PRISMAsync Print Server

IEEE 802.1X uses the EAP (Extensible Authentication Protocol) message format and framework to negotiate the used authentication method.

Below you find schemes that explain how the IEEE 802.1X authentication occurs for EAP-TLS, PEAP with EAP-TLS, and PEAP with MS-CHAP-V2.

EAP-TLS

The supplicant (for example PRISMAsync Print Server) sends an IEEE 802.1X request to the authenticator.
After negotiation of the used authentication method, the authenticator sends the Identity certificate of the authentication server.
The supplicant authenticates the Identity certificate of the authentication server.
The supplicant sends its Identity certificate.
The authentication server verifies the Identity certificate. The directory service queries the user name or printer name reference of the certificate.
The authentication server authenticates the Identity certificate of the supplicant.
The authenticator enables the IEEE 802.1X configured port and the supplicant can access the network.

The supplicant (for example PRISMAsync Print Server) sends an IEEE 802.1X request to the authenticator.
After negotiation of the used authentication method, the authenticator sends the Identity certificate of the authentication server.
The supplicant authenticates the Identity certificate of the authentication server.
The supplicant builds a PEAP encrypted channel to negotiate the second part of the authentication. Thereafter, the supplicant sends its Identity certificate through the channel.
The authentication server verifies the Identity certificate. The directory service queries the user name or printer name reference of the certificate.
The authentication server authenticates the Identity certificate of the supplicant.
The authenticator enables the IEEE 802.1X configured port and the supplicant can access the network.

The supplicant (for example PRISMAsync Print Server) sends an IEEE 802.1X request to the authenticator.
After negotiation of the used authentication method, the authenticator sends the Identity certificate of the authentication server.
The supplicant authenticates the Identity certificate of the authentication server.
The supplicant builds a PEAP encrypted channel to negotiate the second part of the authentication. Thereafter, the supplicant sends the MS-CHAP-V2 username and password through the channel.
The authentication server validates the MS-CHAP-V2 username and password. The directory service queries the user name.
The authenticator enables the IEEE 802.1X configured port and the supplicant can access the network.