Windows Certificate Store Vs. Certs Path; User Certificates; Root Ca Certificates; Figure 5-10 Choose Certificate - LXE MX8 Reference Manual

Summit Client Configuration

Windows Certificate Store vs. Certs Path

Note:

User Certificates

EAP-TLS authentication requires a user certificate. The user certificate must be stored in the
Windows certificate store. To generate the user certificate, follow the instructions in Generating a
User Certificate for the Mobile Device, later in this chapter.
Import the user certificate into the Windows certificate store by following the instructions in
Installing a User Certificate on the Mobile Device, later in this chapter. A Root CA certificate is
also needed for EAP-TLS. Refer to the section below.

Root CA Certificates

Root CA certificates are required for PEAP/MSCHAP, PEAP/GTC, and EAP-TLS. Two options
are offered for storing these certificates. They may be imported into the Windows certificate store
or copied into the Certs Path directory.
How To: Use Windows Certificate Store
1. Follow the instructions later in this chapter for Downloading a Root CA Certificate to a PC.
2. To import the certificate into the Windows store, follow the instructions for Installing a Root
CA Certificate on the Mobile Device later in this chapter.
3. When completing the Credentials screen for the desired authentication, be sure to check the
Use MS store checkbox after checking the Validate server checkbox.
4. The default is to use all certificates in the store. If this is OK, skip to Step #8.
5. Otherwise, to select a specific certificate tap the Browse (...) button.
6. Uncheck the Use full trusted store checkbox.
7. Select the desired certificate and tap the Select button to return the selected certificate to the
CA Cert textbox.
8. Tap OK to exit the Credentials screen and then Commit to save the profile changes.
How To: Use the Certs Path
1. Follow the instructions later in this chapter for Downloading a Root CA Certificate to a PC.
2. Copy the certificate to the specified Windows folder on the mobile device. The default
location for Certs Path is \System. A different location may be specified by using the Certs
Path global variable. Please note the location chosen for certificate storage should persist after
warmboot.
E-EQ-MX8RG-A
It is important that all dates are correct on CE computers when using any type of
certificate. Certificates are date sensitive and if the date is not correct authentication will
fail.

Figure 5-10 Choose Certificate

181
MX8 Reference Guide