Intermec 751G Choosing Between Microsoft and Funk Security, Configuring Funk Security, Eap-Tls

Chapter 5 — Network Support

Authentication (continued)

EAP-TLS	Based on the TLS (Transport Layer Security) protocol widely used to secure web sites. This requires
(Transport Layer	both the user and authentication server have certificates for mutual authentication. While cryptically
Security)	strong, this requires corporations that deploy this to maintain a certificate infrastructure for all users.
EAP-TTLS	This protocol provides authentication like EAP-TLS (see page 120) but does not require certificates
(Tunneled	for every user. Instead, authentication servers are issued certificates. User authentication is done using
Transport Layer	a password or other credentials that are transported in a securely encrypted “tunnel” established using
Security)	server certificates.
	EAP-TTLS works by creating a secure, encrypted tunnel through which you present your credentials
	to the authentication server. Thus, inside EAP-TTLS there is another inner authentication protocol that
	you must configure via Additional TTLS Settings.

The 751G provides three types of security for your wireless network: Wi-Fi Protected Access 2 (WPA2/802.11i), WPA, and WEP. 802.1x should be referred to as an authentication method used for WPA and WPA2. Another authentication method for WPA and WPA2 would be the Pre-Shared Key (PSK).

Choosing Between Microsoft and Funk Security

Before you can implement a security solution on the 751G, you need to choose between Microsoft and Funk security:

•By default, Funk security is enabled. It provides everything you get with Microsoft security plus the addition of Cisco Compatible Extensions features. It also provides additional authentication types like EAP-TTLS, LEAP, and EAP-FAST.

•Microsoft security, with its Microsoft Zero Config feature, is also available. To switch to Microsoft security, go to “Configuring Microsoft Security” on page 126 to start.

Note: Your security choice does not depend on your authentication server.

For example, you can choose Funk security if you use Microsoft Active

Directory® to issue certificates.

Configuring Funk Security

You can define up to four profiles for your Funk Odyssey security. Different profiles let your 751G communicate in different networks without having to change all of your security settings. For example, you can set up one profile for the manufacturing floor and one for the warehouse.

1Select Start > Settings > Control Panel, then double-tap the Intermec Settings icon.

2Tap (+) to expand Communications > 802.11 Radio > Funk Security.

120 751G Color Mobile Computer User’s Manual