Dell Wyse ThinOS C10LE Administrator's Manual page 49

Configuring Connection Settings Locally
Use the following guidelines when adding SSIDs manually:
TIP: While Service Set Identification (SSID) and encryption configurations can be
entered manually on the thin client (be sure that the corresponding entries are also
made on the enterprise access point), ThinOS can also scan the wireless network and
list all available connections within range of the thin client.
SSID - Enter the Service Set Identification (name of the wireless network) set up by
•
the network administrator for this wireless communication link (maximum is 32
characters).
Security Type and Encryption - Select the encryption option (either None,
•
WPA-Personal, WPA2-Personal, WPA-Enterprise, or WPA2-Enterprise) to be used
for this wireless communication link (If a WPA option is selected, TKIP and CCMP
encryption is supported; if a WPA2 option is selected, CCMP encryption is
supported).
None - Select None if encryption is not required.
WPA-Personal and WPA2-Personal - Wi-Fi Protected Access (WPA and WPA2)
Personal encryption is designed to improve upon the security features of WEP but is
still designed for home and small office networks that do not require the complexity
of an authentication server (WPA2 provides more security than WPA).
WPA-Enterprise and WPA2-Enterprise - Wi-Fi Protected Access (WPA and WPA2)
Enterprise encryption is designed to improve upon the security features of WEP but
also verifies network users through an authentication server (WPA2 provides more
security than WPA; WPA2 is backward compatible with WPA).
WEP Key or WPA Key - If either box is active (depending on Encryption option),
•
enter the key according to your Encryption selection. The selected key is used to
encrypt/decrypt each frame transmitted from or received by the wireless adapter.
The access point must recognize frames encrypted by the same key. Keys can be 5
or 13 characters for the 64 or 128 bit encryption key, or specified as 10 or 26
hex-decimal digits.
Enable IEEEE 802.1x authentication - Select this check box to enable this
•
authentication and activate the EAP Type list of options.
EAP Type - If you have enabled the Enable IEEEE 802.1x authentication check box,
•
select the EAP Type option you want (TLS, LEAP, or PEAP).
TLS - If you select the TLS option, click Properties to open and configure the
Authentication Properties dialog box (you can use Browse to find and select the
Client Certificate file and Private Key file you want). Validate Server Certificate is
mandatory (be sure the check box is selected/checked). Note that the CA certificate
must be installed on the thin client. Also note that the server certificate text field
supports a maximum of approximately 127 characters, and supports multiple server
names.
The following kinds of server names are supported (all examples are based on Cert
Common name is "company.wyse.com"). NOTE: Using only the FQDN, i.e.
company.wyse.com will not work, you must use one of the options (note that
*.wyse.com is the most common option as multiple authentication servers may
exist):
servername.wyse.com
*.wyse.com
*wyse.com
*.com
*
LEAP - If you select the LEAP option, click Properties to open and configure the
Authentication Properties dialog box (be sure to use the correct Username and
Password for authentication). Note that the maximum length for the username or
the password is 64 characters.
PEAP - If you select the PEAP option, click Properties to open and configure the
Authentication Properties dialog box (be sure to select either EAP_GTC or
EAP_MSCHAPv2, and then use the correct Username, Password, and Domain, if
necessary, for authentication). Validate Server Certificate is optional. Also note that
43