Honeywell Vx9 Manual

6 - 57
If using the Windows certificate store:
 Check the Use MS store checkbox. The default is to use the Full Trusted Store. 
 To select an individual certificate, click on the Browse button.
 Uncheck the Use full trusted store checkbox.
 Select the desired certificate and click Select. You are returned to the Credentials screen.
If using the Certs Path option:
Use MS store box unchecked.
 Enter the certificate filename in the CA Cert textbox.
Click OK then click Commit.
The device should be...

6 - 58
WPA/LEAP
To use WPA/LEAP, make sure the following profile options are used.
 Enter the SSID of the Access Point assigned to this profile
EAP Type to LEAP
Encryption to WPA TKIP
Auth Type as follows:
 If the Cisco/CCX certified AP is configured for open authentication, set the Auth Type radio parameter to Open.
 If the AP is configured to use shared key or passphrase, set the Auth Type radio parameter to Shared.
 If the AP is configured for network EAP only, set the Auth Type radio parameter to...

6 - 59
EAP-FAST
To use EAP-FAST, make sure the following profile options are used.
 Enter the SSID of the Access Point assigned to this profile
EAP Type to EAP-FAST
Encryption to WPA TKIP
Auth Type to Open
To use another encryption type, select WPA CCKM, WPA2 AES or WPA2 CCKM for encryption and complete other 
entries as detailed in this section.
The SCU supports EAP-FAST with automatic or manual PAC provisioning. With automatic PAC provisioning, the user 
credentials, whether entered on the saved...

6 - 60
 Enter the Domain\Username (if the Domain is required), otherwise enter the Username. 
 Enter the password.
To use Automatic PAC Provisioning:
 No additional entries are required.
To use manual PAC Provisioning:
 Enter the PAC Filename and PAC Password.
 The PAC file must be copied to the directory specified in the Certs Path global variable. The PAC file must not be 
read only.
Ta p  OK then click the Commit button. 
Ensure the correct Active Profile is selected on the Main tab and restart. The...

6 - 61
EAP-TLS
To use EAP-TLS, make sure the following profile options are used.
 Enter the SSID of the Access Point assigned to this profile
EAP Type to EAP-TLS
Encryption to WPA TKIP
Auth Type to Open
To use another encryption type, select WPA CCKM, WPA2 AES or WPA2 CCKM for encryption and complete other 
entries as detailed in this section.
See Sign-On vs. Stored Credentials (page 6-48) for information on entering credentials.
Click the Credentials button.
 No entries except the User Certificate...

6 - 62
If using the Windows certificate store:
 Check the Use MS store checkbox. The default is to use the Full Trusted Store. 
 To select an individual certificate, click on the Browse button.
 Uncheck the Use full trusted store checkbox.
 Select the desired certificate and click Select. You are returned to the Credentials screen.
If using the Certs Path option:
 Leave the Use MS store box unchecked.
 Enter the certificate filename in the CA Cert textbox.
Click OK then click Commit.
The Thor VX9 should...

6 - 63
WPA PSK
To connect using WPA/PSK, make sure the following profile options are used:
 Enter the SSID of the Access Point assigned to this profile
EAP Type to None
Encryption to WPA PSK or WPA2 PSK
Auth Type to Open
Click the WEP keys/PSKs button.
This value can be 64 hex characters or an 8 to 63 byte ASCII value. Enter the key and click OK.
Once configured, click the Commit button. 
Ensure the correct Active Profile is selected on the Main tab and restart. The SCU Main tab shows the device is...

6 - 64
Certificates
Note: Please refer to the Security Primer to prepare the Authentication Server and Access Point for communication.
Note: It is important that all dates are correct on the Thor VX9 and host computers when using any type of certificate. Certificates 
are date sensitive and if the date is not correct authentication will fail.
Root Certificates are necessary for EAP-TLS, PEAP/GTC and PEAP/MSCHAP.
1.Generate a Root CA Certificate (page 6-64) either from the Thor VX9 or from a PC.
2. If a...

6 - 65
Click the Download a CA certificate, certificate chain or CRL link. 
Make sure the correct root CA certificate is selected in the list box.
Click the DER button.
To download the CA certificate, click on the Download CA certificate link. 

6 - 66
Click the Save button and save the certificate. Make sure to keep track of the name and location of the certificate.
The certificate is now ready to install on the Thor VX9.
Install a Root CA Certificate
Note: This section is only if the Windows certificate store is used. If the certificate store is not used, copy the certificate to 
the C:\Program Files\Summit\certs folder or other path specified in the Summit Certs global parameter.
Copy the certificate file to the Thor VX9. The certificate file...