Set Up Profile Security

Use the Intel® PROSet/Wireless WiFi Connection Utility
Personal Security
Personal Security Settings
Set up Data Encryption and Authentication

• Set up a Client with No Authentication and No Data Encryption
• Set up a Client with WEP 64-bit or WEP 128-bit Data Encryption
• Set up a Client with WPA*-Personal (TKIP) or WPA2*-Personal (TKIP) Security Settings
• Set up a Client with WPA*-Personal (AES-CCMP) or WPA2*-Personal (AES-CCMP) Security Settings

Enterprise Security
Enterprise Security Settings

Network Authentication

• Configure Profiles for Infrastructure Networks
• Set up a Client with Shared Network Authentication
• Set up a Client with WPA-Enterprise or WPA2-Enterprise Network Authentication

802.1X Authentication Types

• Set up a Client with EAP-SIM Network Authentication
• Set up a Client with EAP-AKA Network Authentication
• Set up a Client with TLS Network Authentication
• Set up a Client with TTLS Network Authentication
• Set up a Client with PEAP Network Authentication
• Set up a Client with LEAP Network Authentication
• Set up a Client with EAP-FAST Network Authentication

Use the Intel® PROSet/Wireless WiFi Connection Utility

The following sections describe how to use the Intel® PROSet/Wireless WiFi Connection Utility to set up the required security settings for your WiFi adapter. See Personal Security.

It also provides information about how to configure advanced security settings for your WiFi adapter. This requires information from a systems administrator (corporate environment) or advanced security settings on your access point (for home users). See Enterprise Security.

For general information about security settings, see Security Overview.

Set up Data Encryption and Authentication

In a home wireless network you can use a variety of simple security procedures to protect your wireless connection. These include:

• Enable Wi-Fi Protected Access* (WPA).
• Change your password.
• Change the network name (SSID).

Wi-Fi Protected Access (WPA) encryption provides protection for your data on the network. WPA uses an encryption key called a pre-shared key (PSK) to encrypt data before transmission. Enter the same password in all of the computers and access point in your home or small business network. Only devices that use the same encryption key can access the network or decrypt the encrypted data transmitted by other computers. The password automatically initiates the Temporal Key Integrity Protocol (TKIP) or AES-CCMP protocol for the data encryption process.

Network Keys

WEP encryption provides two levels of security:

• 64-bit key (sometimes referred to as 40-bit)
• 128-bit key (also known as 104-bit)

For improved security, use a 128-bit key. If you use encryption, all wireless devices on your wireless network must use the same encryption keys.

You can create the key yourself and specify the key length (64-bit or 128-bit) and key index (the location that a specific key is stored). The greater the key length, the more secure the key.

Key Length: 64-bit

Pass phrase (64-bit): Enter five (5) alphanumeric characters, 0-9, a-z or A-Z.
Hex key (64-bit): Enter 10 hexadecimal characters, 0-9, A-F.

Key Length: 128-bit

Pass phrase (128-bit): Enter 13 alphanumeric characters, 0-9, a-z or A-Z.
Hex key (128-bit): Enter 26 hexadecimal characters, 0-9, A-F.

With WEP data encryption, wireless station can be configured with up to four keys (the key index values are 1, 2, 3, and 4). When an access point or a wireless station transmits an encrypted message that uses a key stored in a specific key index, the transmitted message indicates the key index that was used to encrypt the message body. The receiving access point or wireless station can then retrieve the key that is stored at the key index and use it to decode the encrypted message body.

Set up a Client with No Authentication and No Data Encryption

CAUTION: WiFi networks using no authentication or encryption are highly vulnerable to access by unauthorized users.

On the WiFi connection utility main page, select one of the following methods to connect to an infrastructure network:

• Double-click an infrastructure network in the WiFi Networks list.
• Select an infrastructure network in the WiFi Networks list. Click Connect. The WiFi connection utility automatically detects the security settings for the WiFi adapter.

If there is no authentication required, the network connects without a prompt to enter any log-on credentials. Any wireless device with the correct network name (SSID) is able to associate with other devices in the network.

To create a profile for a WiFi network connection with no encryption:

1. Click Profiles... on the WiFi connection utility main window.
2. On the Profiles list, click Add to open the wireless profile General Settings.
3. Profile Name: Enter a descriptive profile name.
4. WiFi Network Name (SSID): Enter the name of your wireless network.
5. Operating Mode: Click Device to Device (ad hoc).
6. Click Next to open the Security Settings.
7. Personal Security is selected by default.
8. Security Settings: The default setting is None, which indicates that there is no security on this wireless network.
9. Click OK. The profile is added to the Profiles list and connects to the wireless network.

Set up a Client with WEP 64-bit or WEP 128-bit Data Encryption

When WEP data encryption is enabled, a network key or password is used for encryption.

A network key is provided for you automatically (for example, it might be provided by your wireless network adapter manufacturer), or you can enter it yourself and specify the key length (64-bit or 128-bit), key format (ASCII characters or hexadecimal digits), and key index (the location where a specific key is stored). The greater the key length, the more secure the key.

To add a network key for a Device to Device (ad hoc) network connection:

1. On the WiFi connection utility main window, double-click a Device to Device (ad hoc) network in the WiFi Networks list or select the network and click Connect.
2. Click Profiles... to access the Profiles list.
3. Click Properties to open the wireless profile General Settings. The Profile name and WiFi Network Name (SSID) display. Device to Device (ad hoc) should be selected as the Operating Mode.
4. Click Next to open the Security Settings.
5. Personal Security is selected by default.
6. Security Settings: The default setting is None, which indicates that there is no security on this wireless network.

To add a password or network key:

1. Security Settings: Select either WEP 64-bit or WEP 128-bit to configure WEP data encryption with a 64-bit or 128-bit key.

When WEP encryption is enabled on an access point, the WEP key is used to verify access to the network. If the wireless device does not have the correct WEP key, even though authentication is successful, the device is unable to transmit data through the access point or decrypt data received from the access point.

Name	Description
Password	Enter the Wireless Security Password (Pass phrase) or Encryption Key (WEP key).
Pass phrase (64-bit )	Enter five (5) alphanumeric characters, 0-9, a-z or A-Z.
WEP key (64-bit)	Enter 10 hexadecimal characters, 0-9, A-F.
Pass phrase (128-bit)	Enter 13 alphanumeric characters, 0-9, a-z or A-Z.
WEP key (128-bit)	Enter 26 hexadecimal characters, 0-9, A-F.

2. Key Index: Change the Key Index to set up to four passwords.
3. Click OK to return to the Profiles list.

To add more than one password:

1. Select the Key Index number: 1, 2, 3, or 4.
2. Enter the Wireless Security Password.
3. Select another Key Index number.
4. Enter another Wireless Security Password.

Set up a Client with WPA*-Personal (TKIP) or WPA2*-Personal (TKIP) Security Settings

WPA* Personal Mode requires manual configuration of a pre-shared key (PSK) on the access point and clients. This PSK authenticates a user's password or identifying code, on both the client station and the access point. An authentication server is not needed. WPA Personal Mode is targeted to home and small business environments.

WPA2* is the second generation of WPA security that provides enterprise and consumer wireless users with a high level of assurance that only authorized users can access their wireless networks. WPA2 provides a stronger encryption mechanism through Advanced Encryption Standard (AES), which is a requirement for some corporate and government users.

NOTE: To achieve transfer rates greater than 54 Mbps on 802.11n connections, WPA2-AES security must be selected. No security (None) can be selected to enable network setup and troubleshooting.

To configure a profile with WPA-Personal network authentication and TKIP data encryption:

1. On the WiFi connection utility main window, double-click an infrastructure network in the WiFi Networks list or select the network and click Connect.
2. Click Profiles... to access the Profiles list.
3. Click Properties to open the wireless profile General Settings. The Profile name and WiFi Network Name (SSID) display. Network (Infrastructure) should be selected as the Operating Mode.
4. Click Next to open the Security Settings.
5. Select Personal Security.
6. Security Settings: Select WPA-Personal (TKIP) to provide security to a small business network or home environment. A password, called a pre-shared key (PSK), is used. A long password provides stronger network security than a short password.

If your wireless access point or router supports WPA2-Personal, then you should enable it on the access point and provide a long, strong password. A long password provides stronger network security than a short password. The same password entered in the access point needs to be used on this computer and all other wireless devices that access the wireless network.

NOTE: WPA-Personal and WPA2-Personal are interoperable.

7. Wireless Security Password (Encryption Key): Enter a text phrase with eight to 63 characters. Verify that the network key matches the password in the wireless access point.
8. Click OK to return to the Profiles list.

Set up a Client with WPA*-Personal (AES-CCMP) or WPA2*-Personal (AES-CCMP) Security Settings

Wi-Fi Protected Access (WPA*) is a security enhancement that strongly increases the level of data protection and access control to a wireless network. WPA enforces 802.1X authentication and key-exchange and only works with dynamic encryption keys. For a home user or small business, WPA-Personal uses either Advanced Encryption Standard - Counter CBC-MAC Protocol (AES-CCMP) or Temporal Key Integrity Protocol (TKIP).

To create a profile with WPA2*-Personal network authentication and AES-CCMP data encryption:

1. On the WiFi connection utility main window, double-click an infrastructure network from the WiFi Networks list or select the network and click Connect.
2. If these are being transmitted, the Profile name and WiFi Network Name (SSID) should display on the General Settings screen. Network (Infrastructure) should be selected as the Operating Mode. Click Next to open the Security Settings.
3. Select Personal Security.
4. Security Settings: Select WPA2-Personal (AES-CCMP) to provide this level of security in the small network or home environment. It uses a password, also called a pre-shared key (PSK). A long password provides stronger network security than a short password.

AES-CCMP (Advanced Encryption Standard - Counter CBC-MAC Protocol) is a newer method for privacy protection of wireless transmissions specified in the IEEE 802.11i standard. AES-CCMP provides a stronger encryption method than TKIP. Choose AES-CCMP as the data encryption method whenever strong data protection is important.

If your Wireless access point or router supports WPA2-Personal, then you should enable it on the access point and provide a long, strong password. The same password entered into the access point needs to be used on this computer and all other wireless devices that access the wireless network.

NOTE: WPA-Personal and WPA2-Personal are interoperable.

Some security solutions may not be supported by your computer's operating system. You may require additional software or hardware as well as wireless LAN infrastructure support. Contact your computer manufacturer for details.

5. Password: Wireless Security Password (Encryption Key): Enter a text phrase (length is between eight and 63 characters). Verify that the network key used matches the wireless access point key.
6. Click OK to return to the Profiles list.