12 • Crestron Flex Phones
Security Reference Guide — Doc. 9313A
802.1x Configuration
2. Turn on the IEEE 802.1x Configuration toggle to turn on 802.1X authentication.
3. Select the desired 802.1X authentication method from the Authentication Method drop-
down menu:
l
Select EAP-TLS Certificate to authenticate using a client certificate.
l
Select EAP MSCHAP V2 to authenticate using a username and password.
4. If EAP MSCHAP V2 is selected for Authentication Method, enter the username and
password required for the client authentication.
5. Turn on the Enabled Authentication Server Validation toggle to turn on server validation. If
turned on, the 802.1X supplicant will validate the authentication server's certificate.
6. If Enabled Authentication Server Validation is turned on and if your server supports OCSP
(Online Certificate Status Protocol), turn on the OCSP mode toggle to require a valid
OCSP stapling response for all not-trusted certificates in the server certificate chain.
7. Select trusted CAs (Certificate Authorities) from the Trusted Certificate Authorities
selections to be used for server validation.
NOTE: For more information on configuring trusted certificate authorities, refer to
Configure Trusted Certificate Authorities on page 13
l
Select the check box to the left of a CA to select it as a trusted CA.
l
Enter a search term into the text field at the top of the CA menu to search for and
display CAs that match the search term.
8. Select Save Changes from the Action menu.
