LEGRAND Server Technology PRO3X User Manual page 164

Field Description
CA certificate
This field appears when 'EAP' is selected.
CA certificate is required when "Enable verification of TLS
certificate chain" is selected by default; and strongly recommended
RADIUS
authentication
This field appears when 'EAP' is selected.
server name
Type the name of the RADIUS server if it is present in the TLS
certificate.
Do not leave this field blank as it reduces security.
Note: Auto-negotiation is disabled after setting both the speed and duplex settings to NON-Auto values,
which may result in a duplex mismatch.
• • Available settings for the CA Certificate:
If the required certificate file is a chain of certificates, and you are not sure about the requirements of a
certificate chain, see TLS Certificate Chain.
Field/setting
Enable
verification of TLS
certificate chain
Browse button
Allow expired and
not yet valid
certificates
164
• •
The name must match the fully qualified domain name (FQDN)
of the host shown in the certificate
Description
Select this checkbox to verify the certificate of the EAP
authentication server. Then you must upload the certificate of the
issuing CA in the next field.
Click this button to import the certificate of the issuing CA. Then
you can:
• •
Click Show to view the certificate's content.
• •
Click Remove to delete the installed certificate if it is
inappropriate.
• •
Select this checkbox to make the authentication succeed
regardless of the certificate's validity period.
• •
After deselecting this checkbox, the authentication fails
whenever any certificate in the selected certificate chain is
outdated or not valid yet.