Hand Held Products IK8560 User Manual page 44

Server Tab
The Server tab controls how the Client authenticates the server that handles the 802.1x protocol on the network side. This applies
only to the TLS, TTLS, and PEAP authentication methods and is used to tell the Client what server credentials to accept from
the authentication server to verify the server. The Client uses this information to verify that the Client is communicating with a
trusted server.
Field
Do not validate server
certificate chain
Certificate issuer
must be
Allow intermediate
certificates
Server name must be
Must match exactly
Must contain domain
name
5 - 8
Description
If this option is selected, the server certificate received during the TLS/TTLS/PEAP message
exchange is not validated.
This is the certificate authority used during TLS/TTLS/PEAP message exchange. Any Trusted
CA is the default selection and means that any certificate authority can be used during
authentication.
Both trusted intermediate certificate authorities and root authorities whose certificates exist in
the system store are available for selection in the drop-down list.
This option is selected by default and enables unspecified certificates to be in the server
certificate chain between the server certificate and the certificate authority selected in the
Certificate issuer must be field.
When selected, this option allows the server certificate received during negotiation to be issued
directly by the certificate authority or by one of its intermediate certificate authorities.
If disabled, then the selected Certificate issuer must have directly issued the server certificate.
This is either the server name or the domain the server belongs to, depending on which option
is selected below the text field.
During authentication, this name will be compared to the server certificate's Subject: CN field.
When selected, the server name entered must match the server name found on the certificate
exactly.
When selected, the server name field identifies a domain and the certificate must have a server
name belonging to this domain or to one of its sub-domains (e.g., zeelans.com, where the
server is blueberry.zeelans.com).
Rev B
3/1/07
Image Kiosk 8560/8570 User's Guide