LXE MX5X, Reference Manual

Page: 188 / 296

Summit Client Configuration 171
E-EQ-MX5CERG-D MX5X Reference Guide
Windows Certificate Store vs. Certs Path
User Certificates
EAP-TLS authentication requires a user certificate. The user certificate must be stored in the
Windows certificate store.
To generate the user certificate, follow the instructions in “Generating a User Certificate for the
Mobile Device”, later in this chapter.
Import the user certificate into the Windows certificate store by following the instructions in
“Installing a User Certificate on the Mobile Device”, later in this chapter.
A Root CA certificate is also needed for EAP-TLS. Refer to the section below.
Root CA Certificates
Root CA certificates are required for PEAP/MSCHAP, PEAP/GTC, and EAP-TLS. Two options
are offered for storing these certificates. They may be imported into the Windows certificate store
or copied into the Certs Path directory.
How To: Use Windows Certificate Store
1. Follow the instructions later in this chapter for “Downloading a Root CA Certificate to a PC”.
2. To import the certificate into the Windows store, follow the instructions for “Installing a Root
CA Certificate on the Mobile Device” later in this chapter.
3. When completing the Credentials screen for the desired authentication, be sure to check the
Use MS store checkbox after checking the Validate server checkbox.
4. The default is to use all certificates in the store. If this is OK, skip to Step #8.
5. Otherwise, to select a specific certificate click on the Browse (…) button.
Figure 5-10 Choose Certificate
6. Uncheck the Use full trusted store checkbox.
7. Select the desired certificate and click the Select button to return the selected certificate to the
CA Cert textbox.
8. Click OK to exit the Credentials screen and then Commit to save the profile changes.