Barco C5011S, Installation Manual

Page: 103 / 158

103 R5900120 /03 ClickShare CX-50 Gen2
5.14 Wi-Fi settings, Wireless Client, EAP-TLS
About EAP-TLS
EAP-TLS (Transport Layer Security) is an EAP method based on certificates which allows mutual
authentication between client and server. It requires a PKI (Public Key Infrastructure) to distribute server and
client certificates. For some organizations this might be too big of a hurdle, for those cases EAP-TTLS and
PEAP provide good alternatives. Even though a X.509 client certificate is not strictly required by the standard
it is mandatory in most implementations including for ClickShare. When implemented using client certificates,
EAP-TLS is considered one of the most secure EAP methods. The only minor disadvantage, compared to
PEAP and EAP-TTLS, is that the user identity is transmitted in the clear before the actual TLS handshake is
performed. EAP-TLS is supported via SCEP, INDES or manual certificate upload.
How to start up for EAP-TLS
1.
Select EAP-TLS from the drop down list next to Authentication Mode .
Image 5–23 Wi-Fi Settings, Wireless Client, EAP-TLS
2. Fill out a
Corporate SSID
.
The SSID of your corporate wireless infrastructure to which the ClickShare Buttons will connect.
3. Fill out the Domain and Identity .
4. Select the certification method. Click on the drop down box and select the desired method.
• Manually provide Client & CA certificates
• Auto enrollment via SCEP
CX-50 Gen2 Configurator