SEH EPS TSE Server 8, Руководство пользователя

Страница: 26 / 68

Manual [en] 24
Both RADIUS and Fiscal Server require a valid, digital certificate signed by a CA.
This requires a PKI (Public Key Infrastructure).

An authentication certificate has been created for the Fiscal Server.

The root CA certificate of the certification authority that issued the certificate
of the authentication server (RADIUS) is available.
1. Install the authentication certificate on the Fiscal Server

22.
2. Install the root CA certificate of the certification authority that issued the cer -
tificate of the authentication server (RADIUS) on the Fiscal Server

22.
3. Start the EPS TSE Server Control Center.
4. Select the SETTINGS – Authentication menu item.
5. Select TLS from the Authentication method list.
6. Click Save to confirm.
 The settings will be saved.
Configuring EAP-TTLS
In EAP-TTLS (Tunneled Transport Layer Security), a TLS-protected tunnel is used
for exchanging secrets. The method consists of two phases:
Outer authentication: An encrypted TLS (Transport Layer Security) tunnel is
created between Fiscal Server and RADIUS server. Only the RADIUS server
authenticates itself to the Fiscal Server using a certificate that was signed by a
CA.
Inner authentication: In the tunnel the authentication (via CHAP, PAP, MS-CHAP,
or MS-CHAPv2) takes place.

A user account for the Fiscal Server is set up on the RADIUS server.
1. Start the EPS TSE Server Control Center.
2. Select the SETTINGS – Authentication menu item.
3. Select TTLS from the Authentication method list.
4. Enter the user name and the password that are used for the configuration of
the Fiscal Server on the RADIUS server.
5. Select the settings to secure communication in the TLS tunnel.
6. Click Save to confirm.

The settings will be saved.
Configuring PEAP
With PEAP (Protected Extensible Authentication Protocol), an encrypted TLS
(Transport Layer Security) tunnel is established between the Fiscal Server and
the RADIUS server. Only the RADIUS server authenticates itself to the Fiscal
WARNING
Follow the instructions below in the given order. If you
do not follow the order, the Fiscal Server might not be
reachable in the network.
In this case you will have to reset the Fiscal Server
parameters

27.