...
- Open the phone settings and choose "Biometrics and security" → "Other security settings" → "Credential storage";
4. If there are old certificates, delete them with the "Clear credentials" button;
5. To load new certificates, click the "Install from device storage" button;
6. The root and user certificates are installed by clicking the "WI-FI certificate" button.
7. Select the location of the extracted archive;
8. To load the root certificate, select the "default_ca.pem" file, then enter its name;
9. To load a client certificate, select the “tester.p12” file, then enter the password specified in the certificate and the name.
Installing certificates for iOS devices
...
Having opened an email with an attached file using standard iOS applications (Safari, Mail), click on the file with *.crt extension. When installing the certificate, the system will warn about the unreliability of the profile, allow the installation and the certificate will be successfully installed.
Installing the client certificate
Installing a user certificate is the same as installing a root certificate. Next, enter the certificate password. The password corresponds to the Password parameter of the certificate, which is located in the .txt file.
| Scroll Pagebreak |
|---|
Installing certificates for Windows
- Open the .p12 file. There is no need to change the parameters. Click “Next”.
2. Enter the password. It matches the Password certificate parameter that was specified when generating the container on wlc.
| Scroll Pagebreak |
|---|
3. Confirm the installation of the user certificate.
4. If the user certificate and root certificate are successfully installed, the following screen is displayed.
| Scroll Pagebreak |
|---|
...
- In the Wi-Fi menu, find the previously created TLS-SSID SSID.
2. Set the network connection parameters:
...
The value of the "Authorization" parameter is set according to the user name in the certificate.
Domain: wlc-30
The value of the Domain parameter is set according to the value of the CN (commonName) parameter in the default_cert.pem server certificate.
3. If the parameters are entered correctly, authorization will be successful.
| Scroll Pagebreak |
|---|
To create and configure a new connection, open "Network ans Sharing Center" → "Set up a new connection or network".
In the window that opens, select "Подключение к беспроводной сети вручнуюManually connect to a wireless network" and click "Next".
Enter information about the wireless network:
- Netwotk name;
- Security Type: WPA2-Enterprise.
Check the "Запускать это подключение автоматическиStart this connection automatically". Click "Next".
The network has been successfully added. Next, configure the connection settings.
Open the "БезопасностьSecurity" section, select the authentication method "Microsoft: смарт-карта или иной сертификатSmart Card or other certificate (EAP-TLS)". Click "ПараметрыSettings".
| Scroll Pagebreak |
|---|
...
In the opened window choose "Дополнительные параметрыAdvanced settings".
Specify the authentication mode – "Проверка подлинности пользователяUser authentication". Click "ОК".
Find the desired network and click "ПодключитьсяConnect". Select the user certificate to connect to the network and enter the user login. Click "ОК".
| Scroll Pagebreak |
|---|
If the parameters are entered correctly, the connection will be successful.
Connecting with Ubuntu
...
In the Wi-Fi settings menu, find the desired network. When connecting to the network, enter your personal login, select EAP-TLS mode. Click "УдостоверениеIdentity" and choose the certificate. Go back to entering password and click "ПодключитьсяJoin". In the opened window click "ПринятьTrust".
Updating and replacing the server certificate
...