Extensible Authentication Protocol - Transport Layer Security (Eap-Tls) - Cisco 7925G Deployment Manual

Extensible Authentication Protocol – Transport Layer Security (EAP-TLS)
Extensible Authentication Protocol Transport Layer Security (EAP-TLS) is using the TLS protocol with PKI to secure
communications to the authentication server.
TLS provides a way to use certificates for both user and server authentication and for dynamic session key generation.
Either the internal Manufacturing Installed Certificate (MIC) or a user installed certificate can be used for authentication.
EAP-TLS provides excellent security, but requires client certificate management.
Ensure that "Certificate CN Comparison" is selected when enabling EAP-TLS.
EAP-TLS also requires that a user account be created on the authentication server matching the common name of the certificate
imported into the Cisco Unified Wireless IP Phone 7925G.
It is recommended to use a complex password for this user account.
Cisco Unified Wireless IP Phone 7925G Deployment Guide 14