SDA

Microsoft Windows

New devices in the PC network system will in future be delivered fully configured by the HRZ; no configuration is required here.

Devices currently in operation must be configured as follows:

Start → Services (type) → Automatic Configuration (wired)
- Start type: Automatic
- Service status: Click the “Start” button once, and the service status will change from ‘Stopped’ to “Running.”

Windows 11: Start → Control Panel (type) → Network and Internet (top right: View: Category) → Network and Sharing Center → Change adapter settings

Authentication tab
- Enable IEEE 802.1x authentication: enable
- Select a method for network authentication: “Microsoft: Protected EAP (PEAP)”
- Save my credentials for each login for this connection: disable
- Fall back to unauthorized network access: disable
- Click “Settings”
  - Verify server identity using certificate verification: enable
  - Connect to the following servers…: disable
  - Trusted root certification authorities
    - HARICA TLS RSA ROOT CA 2021: enabled
    - HARICA TLS ECC ROOT CA 2021: enabled
    - (if there is more than one certificate with the same name, check all of them)
    - Select authentication method: “ Secure Password (EAP-MSCHAP v2)”
    - Enable fast connection recovery: disabled
    - Disconnect if server…: disabled
    - Enable identity protection: disabled

Note: The following fields must only be enabled for domain devices. For private devices, only the text in bold applies

Click “Configure…”
- Automatically use my Windows login name…: enabled
- Click “OK”
Click “OK”
Click “Additional settings…”
- Specify authentication mode: User authentication
- Save login information → Enter username (in the form: ab1234@hs-woe.de) and password
- Specify authentication mode: User or computer authentication
- Click “OK”
Click “OK”