Certificates; Generating A Root Ca Certificate - Honeywell Marathon Reference Manual

Certificates

Note: Refer to the Honeywell Security Primer to prepare the Authentication Server and Access Point for communication.
Note: It is important that all dates are correct on the Marathon and host computers when using any type of certificate.
Certificates are date sensitive and if the date is not correct authentication will fail.
If using the Windows Certificate Store, the Windows Account must have a password. The password cannot be
left blank. The Summit Client Utility uses the Windows user account credentials to access the Certificate Store.
The Windows user account credentials need not be the same as the
Client Utility.
Quick Start
Root Certificates are necessary for EAP-TLS, PEAP/GTC and PEAP/MSCHAP.
1. Generate a Root CA Certificate
2. If a PC was used to request the certificate, copy the certificate to the Marathon.
3. Install the Root CA
User Certificates are necessary for EAP-TLS
1. Generate a User Certificate
2. If a PC was used to request the certificate, copy the certificate to the Marathon.
3. Install the User Certificate.
4. Verify installation.

Generating a Root CA Certificate

Note: It is important that all dates are correct on the Marathon and host computers when using any type of certificate.
Certificates are date sensitive and if the date is not correct authentication will fail.
The easiest way to get the root CA certificate is to use a browser on a PC to navigate to the Certificate Authority. To request
the root CA certificate, open a browser to
http://<CA IP address>/certsrv.
It may be necessary to use a PC to request the certificate for these devices.
The Marathon can be used to generate the certificate instead of a PC.
Sign into the CA with any valid username and password.
4-44
either from the Marathon or using a PC.
Certificate.
either from the Marathon or using a PC.
wireless credentials entered in the Summit