Honeywell VX3Plus, Reference Manual, Page: 240 / 282

5. The default is to use the entire certificate store for the CA certificate. Alternatively, use the Browse button next to the
CA Cert (CA Certificate Filename) on the Credentials screen to select an individual certificate.
6. For EAP-TLS, also enter the User Cert (User Certificate filename) on the credentials screen by using the Browse
button.
7. Click the OK button then the Commit button.
8. When the device attempts to connect to the network, a sign-on screen is displayed.
9. Enter the Username and Password. Click the OK button.
10. Verify the device is authenticated by reviewing the Status tab. When the device is property configured, the Status Tab
indicates the device is Authenticated and the method used.
11. The sign-on screen is displayed after a reboot.
Note: See Configuring the Profile for more details.
If a user enters invalid credentials and clicks OK , the device associates but does not authenticate. The user is again prompted
to enter credentials.
If the user clicks the Cancel button, the device does not associate. The user is not prompted again for credentials until:
l
the device is rebooted,
l
the radio is disabled then enabled,
l
the Reconnect button on the Diags Tab is clicked or
l
the profile is modified and the Commit button is clicked.
Windows Certificate Store vs. Certs Path
Note: It is important that all dates are correct on the VX3Plus and host computers when using any type of
certificate. Certificates are date sensitive and if the date is not correct authentication will fail.
User Certificates
EAP-TLS authentication requires a user certificate. The user certificate must be stored in the Windows certificate store.
l
To generate the user certificate, see Generating a User Certificate .
l
To import the user certificate into the Windows certificate store, see Installing a User Certificate .
l
A Root CA certificate is also needed. Refer to the section below.
Root CA Certificates
Root CA certificates are required for EAP/TLS, PEAP/GTC and PEAP/MSCHAP. Two options are offered for storing these
certificates. They may be imported into the Windows certificate store or copied into the Certs Path directory.
5-20