Step 1 of 3: EAP-FAST Provisioning
With CCXv4, EAP-FAST supports two modes for provisioning:
Server-Authenticated Mode: Provisioning inside a server authenticated TLS tunnel.
Server-Unauthenticated Mode: Provisioning inside an unauthenticated TLS tunnel.
NOTE
: Server-Authenticated Mode provides significant security advantages over Server-Unauthenticated Mode
even when EAP-MS-CHAP-V2 is being used as an inner method. This mode protects the EAP-MS-CHAP-V2
exchanges from potential Man-in-the-Middle attacks by verifying the server’s authenticity before exchanging MS-
CHAP-V2. Therefore, Server-Authenticated Mode is preferred whenever it is possible. EAP-FAST peer must use
Server-Authenticated Mode whenever a certificate or public key is available to authenticate the server and ensure
the best security practices.
Provisioning of Protected Access Credentials (PAC)
:
EAP-FAST uses a PAC key to protect the user credentials that are exchanged. All EAP-FAST authenticators are
identified by an authority identity (A-ID). The local authenticator sends its A-ID to an authenticating client, and
the client checks its database for a matching A-ID. If the client does not recognize the A-ID, it requests a new
PAC.
NOTE
: If the provisioned Protected Access Credential (PAC) is valid, the WiFi connection utility does not prompt
the user for acceptance of the PAC. If the PAC is invalid, the WiFi connection utility fails the provisioning
automatically. A status message is displayed in the
Wireless Event Viewer
that an administrator can review on the
user's computer.
1. Verify that
Disable EAP-FAST Enhancements (CCXv4)
is not selected.
Allow unauthenticated
Intel® PROSet/Wireless WiFi Connection Utility User's Guide
Содержание 512AN_HMW
Страница 59: ...Back to Contents Trademarks and Disclaimers Intel PROSet Wireless WiFi Connection Utility User s Guide ...
Страница 105: ...Back to Top Back to Contents Trademarks and Disclaimers Intel PROSet Wireless WiFi Connection Utility User s Guide ...
Страница 136: ...Back to Top Back to Contents Trademarks and Disclaimers Intel PROSet Wireless WiFi Connection Utility User s Guide ...