Certificates; Generating A Root Ca Certificate - Honeywell MX7 Reference Manual

Certificates

Note: Please refer to the Security Primer to prepare the Authentication Server and Access Point for
communication.
Note: It is important that all dates are correct on the MX7 and host computers when using any type of
certificate. Certificates are date sensitive and if the date is not correct authentication will fail.
Quick Start
Root Certificates are necessary for EAP-TLS, PEAP/GTC and PEAP/MSCHAP.
1. Generate a Root CA Certificate
2. Connect the MX7 to the desktop PC using ActiveSync and copy the certificate to the MX7 \System folder.
3. Install the Root CA
User Certificates are necessary for EAP-TLS
1. Generate a User Certificate and Private Key file
2. Connect the MX7 to the desktop PC using ActiveSync and copy the certificate and private key file to the MX7 \System
folder.
3. Install the User Certificate and Private Key
4. After installation, perform a Suspend/Resume.
5. Verify installation.

Generating a Root CA Certificate

Note: It is important that all dates are correct on the MX7 and host computers when using any type of
certificate. Certificates are date sensitive and if the date is not correct authentication will fail.
The easiest way to get the root CA certificate is to use a browser on a PC to navigate to the Certificate Authority. To request
the root CA certificate, open a browser to
http://<CA IP address>/certsrv.
Sign into the CA with any valid username and password.
and download it to a PC.
Certificate.
file.
and download it to a PC.
7-41