives. Even though a X.509 client certificate is not strictly required by the standard
it is mandatory in most implementations including for ClickShare. When implemented using client certificates,
EAP-TLS is considered one of the most secure EAP methods. The only minor disadvantage, compared to
PEAP and EAP-TTLS, is that the user identity is transmitted in the clear before the actual TLS handshake is
performed. EAP-TLS is supported via SCEP, INDES or manual certificate upload.
How to start up for EAP-TLS
1. Select EAP-TLS from the drop down list next to Authentication Mode.
Image 5–20 Wi-Fi Settings, Wireless Client, EAP-TLS
2. Fill out a Corporate SSID.
The SSID of your corporate wireless infrastructure to which the ClickShare Buttons will connect.
3. Fill out the Domain and Identity.
4. Select the certification method. Click on the drop down box and select the desired method.
• Manually provide Client & CA certificates
• Auto enrollment via SCEP
CX-20 Configurator