HP 2500 HP Jetdirect Print Servers - Administrator Guide - Page 116

Table 4.3, 11B Configuration Parameters 4 of 7, Using the Embedded Web Server 116

Page 116 highlights

Table 4.3 Item 802.11B Configuration Parameters (4 of 7) Description Server ID (EAP-TLS, EAP-TTLS only) Specify the Server ID validation string that identifies and validates the authentication server. The Server ID string is specified on the digital certificate issued by a trusted Certificate Authority (CA) for the authentication server. The entry may be a partial string unless the Require Exact Match is enabled. Require Exact Match (EAP-TLS, EAP-TTLS only) Enable (check) or disable (clear) whether the Server ID string entry must match exactly the string received from the authentication server during 802.1x EAP authentication. Encryption Strength Specify an encryption strength to be used during communications with the authentication server. You may select Low, Medium, or High encryption strength. For each encryption strength, ciphers are specified to identify the weakest cipher allowed. Early browsers may only support 40-bit (Low) encryption levels. Jetdirect Certificate (EAP-TLS only) An X.509-compliant digital certificate that validates the Jetdirect print server identity must be installed. In general, a Jetdirect certificate may be self-signed or provided by an independent trusted source, such as a Certificate Authority. By factory default, a self-signed Jetdirect certificate is preinstalled. While self-signed certificates are sometimes permitted, they do not provide true client validation. Therefore, for EAP authentication methods that require a Jetdirect certificate, it must be provided by a trusted third party or Certificate Authority. To update an existing certificate, or to install a new certificate, click Configure. Installing a new certificate will overwrite the existing certificate. If you request a certificate from an independent Certificate Authority, you will not be able to complete the EAP/802.1x configuration until your digital certificate has been received and installed. CA Certificate (PEAP, EAP-TLS, EAP-TTLS only) To validate the authentication server's identity, a CA (or "Root") certificate must be installed on the print server. This CA certificate must be issued by the Certificate Authority who signed the authentication server's certificate. To configure or install a CA certificate, click Configure. ENWW Using the Embedded Web Server 116

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302

ENWW
Using the Embedded Web Server 116
Server ID
(EAP-TLS, EAP-TTLS only) Specify the Server ID validation string
that identifies and validates the authentication server. The Server
ID string is specified on the digital certificate issued by a trusted
Certificate Authority (CA) for the authentication server. The entry
may be a partial string unless the
Require Exact Match
is
enabled.
Require Exact
Match
(EAP-TLS, EAP-TTLS only) Enable (check) or disable (clear)
whether the Server ID string entry must match exactly the string
received from the authentication server during 802.1x EAP
authentication.
Encryption
Strength
Specify an encryption strength to be used during communications
with the authentication server. You may select
Low
,
Medium
, or
High
encryption strength. For each encryption strength, ciphers
are specified to identify the weakest cipher allowed.
Early browsers may only support 40-bit (Low) encryption levels.
Jetdirect
Certificate
(EAP-TLS only) An X.509-compliant digital certificate that
validates the Jetdirect print server identity must be installed. In
general, a Jetdirect certificate may be self-signed or provided by
an independent trusted source, such as a Certificate Authority. By
factory default, a self-signed Jetdirect certificate is preinstalled.
While self-signed certificates are sometimes permitted, they do
not provide true client validation. Therefore, for EAP
authentication methods that require a Jetdirect certificate, it must
be provided by a trusted third party or Certificate Authority.
To update an existing certificate, or to install a new certificate, click
Configure
. Installing a new certificate will overwrite the existing
certificate.
If you request a certificate from an independent Certificate
Authority, you will not be able to complete the EAP/802.1x
configuration until your digital certificate has been received and
installed.
CA Certificate
(PEAP, EAP-TLS, EAP-TTLS only) To validate the authentication
server
s identity, a CA (or
Root
) certificate must be installed on
the print server. This CA certificate must be issued by the
Certificate Authority who signed the authentication server
s
certificate.
To configure or install a CA certificate, click
Configure
.
Table 4.3
802.11B Configuration Parameters (4 of 7)
Item
Description