Motorola MK4000 MicroKiosk, Product Reference Manual

Page: 79 / 136

Wireless Configuration B - 11
Authentication
Select an available authentication type from the drop-down list. The options listed are based on the selected
Security Mode as shown in
Table B-7 .
The authentication types, other than None , all use IEEE 802.1x authentication to ensure that only valid users and
sometimes servers can connect to the network. Each authentication type uses a different scheme using various
combinations of tunnels, username/passwords, user certificates, server certificates, and Protected Access
Credentials (PACs).
Table B-7
Security Modes
Security Mode
Authentication
Types
Encryption Types
Pass-phrase/Hexkey
Configuration
Legacy (Pre-WPA) None, EAP-TLS,
EAP-FAST, PEAP,
LEAP, TTLS Open,
WEP-40 (40/24),
WEP-104 (104/24),
TKIP, AES Enabled. User input required with
pass-phrase/hex key configuration.
WPA - Personal None TKIP Enabled. User input required with
pass-phrase/hex key configuration.
WPA2 - Personal None AES Enabled. User input required with
pass-phrase/hex key configuration.
WPA - Enterprise EAP-TLS, EAP-FAST,
PEAP, LEAP, TTLS TKIP Disabled. No user input required
for encryption key.
WPA2 - Enterprise EAP-TLS, EAP-FAST,
PEAP, LEAP, TTLS AES Disabled. No user input required
for encryption key.
Table B-8
Authentication Options
Authentication Description
None Default setting when authentication is not required on the network.
EAP-TLS Select this option to enable EAP-TLS authentication. A user certificate is required; validating
the server certificate is optional.
EAP-FAST Select this option to enable EAP-FAST authentication. This type uses a PAC (Protected
Access Credential) to establish a tunnel and then uses the selected tunnel type to verify
credentials. PACs are handled behind the scenes, transparent to the user. Automatic PAC
provisioning can, depending on the tunnel type, require a user certificate and the validation of a
server certificate. Manual PAC provisioning is currently not supported.