HP 635n HP Jetdirect Print Server Administrator's Guide (Firmware V.36) - Page 104

The supported 802.1X authentication protocols and associated configuration depend on the print server model and firmware version. Available configuration settings are listed in Table 4-18 802.1X Configuration Settings on page 94. Table 4-18 802.1X Configuration Settings Item Description Enable Protocols Enable (check) the supported protocols used for 802.1X authentication on your network. ● PEAP: (Protected Extensible Authentication Protocol). PEAP uses digital certificates for network server authentication and passwords for client authentication. PEAP requires an EAP User Name, EAP Password, and CA Certificate. Dynamic encryption keys are also used. ● EAP-TLS: (Extensible Authentication Protocol using Transport Layer Security, RFC 2716). EAP-TLS is a mutual authentication protocol based on digital certificates for authentication of both the client and the network authentication server. EAP-TLS requires an EAP User Name, Jetdirect certificate and CA certificate. Dynamic encryption keys are also used. User Name Specify an EAP/802.1X user name (up to 128 characters maximum) for this device. The default user name is the default host name of the print server, NPIxxxxxx, where xxxxxx are the last six digits of the LAN hardware (MAC) address. Password, Confirm Password Specify an EAP/802.1X password (up to 128 characters maximum) for this device. Enter the password again in the Confirm Password field to ensure it was properly entered. Server ID Specify the Server ID validation string that identifies and validates the authentication server. The Server ID string is specified on the digital certificate issued by a trusted Certificate Authority (CA) for the authentication server. The entry may be a partial string (right-most characters) )unless the Require Exact Match checkbox is enabled. Encryption Strength Specify the minimum encryption strength that can be used during communications with the authentication server. You may select Low, Medium, or High encryption strength. For each encryption strength, ciphers are specified to identify the weakest cipher allowed. Jetdirect Ceritificate The Jetdirect certificate is used to validate the identity of the Jetdirect device to clients and to network authentication servers. A self-signed Jetdirect certificate is pre-installed. To install a replacement, click Configure. CA Certificate To validate the authentication server's identity, the authentication server's certificate or a CA (or "Root") certificate must be installed on the print server. This CA certificate must be issued by the Certificate Authority who signed the authentication server's certificate. To configure or install a CA certificate, click Configure. Authentication Behavior: Reauthenticate on Apply Enable (check) or disable (clear) this checkbox to control authentication when you click Apply on this page, assuming valid configuration entries have been made. NOTE: This parameter does not apply to security or other configuration wizards. Changes to parameters through a wizard will always cause the print server to reauthenticate. Restore Defaults If disabled (default), the print server will not attempt reauthentication unless configuration changes cause the print server to disconnect and reconnect to the network. If enabled, the print server will always try to reauthenticate using the configuration values set. Click this button to restore 802.1X configuration settings to factory default values. 94 Chapter 4 Embedded Web Server (V.36.xx) ENWW