Siemens 2000 - Manual (Page 52)

Menu Status
52
Certificates
Navigation: Admin > Certificates >
You need certificates for network access if authentication with EAP Type
TLS is set up in the WLAN (see Æ WLAN Security). Certificates are files
containing information for authentication in the WLAN.
A distinction is made between client, server and root certificate.
The (WLAN) client certificate identifies the handset. The handset must
transfer the client certificate during login. You must therefore save it on the
handset.
Using the client certificate, an authentication server checks the access
authorisation for the WLAN. If the check turns out to be positive, the
handset is connected to the WLAN and the authentication server sends its
server certificate to the handset.
The handset can (optional) use the server certificate to check whether it has
logged to the correct authentication server (in the correct WLAN), see
Æ
WLAN Security, Validate Server Certificate. The handset requires the
(WLAN) root certificate to carry out the check. If the check needs to be
carried out, you will also need to transfer the WLAN root certificate to the
handset.
• In the navigation area, select
WLAN Client if you wish to transfer a cli-
ent certificate from your PC to the handset or wish to delete a client
certificate stored on the handset.
• In the navigation area, select WLAN Root if you wish to transfer the
root certificate from the PC to your handset or wish to delete a server
certificate stored on the handset.
• In the navigation area, select VPN , if you wish to transfer the VPN cer-
tificate from the PC to your handset or wish to delete a VPN certificate
stored on the handset.
Importing a new certificate and updating certificates
First copy the new/updated certificate to your PC.
Then enter the file name with the complete path details in the Retrieve a
certificate field or click on the Browse... button and select the file with
the certificate from within the Windows file selection dialogue box.
Click the Update button. The new certificate is stored on the handset.
Any certificate that already exists with the same name will be overwritten.
The new certificate will now be used when access the WLAN for which this
certificate is required.
Before the corresponding access profiles are created, you must
transfer the certificates to the handset.