3.4 Security
This Chapter describes setting up security using the Atheros Client Utility(ACU).
While using the Atheros USB wireless network adapter, encryption data can protect its as it
is transmitted through the wireless network.
While usingthe AtherosUSB wirelessnetworkadapter,encrypting data can
protectitsprivacyasitistransmitted throughthewirelessnetwork.
The ACUallowsconnection profilesof:
zNo security(not recommended)
Linkencryption/decryptionisdisabled,no keysare installed.
zWPA security
Enablestheuse of Wi-Fi ProtectedAccess(WPA). Thisoption requiresIT
administration. Thisoption includestheEAP(withdynamicWEP keys)
security protocols: EAP, PEAP, andLEAP.
WPA isa standard-based,interoperable securityenhancementthat
providesdataprotection and accesscontrol for wirelessLAN systems. It
isderivedfrom and isforward-compatible with the upcoming IEEE
802.11i standard. WPAleveragesTemporal Key Integrity Protocol (TKIP)
and Michael message integrity check(MIC) for data protection,and
802.1Xforauthenticated keymanagement.
WPA supportstwomutually exclusive key managementtypes: WPA and
WPA passphrase (also known asWPA-Pre Shared Key (PSK)). Using
WPA, clientsand theauthentication server authenticatetoeach other
using anEAPauthentication method,and the clientand server generatea
pairwise master key (PMK).The server generatesthe PMK dynamically
andpassesit to the accesspoint.
zWPA-PSK security
EnablesWPA passphrase security (also known asWPA-Pre Shared Key
(PSK)).
z802.1x security
Enables802.1x security.This option requiresIT administration. This
option includesthe EAP (withdynamic WEPkeys) security protocols:
EAP,PEAP,and LEAP.
802.1xisthestandard for wirelessLAN security definedby IEEEas802.1x
for 802.11, or simply802.1x. An accesspointthat supports802.1xand its
protocol, Extensible Authentication Protocol (EAP),actsastheinterface
betweena wirelessclientand anauthentication server such asa RADIUS
server, to which theaccesspoint communicatesover the wirednetwork.
zPre-Shared Key security (Static WEP)
Static WEPenablestheuse ofup to fourpre-shared (staticwired equivalentprivacy
(WEP)) keysthat aredefined on boththe accesspointand the client station.
These keysare stored in an encrypted formatinthe registry of the
Windowsdevice. When thedriverloadsandreadsthe USB device's
registry parameters, italso findsthe staticWEP keys, decryptsthem,and
storesthem in volatilememory on the USBdevice.
If adevice receivesa packet thatisnot encrypted withthe appropriatekey,
thedevice discardsthe packet andnever deliversittotheintendedrecipient.
13