Lenovo 20074CU User Manual page 42

Validate server authentication
Use client certificate
Figure 33. Select Certificate window
EAP type
When EAP authentication is set to TLS:
Validate server certificate
Client certificate
32
ThinkVantage Access Connections 4.1: User's Guide
Access point authentication setting, Data encryption must be set to
either TKIP or AES. If you select WPA2, AES is selected by default.
You may have to enter the subdomain name of the Radius server (ibm.com
etc.).
Click Select. The Select Certificate window opens.
Select the certificate to be used for this profile.
Select one of the following types:
v EAP-TLS
v EAP-TTLS
v PEAP-MSCHAP-V2
v PEAP-GTC
The type of EAP authentication depends on the authentication server. For
more information, consult your network administrator.
If the server certificate has to be verified, select the Validate server
certificate check box, and specify the certificate of a reliable route
certificate issuer. If the server name is in the specific domain, specify the
domain name in the server name field.
If the server certificate does not need to be verified, leave the Validate
server certificate check box blank. In this case, the application will not
check the reliability of the server, and the connection will not be a tightly
secured one.
The use of a client certificate is required. To specify a particular certificate,
press the Select button, and select the certificate from the list. If you select
the wrong certificate or one that has expired, the connection will not be