802.1X Tab; System Configuration Of The 802.1X Network - Sony BRC-X400 Operating Instructions Manual

To delete the imported certificate or self-signed
certificate
Click [Delete] to delete the certificate or self-signed
certificate imported to the camera.
Private key password
Enter the password for the private key information
included in the certificate using up to 50 characters.
This text box is active only when [Certificate options]
is set to [Use an external certificate].
Leave the text box blank if the private key
information included in the certificate is not
encrypted.
If no private key password is set in the camera, an
active text field is displayed and this allows a
password to be entered.
If a private key password is already set, it is
displayed as an inactive text field.
Reset
To change the once set private key password, click
[Reset] and clear the current password. A new
password can be entered.
Note
Click [Cancel] at the bottom of the menu if you want
to cancel changing the private key password after
clicking [Reset]. Doing so restores the other setting
items in the SSL tab to the previous settings.

802.1X tab

Configure the wired port-based authentication in
compliance with the 802.1X standard.
Notes
• To use the 802.1X authentication function, you
need knowledge of the 802.1X authentication
and digital certificate. To establish an 802.1X
network, you need to configure the
authenticator, authentication server and other
elements. For details on these settings, refer to
the manual of the corresponding equipment.
• When using the 802.1X authentication
function, always configure the settings after
setting the date and time of the camera. If the
date and time are incorrect, port
authentication may not be performed correctly.
System configuration of the 802.1X
network
The following figure shows a general system
configuration of an 802.1X network.
Supplicant Authenticator
(camera) (hub or router)
Supplicant
A supplicant is a device that connects to the
authentication server to join the network. This
camera serves as a supplicant in the 802.1X
network. The supplicant can enter the 802.1X
network after appropriate authentication by the
authentication server.
Authenticator
An authenticator forwards certificate request
data or response data that the supplicant or
authentication server issues to the other party.
Normally a hub, router or access point serves as
an authenticator.
Authentication server
An authentication server has a database of
connecting users and verifies if the supplicant is
a valid user or not. It can also be called RADIUS
server.
CA (Certificate Authority)
A CA issues and manages certificates of the
authentication server (CA certificates) and user
certificates. The CA is essential for certificate-
based user authentication. Normally a CA is
located inside an authentication server.
Note
This camera supports EAP mode in which the
supplicant and the server authenticate using the
certificate. This mode requires a CA which issues
the certificate.
78
Authentication
server + CA