Intermec CK30 Installation and operating instructions

CK30 Handheld
Computer
User's Manual
Addendum

ii CK30 Handheld Computer User’s Manual Addendum
Intermec Technologies Corporation
Corporate Headquarters
6001 36th Ave. W.
Everett, WA 98203
U.S.A.
www.intermec.com
The information contained herein is proprietary and is provided solely for the purpose
of allowing customers to operate and service Intermec-manufactured equipment and is
not to be released, reproduced, or used for any other purpose without written
permission of Intermec.
Information and specifications contained in this document are subject to change
without prior notice and do not represent a commitment on the part of Intermec
Technologies Corporation.
©2004 by Intermec Technologies Corporation. All rights reserved.
The word Intermec, the Intermec logo, Norand, ArciTech, CrossBar, Data Collection
Browser, dcBrowser, Duratherm, EasyCoder, EasyLAN, Enterprise Wireless LAN,
EZBuilder, Fingerprint, i-gistics, INCA (under license), InterDriver, Intermec Printer
Network Manager, IRL, JANUS, LabelShop, Mobile Framework, MobileLAN,
Nor*Ware, Pen*Key, Precision Print, PrintSet, RoutePower, TE 2000, Trakker
Antares, UAP, Universal Access Point, and Virtual Wedge are either trademarks or
registered trademarks of Intermec Technologies Corporation.
Throughout this manual, trademarked names may be used. Rather than put a
trademark (™or ®) symbol in every occurrence of a trademarked name, we state that
we are using the names only in an editorial fashion, and to the benefit of the trademark
owner, with no intention of infringement.

CK30 Handheld Computer User’s Manual Addendum iii
Contents
What’s New in Service Pack 2.................................................................................... 5
What Does CCX Compliance Mean? ........................................................................ 5
What is EAN.UCC Composite Symbology? .............................................................. 5
Setting Funk Odyssey Security................................................................................... 5
Selecting Funk as Your Security Choice....................................................... 6
Selecting a Profile ........................................................................................ 6
Configuring WPA Security.......................................................................... 7
Configuring 802.1x Security........................................................................ 9
Configuring LEAP Security ....................................................................... 11
Configuring Static WEP Security .............................................................. 12
Loading a Certificate ................................................................................. 13
Disabling or Modifying Keypad Functions .............................................................. 16
Using the CK30 With a Low Battery Condition ...................................................... 17
Understanding Radio Power Management Settings.................................................. 18
Using Energy Saving Mode With Your 1551E or 1553 Scanner .............................. 18

iv CK30 Handheld Computer User’s Manual Addendum

CK30 Handheld Computer User’s Manual Addendum 5
What’s New in Service Pack 2
This addendum covers the new features available in service pack
2 for the CK30 Handheld Computer. Use this addendum in
combination with the CK30 Handheld Computer User’s
Manual (P/N 073528-003) for complete information for service
pack 2. These features have been added or modified:
• CCX v1.0 compliance
• EAN.UCC Composite symbology
• Funk Odyssey™ security
• Ability to disable or modify some keypad key functions
• Radio Power Management
• Energy Saving mode with the 1551E or 1553 scanner
What Does CCX Compliance Mean?
The CK30 is now CCX v1.0 compliant. The Cisco Compatible
Extensions (CCX) Program for WLAN devices provides tested
compatibility with licensed Cisco infrastructure innovations.
The Cisco Compatible Extensions Program enables you to take
advantage of the Cisco Aironet® wireless network.
What is EAN.UCC Composite Symbology?
The EAN.UCC Composite symbology combines a linear
component (EAN-128) with a 2D component (PDF417) to
encode data. EAN.UCC Composite bar code symbols are used
for encoding identification numbers and data supplementary to
the identification in accordance with EAN and UCC application
guidelines. You must have the IT4000 imager in your CK30 to
be able to use the EAN.UCC Composite symbology.
Setting Funk Odyssey Security
Funk Odyssey security provides everything that you get with
Microsoft security with the addition of CCX compliance. Funk
security enables you to use LEAP and TTLS authentication on
your CK30.

6CK30 Handheld Computer User’s Manual Addendum
The type of security you choose is not dependent on your
authentication server. For example, you can use Funk security
with a Microsoft server.
To use Funk security, you need to:
• Select Funk security as your security choice
• Select a profile
• Set profile settings
• Download a certificate (if necessary)
Selecting Funk as Your Security Choice
The default security choice is Microsoft. If you want to use Funk
security, you need to select it as your security choice.
To select Funk security as your security choice
1 Press Cand then B. The System Main Menu appears.
2 Select the Configuration Utility.
3 Select Communications > 802.11 Radio > Security Choice.
4 From the Security Choice dialog box, choose Funk Security.
An alert box appears asking if you want to warm boot now.
5 Press Enter. Your CK30 warm boots.
Selecting a Profile
You can define up to four profiles for your Funk Odyssey
security. Different profiles let your CK30 communicate in
different networks without having to change all of your security
settings. For example, you might want to set up one profile for
the manufacturing floor and one for the warehouse.
To select a profile
1 Press Cand then B. The System Main Menu appears.
2 Select the Configuration Utility.
3 Select Communications > 802.11 Radio > Select Profile.
4 Select Active Profile and choose the profile you want to
name.

CK30 Handheld Computer User’s Manual Addendum 7
5 (Optional) Select Change Profile Label to give the active
profile a meaningful name.
6 Repeat Steps 4 and 5 for as many profiles as you want to
define.
7 Select the profile you want to configure with security settings.
8 Press Esc to return to the 802.11 Radio menu.
9 Configure your security settings.
Configuring WPA Security
Wi-Fi Protected Access (WPA) is a strongly enhanced,
interoperable Wi-Fi security that addresses many of the
vulnerabilities of Wired Equivalent Privacy (WEP). Instead of
WEP, WPA uses Temporal Key Integrity Protocol (TKIP) for its
data encryption method.
Currently, WPA satisfies some of the requirements in the IEEE
802.11i draft standard. When the standard is finalized, WPA
will maintain forward compatibility. WPA runs in Enterprise
(802.1x) mode or PSK (Pre-Shared Key) mode:
• In Enterprise mode, WPA provides user authentication using
802.1x and the Extensible Authentication Protocol (EAP).
That is, an authentication server (such as a RADIUS server)
must authenticate each device before the device can
communicate with the wireless network.
• In PSK mode, WPA provides user authentication using a
shared key between the access point and the CK30. WPA-
PSK is a good solution for small offices or home offices that
do not want to use an authentication server.
To use WPA security, you need:
• An authentication server (Enterprise mode only)
Note: You can also use a MobileLAN access point with
software release 1.80 or later as an authentication server. For
help, see the MobileLAN access System Manual (P/N 067150)
or MobileLAN access WA2X System Manual (P/N 073915).
• An access point with an 802.11b/g radio that supports WPA

8CK30 Handheld Computer User’s Manual Addendum
• CK30 with the 802.11b/g radio and the 802.1x/WPA
security option
To enable WPA security on your CK30
1 Make sure you have selected Funk as your security choice.
2 Make sure you have configured the communications and
radio parameters on your CK30.
3 Press Cand then Bto open the System Main Menu.
4 Choose Configuration Utility > Communications > 802.11
Radio > Profile Settings.
5 For Association, choose WPA and press Enter.
6 For Encryption, choose TKIP and press Enter.
7 For Authentication, choose TTLS,PEAP, or TLS and press
Enter.
If you choose TTLS or PEAP:
a Select User name, type your user name, and then press
Enter.
b Select Password prompt, choose Enter password now,
and then press Enter.
Note: You can use Prompt for password to troubleshoot
your connection to the network if you have problems.
c Select User Password, type a user password, and then
press Enter.
d For Validate Server Certificate, choose Enabled and press
Enter.
Note: You must have the date on the CK30 set correctly
when you enable Validate Server Certificate..
If you choose TLS:
a Load a user and root certificate on your CK30. For help,
see “Loading a Certificate” on page 13 for help.

CK30 Handheld Computer User’s Manual Addendum 9
b For Validate Server Certificate, choose Enabled and press
Enter.
c You must enter a User Name and Subject Name. You can
also enter a Server Common Name if you want to increase
your level of security.
8 Exit the Configuration Utility.
To enable WPA-PSK security on your CK30
1 Make sure you have selected Funk as your security choice.
2 Make sure you have configured the communications and
radio parameters on your CK30.
3 Press Cand then Bto open the System Main Menu.
4 Choose Configuration Utility > Communications > 802.11
Radio > Profile Settings.
5 For Authentication, choose None and press Enter.
6 For Pre-Shared Key, enter the pre-shared key or the pass
phrase.
The pre-shared key must be a value of 32 Hex pairs. The pre-
shared key must be preceded by 0x. The value must match
the key value on the access point. The pass phrase must be
from 8 to 63 characters.
7 Exit the Configuration Utility.
Configuring 802.1x Security
802.1x security provides centralized user authentication using an
authentication server, authenticators (access points), and
supplicants. These components communicate using an EAP
authentication type, such as TLS (Transport Layer Security) or
PEAP (Protected Extensible Authentication Protocol). 802.1x
security provides data encryption using dynamic WEP key
management.
To use 802.1x security, you need:
• An authentication server

10 CK30 Handheld Computer User’s Manual Addendum
Note: You can also use a MobileLAN access point with
software release 1.80 or later as an authentication server. For
help, see the MobileLAN access System Manual (P/N 067150)
or MobileLAN access WA2X System Manual (P/N 073915).
• An access point with an 802.11b/g radio
• A CK30 with an 802.11b/g radio and the 802.1x/WPA
security option
To enable 802.1x security on your CK30
1 Make sure you have selected Funk as your security choice.
2 Make sure you have configured the communications and
radio parameters on your CK30.
3 Press Cand then Bto open the System Main Menu.
4 Choose Configuration Utility > Communications > 802.11
Radio > Profile Settings.
5 For Association, choose Open and then press Enter.
6 For Encryption, choose WEP and then press Enter.
7 For Authentication, choose TTLS, PEAP, or TLS and then
press Enter.
If you choose TTLS or PEAP:
a Select User name, type your user name, and then press
Enter.
b Select Password prompt, choose Enter password now,
and then press Enter.
Note: You can use Prompt for password to troubleshoot
your connection to the network if you have problems.
c Select User Password, type a user password, and then
press Enter.
d For Validate Server Certificate, choose Enabled and press
Enter.