Chapter 5 — Network Support
CK60 Mobile Computer with Windows Mobile User’s Manual 153
•Set Association to “Network EAP” and Encryption to either “WEP”
or “CKIP.”
2 Enter your unique Subject Name and User Name of the corresponding
certificate installed on your CK60 to use this protocol.
3 Tap Get Certificates to obtain or import server certificates (page 155).
4 Tap Additional Settings to set server certificate validation and trust.
To configure additional TLS settings
1 Check Validate Server Certificate to verify the identity of the
authentication server based on its certificate when using TLS.
2 Tap Root CA, select a root certificate, then tap OK to return to the TLS
settings.
3 Enter the Common Names of trusted servers.
4 Tap ok to return to the Security page.
TTLS (EAP-Tunneled TLS)
This protocol provides authentication like EAP-TLS (see page 152) but
does not require user certificates. User authentication is done using a
password or other credentials that are transported in a securely encrypted
“tunnel” established using server certificates.
EAP-TTLS works by creating a secure, encrypted tunnel through which
you present your credentials to the authentication server. Thus, inside
EAP-TTLS there is another inner authentication protocol that you must
configure via Additional TTLS Settings.
Use “TTLS” to configure EAP-TTLS as an authentication protocol, select
“Open,” “WPA,” “WPA2,” or “Network EAP” as an association mode.
Note: If these fields are left blank, the client will accept any
authentication server with a valid certificate. For increased security, you
should specify exactly which authentication servers you expect to use.