Solved

Security around WPA2 Enterprise

Posted on 2010-11-10
5
859 Views
Last Modified: 2013-12-09
Greetings all

We are looking at deploying wireless networks in our offices globally. From what I understand, we'll be using WPA2 Security. From what I understand, users will have a seperate username/password to log onto the wireless networks from their laptops and mobile devices (Blackberry, iPhone, Android etc).

I'm a little confused about the security aspects of this in terms of RADIUS and certificates. Since we are using usernames and passwords, presumabley with the help of a RADIUS server, are certificates also going to be involved? Or are certificates only involved if we're NOT using usernames/ passwords.

Secondly, if we are using certificates (either with RADIUS or not), how do we get the certificates onto laptops and mobile devices?

Finally, it's the mobile device side that I'm most worried about. Has anyone any advise regarding getting Blackberry, iPhones and Androids to work with Enterprise WPA2?

Many thanks in advance, folks.
0
Comment
Question by:Joe_Budden
  • 2
  • 2
5 Comments
 
LVL 4

Assisted Solution

by:zgiuffria
zgiuffria earned 250 total points
Comment Utility
If im not mistaken you can use a certificate and a user name and password.  It is up to you.  You will just want to put the certificates on the laptops and there will be an option to install them.  With the mobile devices it will probably ask you to allow the cert.  The blackberry and I phones should work fine with WPA2...
0
 
LVL 8

Accepted Solution

by:
devinnoel earned 250 total points
Comment Utility
At DEFCON they decided to deploy WPA2 enterprise to secure their WiFi. Popularly known as the most hostile network in the world, I think it says something that they chose it & it held up.

You need to install a digital certificate on each client for it to authenticate the AP, and then they provide a username/password to authenticate themselves to the server.

0
 
LVL 1

Author Comment

by:Joe_Budden
Comment Utility
Thanks guys - any ideas on how to get the certificates on the mobile devices? Or, as zgiuffria says, will mobile users just recv a prompt about the certificate and whether the user wants to allow the connection anyway?
0
 
LVL 8

Expert Comment

by:devinnoel
Comment Utility
The only one I've looked at much was nasty old Windows Mobile 6.5 a while back. There was an option somewhere to add a certificate. I haven't looked into it for my current (Android phone). I'd suggest goggling around on it a bit.
0
 
LVL 4

Expert Comment

by:zgiuffria
Comment Utility
I think it depends on the certificate and if it identifies it as a certificate.
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

In this article we have discussed about the OS X EI Capitan and how to fix Wi-Fi issue in OS X El Capitan. We have explained how to delete system level preferences and create a new Wi-Fi location to resolve Wi-Fi issue.
This subject  of securing wireless devices conjures up visions of your PC or mobile phone connecting to the Internet through some hotspot at Starbucks. But it is so much more than that. Let’s look at the facts: devices#sthash.eoFY7dic.
This Micro Tutorial will show you how to maximize your wireless card to its maximum capability. This will be demonstrated using Intel(R) Centrino(R) Wireless-N 2230 wireless card on Windows 8 operating system.
This video is in connection to the article "The case of a missing mobile phone (https://www.experts-exchange.com/articles/28474/The-Case-of-a-Missing-Mobile-Phone.html)". It will help one to understand clearly the steps to track a lost android phone.

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now