Export the Elektron Server Certificate

The first step in configuring your Windows XP machine actually takes place on your Elektron server. Windows XP will require the digital certificate that was used to sign your Elektron server certificate. This certificate was automatically created when you first installed Elektron.

If you are using a certificate that was issued by a third party certificate authority such as Verisign, you can skip down to Configure the Wireless Network step. However, you need to ensure that your certificate includes an appropriate "extended key usage" extension. Windows XP requires this extension to perform wireless authentication. Contact your certificate provider to determine if your certificate has such an extension.

If you are using the certificate that was created by Elektron when you first installed the server, the appropriate extended key usage extension is included.

On your Elektron server machine, launch the Elektron Settings application.

In Elektron Settings, navigate to the Server Certificate page, and click the Text File export button.

Save the certificate export file to a removable USB thumb drive or use some other way to transfer it to the Windows XP client machine.

Install the Elektron Server Certificate

After you've exported your Elektron certificate, the next step is to install it on your Windows XP client machine.

On the Windows XP client machine, insert the USB thumb drive into and find the server certificate file.

Double click the server certificate file to open the certificate properties dialog and view the details of the certificate.

Click the "Install Certificate" button to begin the Certificate Import Wizard.

Select "Place all certificates in the following store", and click the "Browse" button.

Select "Trusted Root Certification Authorities" and click OK.

With the "Trusted Root Certificate Authorities" store set, click "Next".

Click "Finish" to confirm the import of your Elektron server certificate.

Windows XP warns you about the import. Take note of the name on the certificate ("Periodik Labs Elektron CA" in this example). You'll need it later.

After the Certificate Import Wizard completes you will be returned to the Properties dialog. Click OK to close the Properties dialog.

Configure the Wireless Network

Now that the Elektron server certificate is installed, it's time to configure the wireless network settings.

From the Start menu, open the Control Panel and select "Network and Internet Connections".

From the Network and Internet Connections applet, select "Network Connections".

Right-click the wireless network connection you will be using, and select "View Available Wireless Networks".

Find your wireless network in the list of nearby networks. In this example, we will be configuring the network "Periodik".

Click the "Change advanced settings" link to setup the network.

The Wireless Network Connection properties dialog opens.

On the Wireless Networks tab, click the Add button to create an entry for your wireless network.

Enter your network name ("Periodik" in this example), set network authentication to "WPA" and data encryption to TKIP (or optionally AES, if your network devices support it).

Switch to the Authentication tab and set the EAP type to "Protected EAP (PEAP)", and optionally disable "Authenticate as computer" and "Authenticate as guest". Click the Properties button to configure PEAP.

Check the "Validate server certificate" checkbox and scroll down to find your server certificate (from the "Install the Elektron Server Certificate" stage), and click its checkbox. Click OK.

Back in the Wireless network properties dialog, click OK.

Back in the Wireless network connection properties dialog, click OK.

Your Windows XP client machine is now configured. In a few seconds, it should automatically connect to your network. Use the "View Available Wireless Networks" option to confirm that you are connected.