Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

Dell Wyse ThinLinux 1.0.3 Administrator’s Guide

PDF

EAP-PEAP (MSCHAPv2) Machine authentication

To enable EAP-PEAP (MSCHAPv2) machine authentication:
  • Your machine must have an account created in the Active Directory database with Hostname as the username field.
  • Set the same password for all machine/host name accounts to be created.

  • The INI parameter should contain a MachinePassword Field that can be used for authentication.

To authenticate 802-1x using Machine name (Host name):
  1. Turn on your thin client device. Once the INI is downloaded to the thin client and all the 802-1x parameters for machine PEAP authentication are retrieved from the INI server, the authentication starts in the background.

    The Authentication module performs the Network Manager configuration required for 802-1x PEAP MSCHAPv2 authentication by using the host name and password from INI and 802-1x configurations from INI.

    • If 802-1x authentication is successful, then thin client gets IP Address from protected VLAN.
    • If 802-1x authentication fails due to any wrong 802-1x configuration, then thin client remains in the Guest VLAN.

  2. When you restart your thin client, the device moves to Guest VLAN by sending an EAPOL logoff to switch and disabling the 802-1x configuration at Network Connections applet.
The following is an example of the INI configuration for EAP-PEAP (MSCHAPv2) 802-1x machine authentication:
For AD and Domain settings
DomainList=npac.local DisableDomain=no

For Imports Certificates

ImportCerts=yes Certs=npac-ca-cert.pem

For 802-1x Configuration

Enable802=yes Authentication=PEAP InnerAuthentication=MSCHAPv2 PeapVersion=Auto PromptPassword=no CACertificate=npac-ca-cert.pem
                                 Authmode=Machine MachinePassword=tangocharlie
                              

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\