H3C Technologies H3C Intelligent Management Center - Manual (Page 356)

338
17 Configuring computer authentication
Computer authentication has the following characteristics:
• Based on 802.1X authentication and can function as pre-authentication for 802.1X authentication.
• Authenticates computer names and certificates.
• Supported only on Windows operating systems.
• Automatically authenticates a user before the user logs in to Windows.
Computer authentication applies to the following scenarios:
• The iNode PC client performs computer authentication first and then 802.1X authentication for an
endpoint user.
• The computer uses the Windows built-in 802.1X client for authentication.
Using the iNode PC client
To use the iNode PC client to perform computer authentication, configure UAM, access device, and
iNode PC client.
Configuring UAM
This example provides a summary configuration procedure. For information about detailed steps, see
"
Adding access devices ," " Adding an ordinary access user ," and " 19 Configuring certificate
authentication ."
1. Add an access device.
The access device parameters configured in UAM must be the same as those configured on the
device.
2. Add an access policy and select EAP-TLS AuthN from the Certificate Type list.