Using Eap-Fast - Intermec CK61 User Manual

CK61 Mobile Computer with Windows Mobile User's Manual
3 Select Prompt for password to have the user enter this password each
time to access the protocol, or leave Use following password as selected
and enter your unique password to use the protocol without entering a
password each time you use your CK61.

Using EAP-FAST

The EAP-FAST protocol is a client-server security architecture that
encrypts EAP transactions with a TLS tunnel. While similar to PEAP, it
differs significantly as EAP-FAST tunnel establishment is based on strong
secrets unique to users. These secrets are called Protected Access Credentials
(PACs), which CiscoSecure ACS generates using a master key known only
to CiscoSecure ACS. Because handshakes based upon shared secrets are
intrinsically faster than handshakes based upon PKI, EAP-FAST is the
significantly faster of the two solutions that provide encrypted EAP
transactions. No certificate management is required to implement EAP-
FAST.
Use "EAP-FAST" to configure EAP-FAST as an authentication protocol,
select "Open," "WPA," or "Network EAP" as an association mode.
To configure using EAP-FAST
1 Set 8021x Security as "EAP-FAST," then choose one of the following:
• Set Association to "Open."
• Set Association to "WPA."
• Set Association to "WPA2."
• Set Association to "Network EAP" and Encryption to either
"WEP" or "CKIP."
2 Enter your unique Username to use this protocol.
3 Select Prompt for password to have the user enter this password each
time to access the protocol, or leave Use following password as selected
and enter your unique password to use the protocol without entering a
password each time you use your CK61.
Chapter 5 — Network Support
159