Client Certificate Tab; Tls Mode - Sony SNC-RX530N User Manual

Note
To use the 802.1X authentication function for wireless
networks, set up Security in the Wireless tab of the
Network menu. For details, see "Security" on page 46.
Wired interface
To activate the 802.1X authentication function for wired
ports, select On.
Wired interface status
Shows the authentication status of the 802.1X
authentication function for wired ports.
Click Refresh to update the status.
Wireless interface status
Shows the authentication status of the 802.1X
authentication funciton for wireless networks.
Click Refresh to update the status.
EAP identity
Type the user name to identify the client in the 802.1X
authentication server using 3 to 253 characters.
EAP method
Shows the authentication method used with the
authentication server. It is fixed as this camera supports
only the TLS method.
OK/Cancel
See "Buttons common to every menu" on page 30.
50
Using the 802.1X Authentication Function — 802.1X Menu

Client certificate Tab

You can import a client certificate to the camera or
export a certificate request.

TLS mode

Select the TLS mode.
The EAP-TLS authentication performs certificate-based
authentication. It requires private key information
consisting of a key pair for the client certificate to store
in the camera. The TLS mode allows two modes
according to the acquirer of the key pair.
Use a key pair from a CA: Uses the certificate
including the private key information issued by a
CA. The PKCS#12 and PEM formats are supported.
Use the camera's built-in key pair: Uses the private
key information that is stored in the tamper-resistant
chip built in the camera. This mode is safety because
the private key information is not carried out at the
time of issuing the certificate request or importing
the certificate. Only the PEM format is supported in
this mode.
To use this mode, first obtain the certificate from the
CA by performing Export certificate request on
page 51.
Client certificate request
Import, display or delete the client certificate.
To import the client certificate
Click Browse... to select the client certificate to be
imported.