Privacy and Security Notice

Windows Vista jlab_secure Wireless
Trusted Certificate Update Procedure

Note: This procedure is only for Windows wireless clients that are already configured to use the jlab_secure wireless network. Windows clients using the non-secure networks can use the procedure for enabling jlab_secure available at: https://cc.jlab.org/docs/networks/internal/guide/wireless/windows_secure.html .

This procedure is divided into two groups of steps. The first several steps allow you to insure that your JLAB domain Windows system has received the updated certificate for JLabWinCA. The second group of steps selects the new JLabWinCA certificate for use in your wireless network configuration.

Phase I: Ensure your Windows system has the new certificate

If you have not rebooted your Windows system while on the network recently (in the past week), you should do so before proceeding. This insures that your system has received the most recent updates from the domain.

Step 1

Click on Start > Control Panel

 

Step 2

Click on Network and Internet.

Step 3

Click on Internet Options.

Step 4

Select the Content tab at the top.

Step 5

Click on the Certificates button in the middle of the window.

Step 6

Select the Trusted Root Certification Authorities tab near the top.

Step 7

Look for the entries with JLabWinCA in the "Issued To" column. Insure that there is a certificate for JLabWinCA that shows 2010 expiration date. You may see other JLabWinCA entries, but they all will expire before 2010. Do not remove or otherwise modify any of the other certificate entries. Improperly modifying these can have unexpected (and quite painful) results. If you do not see the certificates as described, right-click and save the file JLabWinCA-2008.crt to your desktop. Double-click the file and follow the wizard to import the certificate into your trusted root certification authorities store.
If this still doesn't work, and you rebooted your system while connected to the network as described above, you may need to contact the helpdesk for assistance.

 

Phase II -- Enable the new certificate for use in your wireless configuration

Step 1

Right click on the Wireless Network Connection icon located in the system tray and select Network & Sharing Center. 

 

Step 2

Click Manage Wireless Networks on the left hand side of the screen.

Step 3

In the dialog box, click the add button. 

Step 4

Click the Manually Create a Network Profile button. 

Step 5

Type ‘jlab_secure’ in the Network Name field, and select WPA-Enterprise for security type. Select TKIP for encryption type, and click next. 

Step 6

 

In the window that pops up, click the ‘Change Connection Settings’ button. 

Step 7

Click the security tab.

Step 8

Next to the ‘Network Authentication Method’ pulldown menu, click the Settings button.

Step 9

Scroll through the Trusted Root Certificate Authorities list and find the entries for JLabWinCA. Ensure that all entries for JLabWinCA are checked. Do not remove or otherwise modify any of these certificate entries other than as described. Improperly modifying these can cause unpredictable and results. Once all JLAB certicicates are checked, click the configure button next to the authentication method pulldown menu.

Step 10

Uncheck the box next to Automatically use my Windows logon name and password.

 

 

Step 11

Click the popup balloon in the lower right hand corner of the screen.

 

Step 12

Enter your username and password, and type JLAB in the logon domain field. Click OK to connect.

 

 


This document is maintained by {helpdesk@jlab.org}

Copyright Jefferson Lab 2007