WPA configuration via template (SCEP)

– only if SCEP is used –

The following information is related to 802.1X configuration of LANs.

If you use SCEP, you can benefit from the template file /setup/scep/wpa.conf.scep provided on the devices:

ctrl_interface=/var/run/wpa_supplicant
ctrl_interface_group=0
ap_scan=0
network={
    key_mgmt=IEEE8021X
    eapol_flags=0
    eap=TLS
    identity="%IDENTITY%"
    ca_cert="/setup/cacerts/scep/serverca.pem"
    client_cert="/setup/cacerts/scep/client.pem"
    private_key="/setup/cacerts/scep/client.key"
        }

The %IDENTITY%1 Former spelling: __IDENTITY__ variable is replaced by the CN of the client certificate.

The client evaluates this template and creates the wpa.conf file if the following requirements are met:

• SCEP is configured in the terminal.ini file of the client. For further information, see Configuring SCEP for eLux in the SCEP guide.
• There is no individual /setup/scep/wpa.conf file available.

If required, modify the template and transfer it to the devices to /setup/scep/wpa.conf.scep. To do so, use the Scout feature Files configured for transfer. Note that if you have an individual /setup/scep/wpa.conf file,2 see Configuring WPA supplicant it has precedence.

The wpa.conf file generated from the template is created in a temporary directory and can only be viewed via the diagnostic files.