Honeywell Vx9 Manual

6 - 47
Logon Options
There are two options available, a single signon which uses the Windows username and password as the credentials 
for 802.1x authentication and pre-logon which used saved credentials for 802.1x authentication before Windows logon.
If either option is enabled, the credentials entered here take precedence over any credentials entered on the Profile 
tab.
To use either option, select Logon Options on the Profile tab. The Logon Options button is displayed.
Click the Login Options...

6 - 48
If using the Windows certificate store:
 Check the Use MS store checkbox. The default is to use the Full Trusted Store. 
 To select an individual certificate, click on the Browse button. 
 Uncheck the Use full trusted store checkbox. 
 Select the desired certificate and click Select. You are returned to the Credentials screen. 
If using the Certs Path option:
 Leave the Use MS store box unchecked. 
 Enter the certificate filename in the CA Cert textbox. 
Click OK then click Commit.
Sign-On vs....

6 - 49
10. If using EAP FAST and manual PAC provisioning, input the PAC filename and password..
11. Click the OK button then the Commit button.
12. If changes are made to the stored credentials, click Commit to save those changes before making any additional 
changes to the profile or global parameters.
13. Verify the device is authenticated by reviewing the Status tab. When the device is property configured, the Status 
tab indicates the device is Authenticated and the method used.
Note: See Configuring...

6 - 50
Windows Certificate Store vs. Certs Path
Note: It is important that all dates are correct on the Thor VX9 and host computers when using any type of certificate. 
Certificates are date sensitive and if the date is not correct authentication will fail.
User Certificates
EAP-TLS authentication requires a user certificate. The user certificate must be stored in the Windows certificate 
store.
 To generate the user certificate, see Generate a User Certificate (page 6-68).
 To import the user...

6 - 51
6. Uncheck the Use full trusted store checkbox. 
7. Select the desired certificate and click the Select button to return the selected certificate to the CA Cert textbox.
8. Click OK to exit the Credentials screen and then Commit to save the profile changes.
Configuring the Profile
Use the instructions in this section to complete the entries on the Profile tab according to the type of wireless security used 
by your network. The instructions that follow are the minimum required to successfully...

6 - 52
WEP
To connect using WEP, make sure the following profile options are used. 
 Enter the SSID of the Access Point assigned to this profile
EAP Type to None
Encryption to WEP or Manual WEP (depending on SCU version)
Auth Type to Open
Click the WEP keys/PSKs button.
Valid keys are 10 hexadecimal or 5 ASCII characters (for 40-bit encryption) or 26 hexadecimal or 13 ASCII characters 
(for 128-bit encryption). Enter the key(s) and click OK.
Once configured, click the Commit button. 
Ensure the correct...

6 - 53
LEAP
To use LEAP (without WPA), make sure the following profile options are used. 
 Enter the SSID of the Access Point assigned to this profile
EAP Type to LEAP
Encryption to WEP EAP or Auto WEP (depending on SCU version)
Auth Type as follows:
 If the Cisco/CCX certified AP is configured for open authentication, set the Auth Type radio parameter to Open.
 If the AP is configured to use shared key or passphrase, set the Auth Type radio parameter to Shared.
 If the AP is configured for network EAP...

6 - 54
PEAP/MSCHAP
To use PEAP/MSCHAP, make sure the following profile options are used.
 Enter the SSID of the Access Point assigned to this profile
EAP Type to PEAP-MSCHAP
Encryption to WPA TKIP
Auth Type to Open
To use another encryption type, select WPA CCKM, WPA2 AES or WPA2 CCKM for encryption and complete other 
entries as detailed in this section.
See Sign-On vs. Stored Credentials (page 6-48) for information on entering credentials.
Click the Credentials button.
 No entries except the CA...

6 - 55
If using the Windows certificate store:
 Check the Use MS store checkbox. The default is to use the Full Trusted Store. 
 To select an individual certificate, click on the Browse button.
 Uncheck the Use full trusted store checkbox.
 Select the desired certificate and click Select. You are returned to the Credentials screen.
If using the Certs Path option:
Use MS store box unchecked.
 Enter the certificate filename in the CA Cert textbox.
Click OK then click Commit.
The device should be...

6 - 56
PEAP/GTC
To use PEAP/GTC, make sure the following profile options are used.
 Enter the SSID of the Access Point assigned to this profile
EAP Type to PEAP-GTC
Encryption to WPA TKIP
Auth Type to Open
To use another encryption type, select WPA CCKM, WPA2 AES or WPA2 CCKM for encryption and complete other 
entries as detailed in this section.
See Sign-On vs. Stored Credentials (page 6-48) for information on entering credentials.
Click the Credentials button.
 No entries except the CA Certificate...