Shure MXA310 - Encryption; Set up the 802.1 X Protocol for a Device

Shure Incorporated
28/42
•
•
•
•
◦
1.
◦
1.
2.
•
1.
2.
3.
4.
5.
6.
1.
2.
3.
4.
Encryption
Audio is encrypted with the Advanced Encryption Standard (AES-256), as specified by the US Government National Institute of
Standards and Technology (NIST) publication FIPS-197. Shure devices that support encryption require a password to make a
connection. Encryption is not supported with third-party devices.
In Designer, you can turn on encryption for all devices in a room: [Your room] > Settings > Audio encryption.
To activate encryption in the web application, go to Settings > Audio encryption > Enable encryption.
Important: For encryption to work:
All Shure devices on your network must use encryption.
Disable AES67 in Dante Controller. AES67 and AES-256 cannot be used at the same time.
Set Up the 802.1X Protocol for a Device
Select Shure devices support the IEEE 802.1X port access protocol for network authentication.
Important: To use the 802.1X security protocol with Shure devices, set the network switch to multiple host authentication. You
must also make accommodations to allow the audio network interface to connect to the network. The audio network interface
doesn't support the 802.1X protocol.
Setting up 802.1X is a two-part process.
To set up 802.1X, you will need:
Details about your authentication server's EAP method
Any required credentials or certificates for that method, for example:
MD5 and PWD
User ID and passphrase
TLS and PEAP
User ID and passphrase
Certificate (with certificate types) in the .PEM format
Any passwords to access the devices if they are password locked
Step 1: Configure Settings on Test Network
Connect the device to your test network and discover it using Designer.
Initialize the device if necessary. Open the device and go to Settings > Network > 802.1X.
Choose your EAP method from the menu.
Enter any required credentials and load any necessary certificates.
Press Save to save the 802.1X settings to the device.
Enable 802.1X and select Reboot later.
Step 2: Connect to a Credentialed Network
Connect your device to the credentialed network.
Ensure that Designer is connected to the credentialed network.
Go to Settings > Network > 802.1X and enable 802.1X. Reboot the device for the 802.1X settings to take effect.
If the device doesn’t appear in Designer after the reboot, reconnect to the test network and check all 802.1X settings for
the selected EAP method.