Setup Pages

Refer to the EAP Authentication section on page 166 for further details on these security options. Refer to the Using the Site Survey tool section on page 18 for more information on using this feature.

Client certificate configuration

There are several ways in which a client certificate can be configured by an IT department. The client certificate and private key can both be incorporated into one file or split into two separate files. In addition, the file format used by these files could be PEM, DER, or PKCS12. These formats are described later in this section. The following table describes how to fill in the fields for each possible case.

Client Certificate Configuration

Certificate Configuration

Client Certificate Field

Private Key Field

 

 

 

Single file contains both the client certificate and

Enter the file name

Enter the same file name

the private key. Format is: PEM or DER.

 

 

 

 

 

First file contains the client certificate, second file

Enter the first file name

Enter the second file name

contains the private key. Format is: PEM or DER.

 

 

 

 

 

Single file contains both the client certificate and

Leave this field blank

Enter the file name

the private key. Format is: PKCS12

 

 

 

 

 

First file contains the client certificate, second file

not supported

not supported

contains the private key. Format is: PKCS12

 

 

 

 

 

AMX supports the following security certificates

PEM (Privacy Enhanced Mail)

DER (Distinguished Encoding Rules)

PKCS12 (Public Key Cryptography Standard #12)

PKCS12 files are frequently generated by Microsoft certificate applications.

Otherwise, PEM is more common.

Certificate files frequently use 5 file extensions. It can be confusing because there is not a one to one correspondence. The following table shows the possible file extension used for each certificate type:

Certificates and their Extensions

Certificate Type

Possible File Extensions

 

 

PEM

.cer

 

.pem

 

.pvk

 

 

DER

.cer

 

.der

 

 

PKCS12

.pfx

 

 

It is important to note which certificate types are supported by the different certificate fields used on the configuration screens (PEAP, TTLS, and TLS). The following table outlines the firmware fields and their supported certificate types.

Certificate Types Supported by the Modero Firmware

Configuration Field Name Certificate File Type Supported

Certificate Authority field

PEM and DER

 

 

Client Certificate field

PEM and DER

 

 

Private Key field

.PEM, DER, and PKCS12

MVP-8400i 8.4" Modero® ViewPoint® Touch Panel with Intercom

71

 

 

Page 85
Image 85
AMX MVP-8400i manual Client certificate configuration, Client Certificate Configuration, Certificates and their Extensions