Intermec CK61 - Using TTLS (EAP-Tunneled TLS)

Chapter 5 — Network Support
CK61 Mobile Computer with Windows Mobile User’s Manual 155
•Set Association to “WPA2” and Encryption to “TKIP” or “AES.”
•Set Association to “Network EAP” and Encryption to either
“WEP” or “CKIP.”
2 Enter your unique Subject Name and User Name of the corresponding
certificate installed on your CK61 to use this protocol.
3 Tap Get Certificates to obtain or import server certificates (page 157).
4 Tap Additional Settings to set server certificate validation and trust.
To configure additional TLS settings
1 Check Validate Server Certificate to verify the identity of the
authentication server based on its certificate when using TLS.
2 Tap Root CA, select a root certificate, then tap OK to return to the TLS
settings.
3 Enter the Common Names of trusted servers.
4 Tap ok to return to the Security page.
Using TTLS (EAP-Tunneled TLS)
This protocol provides authentication like EAP-TLS (see page 154) but
does not require user certificates. User authentication is done using a
password or other credentials that are transported in a securely encrypted
“tunnel” established using server certificates.
EAP-TTLS works by creating a secure, encrypted tunnel through which
you present your credentials to the authentication server. Thus, inside
EAP-TTLS there is another inner authentication protocol that you must
configure via Additional TTLS Settings.
Use “TTLS” to configure EAP-TTLS as an authentication protocol, select
“Open,” “WPA,” “WPA2,” or “Network EAP” as an association mode.
Note: If these fields are left blank, the client will accept any authentication
server with a valid certificate. For increased security, you should specify
exactly which authentication servers you expect to use.