3.4 Security
This Chapter describes setting up security using the Atheros Client Utility(ACU).
While using the Atheros USB wireless network adapter, encryption data can protect its as it
is transmitted through the wireless network.
While using the AtherosUSB wirelessnetworkadapter,encryptingdata can
protectitsprivacyasitistransmitted throughthewirelessnetwork.
The ACUallowsconnection profilesof:
zNo security(not recommended)
Linkencryption/decryptionisdisabled,no keysareinstalled.
zWPA security
Enablestheuse of Wi-Fi Protected Access(WPA). Thisoption requiresIT
administration.Thisoption includesthe EAP(with dynamicWEP keys)
security protocols: EAP, PEAP, andLEAP.
WPA isa standard-based,interoperable securityenhancementthat
providesdataprotectionand accesscontrol for wirelessLAN systems. It
isderived from andisforward-compatible with the upcoming IEEE
802.11i standard. WPAleveragesTemporal Key Integrity Protocol (TKIP)
and Michael messageintegrity check(MIC) for data protection,and
802.1Xforauthenticated keymanagement.
WPA supportstwo mutually exclusive key managementtypes: WPA and
WPA passphrase (also known asWPA-Pre Shared Key (PSK)). Using
WPA, clientsand theauthentication server authenticatetoeach other
usinganEAPauthenticationmethod,and the clientand server generatea
pairwise master key (PMK).The server generatesthePMK dynamically
andpassesit to theaccesspoint.
zWPA-PSK security
EnablesWPA passphrase security (also known asWPA-Pre Shared Key
(PSK)).
z802.1x security
Enables802.1x security. This option requires IT administration. This
option includesthe EAP (withdynamic WEPkeys) security protocols:
EAP,PEAP,and LEAP.
802.1xisthestandard for wirelessLAN security defined by IEEEas802.1x
for 802.11,or simply802.1x. An accesspointthat supports802.1xand its
protocol, Extensible Authentication Protocol (EAP),actsastheinterface
between a wirelessclientand an authenticationserver such asa RADIUS
server, to which theaccesspoint communicatesover the wirednetwork.
zPre-Shared Key security (Static WEP)
Static WEPenablestheuse ofup to fourpre-shared (staticwired equivalentprivacy
(WEP)) keysthat are defined on boththe accesspointand theclient station.
These keysare stored in an encrypted formatinthe registry of the
Windowsdevice. When thedriverloadsand readsthe USB device's
registry parameters, italso findsthe staticWEP keys, decryptsthem,and
storesthem in volatile memory on the USBdevice.
If adevicereceivesa packet thatisnot encrypted withthe appropriatekey,
thedevicediscardsthe packet and never deliversittotheintendedrecipient.
14