Radius Setting; Iv-1-1 Certificate Management - Draytek VigorAP 802 User Manual

IV-1 RADIUS Setting

IV-1-1 Certificate Management

When the local client and remote server are required to make certificate authentication (e.g., Radius
EAP-TLS authentication) for wireless connection and avoiding the attack of MITM, a trusted root
certificate authority (Root CA) will be used to authenticate the digital certificates offered by both
ends.
However, the procedure of applying digital certificate from a trusted root certificate authority is
complicated and time-consuming. Therefore, Vigor AP offers a mechanism which allows you to
generate root CA to save time and provide convenience for general user. Later, such root CA
generated by DrayTek server can perform the issuing of local certificate.
Root CA can be deleted but not edited. If you want to modify the settings for a Root CA, please
delete the one and create another one by clicking Create Root CA.
Click Create Root CA to open the following page. Type or choose all the information that the
window request such as subject name, key type, key size and so on.
108