Honeywell Thor VX9, User Manual, Page: 126 / 198

5 - 64
Certificates
Note: Please refer to the Security Primer to prepare the Authentication Server and Access Point for communication.
Note: It is important that all dates are correct on the Thor VX9 and host computers when using any type of certificate. Certificates
are date sensitive and if the date is not correct authentication will fail.
Root Certificates are necessary for EAP-TLS, PEAP/GTC and PEAP/MSCHAP.
1. Generate a Root CA Certificate (page 5-64) either from the Thor VX9 or from a PC.
2. If a PC was used to request the certificate, copy the certificate to the Thor VX9.
3. Install a Root CA Certificate (page 5-66).
User Certificates are necessary for EAP-TLS
1. Generate a User Certificate (page 5-68)either from the Thor VX9 or from a PC.
2. If a PC was used to request the certificate, Export a User Certificate (page 5-70) and copy the certificate to the Thor VX9.
3. Install a User Certificate (page 5-70).
Generate a Root CA Certificate
Note: It is important that all dates are correct on the Thor VX9 and host computers when using any type of certificate.
Certificates are date sensitive and if the date is not correct authentication will fail.
The easiest way to get the root CA certificate is to use a browser on a PC to navigate to the Certificate Authority. To request
the root CA certificate, open a browser to
http://<CA IP address>/certsrv.
Sign into the CA with any valid username and password.
If using the Windows Certificate Store, the Windows Account must have a password. The password cannot be left blank.
The Summit Client Utility uses the Windows user account credentials to access the Certificate Store. The Windows user
account credentials need not be the same as the wireless credentials entered in the Summit Client Utility.
It may be necessary to use a PC to request the certificate for devices with a Windows 7 operating system.
!