![background image](http://html1.mh-extra.com/html/barco/clickshare-cse-800/clickshare-cse-800_installation-manuals_3845691084.webp)
R5900049 /07
ClickShare CSE-800
84
Using manually upload of certificates
Select the radio button next to
Provide certificates manually
and click
Next
.
If your current setup does not support SCEP or you prefer not to use it but you still want to benefit of the
mutual authentication EAP-TLS offers, it is also possible to manually upload the necessary certificates.
Image 6-30
Necessary Data to continue:
Domain
The company domain for which you are enrolling, should match with the one defined
in your Active Directory.
Identity
Identity of the user account in the Active Directory which will be used by the
ClickShare Buttons to connect to the corporate network. When using EAP-TLS make
sure that the necessary mapping exists between the Client Certificate issued by your
CA and this user account.
Corporate SSID
The SSID of your corporate wireless infrastructure to which the ClickShare Buttons
will connect.
Click
Next
to continue with the upload of the client certificate.
Click
Upload Client Certificate
.
The client certificate you provide should be signed by the authoritative root CA in your domain and should be
linked to the user you specify in the Identity field. Also, make sure that the client certificate you provide
contains the private key
–
this is necessary to set up the TLS connection successfully.
ClickShare supports 2 formats for uploading a client certificate:
•
PKCS#12 (.pfx)
- An archive file format for storing multiple cryptography objects.
•
Privacy Enhanced Mail (.pem)
–
A Base64 encoded DER certificate stored between 2 tags:
"———BEGIN CERTIFICATE———"
and
"———END CERTIFICATE———"
.
When the provided PKCS#12 file also contains the necessary CA certificate the Base Unit will
extract it and verify the chain of trust to avoid that you have to separately provide the CA certificate.
CA certificate
The CA certificate is the certificate of the authoritative root CA in your domain and will be used in setting up
the EAP-TLS connection. During the wizard the Base Unit will ensure that it can validate the chain of trust
between the Client and CA certificates you provide.
ClickShare supports the common .crt file extension which can contain a Base64 encoded DER certificate.
When having problems connecting the Button to your corporate network, to get feedback from the
Button please have a look at the ClickShare Client log. This log can be enabled by holding the Shift
key when starting the Client executable. Look for the lines
“
EDSUSBDongleConnection::
mpParseDongleMessages
”
. An error code and a short summary of the issue should be logged.
Содержание ClickShare CSE-800
Страница 1: ...ENABLING BRIGHT OUTCOMES Installation manual ClickShare CSE 800...
Страница 20: ......
Страница 23: ...23 R5900049 07 ClickShare CSE 800 Introduction to the Installation Guide 1...
Страница 25: ...25 R5900049 07 ClickShare CSE 800 CSE 800 Specifications 2...
Страница 35: ...35 Overview Environmental Condition Check Basic Workflow R5900049 07 ClickShare CSE 800 Getting started 3...
Страница 46: ...R5900049 07 ClickShare CSE 800 46 CSE 800 Installation...
Страница 52: ...R5900049 07 ClickShare CSE 800 52 Preparing the buttons...
Страница 105: ...105 R5900049 07 ClickShare CSE 800 Firmware updates 7...
Страница 107: ...107 R5900049 07 ClickShare CSE 800 Troubleshooting 8...
Страница 111: ...111 R5900049 07 ClickShare CSE 800 Environmental information 9...