Hand Held Products DOLPHIN 7600, User Manual

Page: 71 / 108

Dolphin® 7600 Series User’s Guide Rev B 7 - 15
Server Tab
The Server tab controls how the Client authenticates the server that handles the 802.1X protocol on the network side. This
applies only to the TLS, TTLS, and PEAP authentication methods and is used to tell the Client what server credentials to accept
from the authentication server to verify the server. The Client uses this information to verify that the Client is communicating with
a trusted server.
Field Description
Do not validate server
certificate chain If this option is selected, the server certificate received during the TLS/TTLS/PEAP message
exchange is not validated.
Certificate issuer
must be This is the certificate authority used during TLS/TTLS/PEAP message exchange. Any Trusted
CA is the default selection and means that any certificate authority can be used during
authentication.
Both trusted intermediate certificate authorities and root authorities whose certificates exist in
the system store are available for selection in the drop-down list.
Allow intermediate
certificates This option enables unspecified certificates to be in the server certificate chain between the
server certificate and the certificate authority selected in the
Certificate issuer must be drop-
down list.
This option also allows the server certificate received during negotiation to be issued directly by
the certificate authority or by one of its intermediate certificate authorities. If not selected, the
selected Certificate issuer must have directly issued the server certificate.
Server name must be This is either the server name or the domain the server belongs to, depending on which option
is selected below the text field.
During authentication, this name will be compared to the server certificate’s
Subject: CN field.
Must match exactly When selected, the server name entered must match the server name found on the certificate
exactly.
Must contain domain
name When selected, the server name field identifies a domain and the certificate must have a server
name belonging to this domain or to one of its sub-domains (e.g., zeelans.com, where the
server is blueberry.zeelans.com).