### Utilizar Segurança EAP-FAST

Para utilizar a segurança EAP no Utilitário Cliente Atheros, aceda ao separador Segurança na janela Gestão de Perfil.

1. No separador Segurança, escolha o botão de opção WPA/WPA2 .
   OU: No separador Segurança, escolha o botão de opção 802.1x.
2. Escolha EAP-FAST no menu de contexto.

Activar segurança EAP-FAST :

Para utilizar a segurança EAP-FAST, o computador tem de suportar EAP-FAST. Contacte o gestor de TI.

1. Clique no separador Segurança na janela Editor de Perfil.
2. Clique em Configurar. Aparece a janela Definir EAP-FAST.
3. Escolha um método de autenticação EAP-FAST na lista pendente Método de Autenticação EAP-FAST.
4. Clique em Configurar.
   - Se escolherToken/Palavra-passe GTC na lista pendente Método de Autenticação EAP-FAST e clicar em Configurar, aparece a janela Definir Configuração PEAP (EAP-GTC). Para saber mais sobre esta opção, consulte Utilizar segurança PEAP (EAP-GTC).
   - Se escolher Nome de Utilizador e Palavra-passe MSCHAPv2 na lista pendente Método de Autenticação EAP-FAST e clicar em Configurar, aparece a janela Configurar Nome de Utilizador e Palavra-passe. Para saber mais sobre esta opção, consulte Utilizar segurança PEAP- MSCHAP V2.
   - Se escolher Certificado de Cliente TLS na lista pendente Método de Autenticação EAP-FAST e clicar em Configurar, aparece a janela Definir Certificado. Ao configurar EAP-TLS para EAP-FAST, pode marcar a caixa de verificação Autenticar Identidade do Servidor para forçar o sistema a autenticar a identidade do servidor como nível adicional se segurança. Esta opção só está disponível ao configurar o EAP-FAST. Para saber mais sobre esta opção, consulte Utilizar segurança EAP- TLS.
5. Caso pretenda forçar o adaptador cliente a desassociar após o seu fim de sessão, para que outro utilizador não consiga obter acesso a uma rede sem fios utilizando as suas credenciais, marque a caixa de verificação Sem Ligação de Rede Salvo se o Utilizador Tiver Sessão Iniciada. A opção predefinida é a da caixa marcada..
6. Execute uma das seguintes acções:
   - If you want to enable automatic PAC provisioning, make sure the Allow Automatic PAC Provisioning for this Profile check box is checked. A protected access credentials (PAC) file is obtained automatically as needed (for instance, when a PAC expires, when the client adapter accesses a different server, when the EAP-FAST username cannot be matched to a previously provisioned PAC, etc.). This is the default setting.
   - If you want to enable manual PAC provisioning, uncheck the Allow Automatic PAC Provisioning for this Profile check box. This option requires you to choose a PAC authority or manually import a PAC file.
7. From the Select one or more PAC Authority to use with this Profile list, highlight the PAC authorities associated with the network defined by the profile's SSID. The list contains the names of all the authentication servers from which you have previously provisioned a PAC.
8. Click Manage. The Select EAP-FAST PAC window appears.
   This window lets you group PAC authorities to facilitate authentication while roaming. For example, if there are three PAC authorities at a certain site covering different areas of the site, you can create a group containing these authorities and select one of them in the PAC list. In this way, if you're roaming around the site, the other authorities in the group will allow you access to the network.
   A group consists of one or more authorities. Each authority may have one or more PAC files. A PAC authority can belong to only one group.
9. To create a new group, click New Group. A group consists of one or more authority servers that the user trusts. To rename the group, right-click the group and choose Rename. You can also rename the group by clicking it and typing the new name.
   When you create a new group, you can either import a PAC file into it using the Import button or you can move a PAC from another group to the new group.
10. To import a PAC, click Import. The PAC Import window appears. Do the following:
    1. Click Browse and select a PAC file to import. The default location is C:/Program Files/Atheros.
    2. Click the PAC file (*.pac) so that it appears in the File name box at the bottom of the window.
    3. Clique em Abrir.
    4. If the Enter Password window appears, enter the PAC file password, which can be obtained from your system administrator, and click OK.
       Note: PAC file passwords are optional. The PAC authority determines whether to issue PAC files that require user-supplied passwords. Nevertheless, all PAC files (even those without passwords) are encrypted and protected. PAC file passwords are different from EAP-FAST passwords and need to be entered only once, at the time a PAC is imported.
    5. If you try to import a PAC file with the same PAC ID as a previously imported PAC file, you are asked to update the existing PAC. If you click Yes, the existing PAC is replaced by the new one from the imported file.
    6. If the PAC file was imported successfully, the following message appears: "EAP-FAST PAC file was imported and is ready for use." Click OK to return to the PAC Import window.
    7. Click one of these PAC store options to determine where the imported PAC file will be stored and by whom it will be accessible:
       Global - PACs that are stored in the global PAC store can be accessed and used by any user at any logon stage. Global PACs are available before or during logon or after the user is logged off if the profile is not configured with the No Network Connection Unless User is Logged In option.
       Private - PACS that are stored in the private store can be accessed and used only by the user who provisioned them or the system administrator. They are not accessible until the user is logged onto the local system. This is the default option.
    8. Click Import. The PAC file appears under the selected group.
11. To delete a group, select the group and click Delete. You can also delete the group by right-clicking the group and choosing Delete.
12. To close the Select EAP-FAST PAC window, click Close.
13. To automatically use PACs belonging to the same PAC authority group, check the Use Any PAC Belonging to the Same Group check box.
14. Check the Use Machine PAC for Domain Logon check box if you want the client to attempt to log into a domain using machine authentication with user credentials rather than user authentication. Doing so enables your computer to connect to the network prior to user logon. The default setting is unchecked.
15. Click OK when done configuring EAP-FAST.