Intermec CN3 User Manual page 186

Chapter 5 — Network Support
172
2 Enter your unique Username to use this protocol.
3 Select Prompt for password to have the user enter this password each
time to access the protocol, or leave Use following password as selected
and enter your unique password to use the protocol without entering a
password each time you use your CN3.
4 Tap Get Certificates to obtain or import server certificates
5 Tap Additional Settings to assign an inner TTLS authentication and an
inner EAP, and set the server certificate validation and trust.
To configure additional TTLS settings
1 Select an authentication method from the Inner TTLS Authentication
drop-down list.
TTLS Authentication Methods
Method
PAP
CHAP
MS-CHAP;
MS-CHAP-V2
PAP/Token Card
EAP
2 If you select "EAP" for the inner authentication protocol, then select an
inner EAP protocol from the Inner EAP drop-down list.
3 Enter the Common Names of trusted servers. If these fields are left
blank, the client will accept any authentication server with a valid
certificate. For increased security, you should specify exactly which
authentication servers you expect to use.
4 Check Validate Server Certificate to verify the identity of the
authentication server based on its certificate when using TTLS.
5 Tap Root CA, select a root certificate, then tap OK to return to the
Inner TTLS Authentication.
Description
Password Authentication Protocol. A simple
authentication protocol that sends security information in
the clear.
Challenge Handshake Authentication Protocol. Use of
Radius to authenticate a terminal without sending security
data in the clear. Authenticates against non-Windows user
databases. You cannot use this if authenticating against a
Windows NT Domain or Active Directory.
Authenticates against a Windows Domain Controller and
other non-Windows user databases.
Use with token cards. The password value entered is never
cached.
Extensible Authentication Protocol
CN3 Mobile Computer User's Manual
(page 173).