1. Mesa Wi-Fi 802.1x PEAP and EAP-TLS Authentication for Wi-Fi

2. Exporting a Certificate This section, exporting a certificate, is provided for reference and testing purposes only! This shows the method that I used to save a certificate for testing purposes. Refer to other documentation for appropriate ways to issue and distribute certificates!

3. Exporting a Certificate In the Certificate snap-in, find the certificate, right-click, choose All Tasks, choose Export

4. Exporting a Certificate Click Next

5. Exporting a Certificate Choose Yes, export the private key Click Next

6. Exporting a Certificate Choose Include all certificates in the certification path if possible

7. Exporting a Certificate Create a password (write it down because you will need this password when you install the certificate) Click Next

8. Exporting a Certificate Click Browse and select a location and name to save the certificate Click Next

9. Exporting a Certificate Click Finish Click OK

10. Importing the Certificate Copy the certificate to the Mesa Use File Explorer to find the.pfx file Tap on the.pfx file and follow the instructions to install the certificate. Use the password that you created for the certificate when it was exported.

11. Importing the Certificate Enter password you created when the certificate was exported. Tap More

12. Importing the Certificate Tap Install Tap ok

13. Importing the Certificate Start > Settings > System > Certificates Observe that a Personal certificate was installed (this is used for EAP-TLS, not required for PEAP) Observe that no Intermediate certificates were imported (not needed for this)

14. Importing the Certificate Observe that the root CA certificate is installed in the root certificate store (may be needed for PEAP)

15. Configuring PEAP Select the network to configure the connection My test network is using WPA2 with AES Encryption

16. Configuring PEAP Tap Finish Observe that it is “Connecting”

17. Configuring PEAP When prompted, enter the user name and password Choose the Save password option if you don’t want to have to enter your password each time you connect to the Wi-Fi network. Observe that it reports “Connected”

18. Configuring EAP-TLS Select the wireless network to configure

19. Configuring EAP-TLS My network is using WPA2 with AES Encryption Tap Next Select Smart Card or Certificate for EAP- TLS Tap Properties

20. Configuring EAP-TLS Observed that your certificate is listed. Note: You will not be able to access this screen if there are no personal certificates installed on the Mesa. Select the certificate.

21. Configuring EAP-TLS Enter the appropriate user name Tap OK Observe that it is “Connecting”

22. Configuring EAP-TLS Observe that it is “Connected”