Obtaining A Tls-Eap Certificate For A Client - D-Link DWL-3500AP - AirPremier Wireless Switching 108G Access Point Administrator's Manual

5. Click Finish.
The access point is now displayed as a client of the Authentication Server.

Obtaining a TLS-EAP Certificate for a Client

If you want to use IEEE 802.1X mode with EAP-TLS certificates for authentication and
authorization of clients, you must have an external RADIUS server and a Public Key Authority
Infrastructure (PKI), including a Certificate Authority (CA), server configured on your
network. It is beyond the scope of this document to describe these configuration of the
RADIUS server, PKI, and CA server. Consult the documentation for those products.
For information about configuring Microsoft Windows PKI software or installing a CA, see
the Microsoft Web site: http://support.microsoft.com/.
Wireless clients configured to use either "WPA/WPA2 Enterprise (RADIUS)" or "IEEE
802.1X" security modes with an external RADIUS server that supports TLS-EAP certificates
must obtain a TLS certificate from the RADIUS server.
This is an initial one-time step that must be completed on each client that uses either of these
modes with certificates. This example uses the Microsoft Certificate Server.
To obtain a certificate for a client, follow these steps.
1. Enter the following URL in a Web browser:
https://<IPAddressOfServer>/certsrv/
A Wireless Client Settings and RADIUS Server Setup
Obtaining a TLS-EAP Certificate for a Client 119