R5900049 /07 ClickShare CSE-80084
Using manually upload of certificates
Select the radio button next to Provide certificates manually and click Next.
If your current setup does not support SCEP or you prefer not to use it but you still want to benefit of the
mutual authentication EAP-TLS offers, it is also possible to manually upload the necessary certificates.
Image 6-30
Necessary Data to continue:
Domain The company domain for which you are enrolling, should match with the one defined
in your Active Directory.
Identity Identity of the user account in the Active Directory which will be used by the
ClickShare Buttons to connect to the corporate network. When using EAP-TLS make
sure that the necessary mapping exists between the Client Certificate issued by your
CA and this user account.
Corporate SSID The SSID of your corporate wireless infrastructure to which the ClickShare Buttons
will connect.
Click Next to continue with the upload of the client certificate.
Click Upload Client Certificate.
The client certificate you provide should be signed by the authoritative root CA in your domain and should be
linked to the user you specify in the Identity field. Also, make sure that the client certificate you provide
contains the private key – this is necessary to set up the TLS connection successfully.
ClickShare supports 2 formats for uploading a client certificate:
• PKCS#12 (.pfx) - An archive file format for storing multiple cryptography objects.
• Privacy Enhanced Mail (.pem) – A Base64 encoded DER certificate stored between 2 tags:
"———BEGIN CERTIFICATE———" and "———END CERTIFICATE———".
When the provided PKCS#12 file also contains the necessary CA certificate the Base Unit will
extract it and verify the chain of trust to avoid that you have to separately provide the CA certificate.
CA certificate
The CA certificate is the certificate of the authoritative root CA in your domain and will be used in setting up
the EAP-TLS connection. During the wizard the Base Unit will ensure that it can validate the chain of trust
between the Client and CA certificates you provide.
ClickShare supports the common .crt file extension which can contain a Base64 encoded DER certificate.
When having problems connecting the Button to your corporate network, to get feedback from the
Button please have a look at the ClickShare Client log. This log can be enabled by holding the Shift
key when starting the Client executable. Look for the lines “EDSUSBDongleConnection::
mpParseDongleMessages”. An error code and a short summary of the issue should be logged.
CSE-800 Configurator
To Next Page
Loading...
Need help?
General
