Aruba Networks PowerConnect W Clearpass 100 Software Deployment Manual page 84

3. Click the Save Changes button, and restart the RADIUS Server to apply the configuration.
4. You may verify that the EAP configuration is loaded by checking for a certain startup message on the
RADIUS Server Control screen:
Tue Nov 17 01:04:05 2009 : Info: rlm_eap_tls: Loading the certificate file as a chain
5. The certificate authority used to issue the server's certificate must be exported. To do this, click the
Export Server Certificate command link. In the Export Server Certificate form, select "CA issuer
certificate only" and use the default PKCS#7 container format.
6. Click the Download File button and a file named Amigopod Certificate Authority.p7b will be
downloaded (the precise name depends on the common name for the CA certificate).
7. This file must be imported as a trusted root certification authority on any client wishing to authenticate
using this RADIUS Server. The reason for this is that the server's identity must be established via a
trusted root CA in order for authentication to proceed. When using a well-known third party CA, this
step does not need to be performed as the necessary trust relationship already exists in most clients.
Importing a Root Certificate – Microsoft Windows Vista and Windows 7
The following steps may be used to import a root certificate on Windows Vista or Windows 7 from a ".p7b"
file exported using the Export Server Certificate form:
1. Open the .p7b file from Windows Explorer:
84 | RADIUS Services Amigopod 3.7 | Deployment Guide