Supplicant Setting

[User ID]

Enter a user ID (using up to 128 characters).

This user ID is used for all EAP-Type options.

[Password]

Enter a password (using up to 128 characters).

The password is used for all EAP-Type options other than [EAP-TLS].

[Server ID]

To verify CN of the certificate, enter the server ID (using up to 64 characters).

[EAP Type]

Select an EAP authentication method.

• [Depend on Server]: The EAP-Type provided by the authentication server will be used for authentication. Configure the supplicant settings as required for this machine according to the EAP-Type provided by the authentication server.

• Do not select [No].

[No] is specified by default.

[EAP-TTLS Internal Authentication Settings]

Configure the EAP-TTLS settings if [EAP-Type] is set to [EAP-TTLS] or [Depend on Server].

• [User ID]: Enter the user ID used for EAP-TTLS authentication (using up to 128 characters).

• [Protocol]: Select an internal authentication protocol for EAP-TTLS.

[Client Certificates]

Select whether to encrypt the authentication information using a certificate for this machine, if necessary.

This setting can be configured if the following conditions are satisfied:

• The certificate is registered on this machine

• [EAP-TLS], [EAP-TTLS], [PEAP], or [Depend on Server] is selected from [EAP-Type].

[Encryption Strength]

If [EAP-TLS], [EAP-TTLS], [PEAP], or [Depend on Server] is selected from [EAP-Type], select an encryption strength for encryption by TLS, if necessary.

• [Mid]: Keys that are more than 56 bits in length are used for communication.

• [Strength]: Keys that are more than 128 bits in length are used for communication.

[Certificate Verification Level Settings]

To verify the certificate, select items to be verified.

If you select [Confirm] at each item, the certificate is verified for each item.

• [Expiration Date]: Confirm whether the certificate is within the validity period. [Confirm] is specified by default.

• [CN]: Confirm whether CN (Common Name) of the certificate matches the server address. [Do Not Confirm] is specified by default.

• [Chain]: Confirm whether there is a problem in the certificate chain (certificate path). The chain is validated by referencing the external certificates managed on this machine. [Do Not Confirm] is specified by default.