Configuring EAP-FAST authentication
EAP-FAST is an authentication method that was developed by Cisco Systems. Similar to PEAP authentication, EAP-FAST
authentication encrypts EAP transactions within a TLS tunnel. Although PEAP uses a server-side digital certificate to
configure the TLS tunnel, EAP-FAST uses a .pac file.
The .pac file that the BlackBerry devices and the authentication server share contains secret keys that are unique to the
BlackBerry devices. The EAP-FAST master key on the authentication server generates the .pac file. EAP-FAST uses
the .pac file to open the TLS tunnel and authenticates the user credentials through the TLS tunnel.
Configure EAP-FAST authentication
1.
Distribute the .pac file to the wireless client over a network connection that is designed to be secure using automatic
PAC provisioning.
2.
Configure each wireless access point to connect to the access control server and a DHCP server.
3.
Verify that the DHCP server can provide the following information to the wireless client:
• IP address or network
• default gateway
• IP address of the DNS server
4.
Configure the access control server.
After you finish:
• For information about the automatic provisioning process, see the documentation for your organization’s
authentication server.
• For information about configuring wireless access points, see the documentation for the access points.
• For information about configuring the access control server, see the documentation for the access control server.
Related information
Prerequisites: Distributing a certificate using the BlackBerry Desktop Manager,
252
Creating and configuring Wi-Fi profiles,
235
Administration Guide
Configuring encryption and authentication methods for Wi-Fi enabled BlackBerry devices
259