26 • 3-Series Control Systems Reference Guide – DOC. 7150B
802.1X
802.1X is an IEEE network standard designed to enhance the security of wireless
and Ethernet LANs. It is widely used in corporate networks to provide an
authentication mechanism for devices wishing to connect to the network. The
standard relies on the exchange of messages between the device and the
network's host, or authentication server.
To enable and configure 802.1X for the control system:
1. Issue the 8021XAUthenticate on command to enable 802.1X.
2. Issue the 8021XVALidateserver on command to allow the control
system to verify the identity of the network's authentication server.
Issuing this command allows certificates signed by trusted CAs
(Certificate Authorities) to be selected, which is used during server
validation.
NOTE: Using the 8021XVALidateserver command is optional based on
the recommendation of the network administrator, but the option should
be enabled for most applications.
3. Issue the 8021XMEThod [password | certificate] command to select
the secure password method or the certificate method depending on the
network administrator's requirement.
4. If the certificate method was selected, issue the CERTIFicate ADD
MACHINE {Certificate_Name} {Certificate_UID] {Password}
command to add the machine certificate supplied by the network
administrator to the certificate store. Refer to “Add a Certificate” on
page 21 for more information on loading certificates.
NOTE: The machine certificate is an encrypted PFX file that will be
supplied by the network administrator, along with the certificate
password. The machine certificate is used to verify the identity of the
control system.
5. If the password method was selected, enter the username and password
supplied by the network administrator:
a. Issue the 8021XUSERname [username] command to enter the
username supplied by the network administrator.
b. Issue the 8021XPASSword [password] command to enter the
password supplied by the network administrator.
NOTE: A machine certificate is not required for the password method.