How to Configure 802.1x EAP-TLS to Secure the Wireless Environment with Self-Signed Certificate?

This example shows how to use Android/iOS phone import the self-sign certificate from NXC to get the wireless connection with 802.1x EAP-TLS protected. We need a certificate which is generated by the NXC.

 Configure Certificate

1     Go to CONFIGURATION > Object > Certificate > My certificates, and add a self-signed certificate. In Subject Information, Set the NXC’s IP in the Host IP Address.

In Enrollment Options, select Create a self-signed certificate

2     Export the self-signed certificate from My certificates. Double click the self-signed certificate and scroll down the page to press Export Certificate Only. Save the certificate.

3     Go to Trusted Certificate and import the self-signed certificate.

4     Go to My certificate and Export the “Self-signed certificate with Private Key”. Double click the self-signed certificate and scroll down the page to press Export Certificate with Private Key. Save the certificate and add file extension(*.pfx, *.p12 or *.crt).

5     Import the self-signed certificate into Android phone. (Here I copied the certificate to the Android phone storage then import them. I send the mail with certificate to iPhone and install it.)

Android: In step “e”, the “CREDENTIAL USE” must select as “Wi-Fi”

a

b

c

  d

e  

iOS:

a

b

c

d

e

f

g

h

i

Configure AP profile

1     Go to CONFIGURATION > Object > AP Profile > SSID> Security List, and add a Security profile

2     Go to CONFIGURATION > Object > AP Profile > SSID> SSID List, and add an SSID profile.

3     Go to CONFIGURATION > Wireless > AP Management > AP Group, and add this SSID into the default group.

Test the Result

1     Use Android/iOS phone and connect to the SSID Zyxel-EAPTLS.

Android:

a

b

c

d

e

iOS:

a

b

c

d

e

f

g

i

2     Check the station information On NXC station info. Go to Configuration > Wireless > Station info.