10.Verify the device is authenticated by reviewing the Status tab. When the device is property configured, the Status tab indicates the device is Authenticated and the method used.

11.The sign-on screen is displayed after a reboot.

Note: See Configuring the Profile (page 8-17)for more details.

If a user enters invalid credentials and clicks OK, the device associates but does not authenticate. The user is again prompted to enter credentials.

If the user clicks the Cancel button, the device does not associate. The user is not prompted again for credentials until:

•the device is rebooted,

•the radio is disabled then enabled,

•the Reconnect button on the Diags tab is clicked or

•the profile is modified and the Commit button is clicked.

Windows Certificate Store vs. Certs Path

Note: It is important that all dates are correct on the Thor VM1 and host computers when using any type of certificate. Certificates are date sensitive and if the date is not correct authentication will fail.

User Certificates

EAP-TLS authentication requires a user certificate. The user certificate must be stored in the Windows certificate store.

•To generate the user certificate, see Generate a User Certificate (page 8-33).

•To import the user certificate into the Windows certificate store, seeInstall a User Certificate (page 8-37).

•A Root CA certificate is also needed. Refer to the section below.

Root CA Certificates

Root CA certificates are required for EAP/TLS, PEAP/GTC and PEAP/MSCHAP. Two options are offered for storing these certificates. They may be imported into the Windows certificate store or copied into the Certs Path directory.

8 - 15