TEAP Configuration for Windows Client

To secure your network, follow these steps to configure a client device for TEAP (Tunneled Extensible Authentication Protocol) authentication.

1. Navigate to Control Panel > Network and Sharing Centre and click Set up a new connection or network.
   Figure 1: TEAP Configuration - Set up New Connection
2. Select the Manually connect to a wireless network option.
   Figure 2: TEAP Configuration - Select Manually Connect Option
3. Enter the details for the wireless network.
   Figure 3: TEAP Configuration - Enter Wireless Network Details

   • Network Name—Provide an SSID name.
   • Security Type—Select the WPA3-Enterprise option.

   Click Next.

4. Click Change connection settings.
   Figure 4: TEAP Configuration - Change Settings for Network
5. In the Wireless Network Properties, enter the details.
   Figure 5: TEAP Configuration - Choose Authentication Method

   • Choose a network authentication method—Select Microsoft:Tunnel EAP (TEAP).

   Click Settings.
6. In the TEAP Properties window, select the options.
   Figure 6: TEAP Configuration - Select TEAP Properties

   • Connect to these servers—Enter auth.mist.com.
   • Trusted Root Certification Authorities—Select trusted Root CA for the client to validate Mist Access Assurance server certificate (or your custom RADIUS server certificate)
   • Select a primary EAP methods for authentication—Microsoft Smart Card or other certificate (EAP-TLS)
   • Select a secondary EAP methods for authentication—Microsoft Smart Card or other certificate (EAP-TLS)

   Click Configure for each of the EAP-TLS options.

7. For each option, ensure Use simple certificate selection (Recommended) is selected and check the same Root CA to enable the client to trust Mist Access Assurance server certificate.
   Figure 7: TEAP Configuration - Choose Root CA

   Click OK.