Motorola Canopy FSK and OFDM radios PTP 100 (FSK) - Manual (Page 17)

Release 11.0 Release Notes and User Guide Supplement
Issue 1, March 2011 Page 17
Select the desired Phase 2 (Inside Identity) authentication protocol from the Phase 2 options of
PAP (Password Authentication Protocol), CHAP (Challenge Handshake Authentication Protocol),
and MSCHAP (Microsoft’s version of CHAP, version 2 is used). The protocol must be consistent
with the authentication protocol configured on the RADIUS server.
Enter a Username for the SM. This must match the username configured for the SM on the
RADIUS server. The default Username is the SM’s MAC address. The Username can be up to
128 non-special (no diacritical markings) alphanumeric characters.
Enter the desired password for the SM in the Password and Confirm Password fields.. The
Password must match the password configured for the SM on the RADIUS server. The default
Password is “password”. The Password can be up to 128 non-special (no diacritical markings)
alphanumeric characters.
5.3 HANDLING CERTIFICATES
5.3.1 Certificate management on SMs.
The default public Canopy and PMP 320 certificates are loaded into SMs automatically during the
upgrade to Release 11.0. The default certificates are not secure and are intended for use during
lab and field trials as part of gaining experience with the RADIUS functionality, or as an option
during debug. For secure operation, an operator will want to create or procure their own
certificates.
Refer to Figure 4: Certificate Management on SM's Configuration > Security tab to see the GUI
options.
Up to 2 certificates can be resident on an SM. An installed certificate can be deleted by clicking
the Delete button in the certificate’s description block on the Configuration > Security tab. To
restore fhe 2 default certificates, click the Use Default Certificates button in the RADIUS
Certificate Settings parameter block and reboot the radio.
To upload a certificate manually to an SM, first load it in a known place on your PC or network
drive, then click on a Delete button on one of the Certificate description blocks to delete a
certificate to provide space for your certificate. Click on Choose File, browse to the location of
the certificate, and click the Import Certificate button, and then reboot the radio to use the new
certificate.
When a certificate is in use, after the SM successfully registers to an AP, an indication of In Use
will appear in the description block of the certificate being used.
The public certificates installed on the SMs are used with the private certificate on the RADIUS
server to provide a public/private key encryption system.