Open Settings . Select Connectivity > Destinations. Open a destination. Tap a Wi-Fi access point, and select Options > Edit > Wi-Fi security mode > WPA/WPA2 or 802.1x. Open Wi-Fi security settings > EAP plug-in settings. To enable the EAP-FAST plug-in, tap the plug-in, and select Options > Enable. To edit the EAP-FAST plug-in settings when enabled, tap the plug-in, and select Options > Edit.

FAST (flexible authentication via secure tunnelling) uses protected access credentials (PAC) to create a secure tunnel between a server and your phone to help protect data security in this tunnel. The EAP-FAST plug-in uses other EAP plug-ins as authentication methods. To select the authentication methods used, select the EAPS tab.

Select from the following:

• Personal certificate – To use your personal certificate for authentication when using this access point, tap the certificate, and select Options > Enable.
• Authority certificate – To select the certificate to be used for server verification when using this access point, tap the certificate, and select Options > Enable.

  Tip: You can download certificates from the web, receive them in Bluetooth or Infrared messages, or as email attachments. To install a certificate in your phone, tap the certificate, and select Options > Open > Save.

• Username in use – To automatically download your user name from your personal certificate, select From certificate. To define the name to be used, select User defined > Username, and enter the name.
• Realm in use – To automatically download the realm address from your personal certificate or a CA certificate, select From certificate. To define the realm to be used, select User defined > Realm, and enter the realm.
• TLS privacy – To send your user name and password encrypted, select On. To send them as plain text, select Off.
• PAC store password: – To be prompted for the password every time the protected access credentials (PAC) store is accessed, select Prompt password. To enter and store the password on your phone, select User defined. Note that saving the password in your phone may lower security.
• Secure provisioning – Select On to authenticate provisioning using a CA certificate.
• Unsecure provisioning Select On to run the provisioning in unauthenticated mode.

The settings available for editing may vary.

To save your settings, select Back.

Related topics

• EAP-FAST authent. methods

• Cipher suites for EAP-FAST