Mobility Configuration, Server Certificates Tab

The options on this tab apply only when the Mobility client is using PEAP or EAP-TLS for authentication. In addition, they can only be modified if you have administrative privileges on the Mobility client device.

Use the following settings to configure the use of digital certificates when the Mobility client is using a RADIUS server for authentication with EAP-TLS or PEAP:

Setting	Description
Use the same settings for both device and user authentication	You can configure the Mobility client to use the same settings for both user and device authentication, or you can use different settings for each.
Connect only if server name ends with	When this option is selected, the Mobility client can only connect to a Mobility server if the distinguished name in the Subject or Alternative Subject of the certificate delivered from the RADIUS server ends with a text string that you specify. You can use this option to designate the domain to which the authenticating RADIUS server must belong.
Validate server certificate	When this option is selected, the RADIUS server must send the Mobility client a certificate signed by a certificate authority that has established a trust relationship with the client. A certificate in the same trusted root chain must already be installed on the Mobility client. When this option is cleared, the Mobility client will accept any authentication server certificate, using it as a public key.