CCX Software Developer Kit Date Printed: !"#!

EAP-FAST Module Release Notes

Release Notes for Cisco EAP-FAST Module Version 2.1.6 December 7, 2007 Introduction This document describes system requirements; supported features; installation and up rade information; and resol!ed and "no#n ca!eats for the $isco %&'()&*T +odule, !ersion 2.1.6. System Requirements ,ou need the follo#in items on the host system in order to install and use this soft#are% & computer runnin the .indo#s Vista /T+ or later. % &n installed #ireless or #ired 0&1 net#or" interface card. *er!er requirements% $isco &$* ser!er !ersion 2.0 or later. Supported Features % 3ser authentication usin .indo#s pass#ord, separate net#or" pass#ord, one(time pass#ord, or sa!ed pass#ord, as #ell as user certificate. % %&'(4T$, %&'(+*$5&'V2, %&'(T0* inner method support. % 6nte ration #ith 021& for sin le si n(on support. % &nonymous pro!isionin and authenticated ser!er pro!isionin mode #ith ser!er certificate. % 'ass#ord chan e. % 1e# 'in +ode, 1e7t To"en +ode for one(time pass#ord. % +achine authentication usin a machine certificate, pass#ord, and a machine '&$. % 1&$(1&' support for posture !alidation. % 8nline help file #ith conte7t sensiti!e help. % &+D 62(bit platform support. % )ast reconnect. Installing and pgrading Soft!are /un the eap(fast.msi file to install or up rade the soft#are. The +*6 should install the pro ram files in the 9:'ro ram )iles:;$isco;$isco %&'()&*T +odule9 directory and re ister them #ith the system. & system reboot or stop<restart %&'5ost ser!ice must be performed to ma"e the %&'()&*T module a!ailable to the system #ith Vista !ersions earlier than *er!ice 'ac" 1. Important Notes 3p radin from 2.0.7 to 2.1.7 mi ht require %ap5ost ser!ice or system restart.

Resol"ed Ca"eats $*$sl=>>6=?6nner method confi uration chan e not retained $*$sl>>062?Typo in user messa e #hen &$* sends re@ect after '&$ pro!isionin $*$sl>>06>?Typo in 436 for %&'()&*T for T0* +ethod $*$sl>>06A?%&'()&*T authenticates #ith #ron credentials $*$sl>7==B?%rror #hen settin or chan in the C+0 profile $*$sl>77A1?.ith default confi uration, user is as"ed for pass#ord durin authentication
Cop&ri'(t "))* Cis+o S&ste,s Co,pan& Confidential

CCX Software Developer Kit Date Printed: !"#! $

EAP-FAST Module Release Notes

$*$sl6=2>>?Different interpretation of certificate confi uration in 2.0.7 and 2.1.7 $*$sl6=6=2?Default confi uration has 9auto4roupin 9 set to false

#no!n Ca"eats $*$sl>>0>0-1o reprompt for credentials durin **8 #hen usin %&'()&*T %&'()&*T does not reprompt the user #hen the **8 authentication fails because of in!alid credentials. /e ardless of ho# the profile is confi ured Dprompt, .indo#s credentials, or sa!ed credentialsE, the user is not reprompted. $*$sl>>0>2?%&'()&*T<+*$5&'!2 ser!er(mandated pass#ord chan e prompt is missin te7t .hen a user is required to chan e a pass#ord, the prompt that appears does not contain any te7t in the upper portion. .or"around- 1one.

$*$sl61>02?'ass#ord chan e process does not al#ays be in durin pre(lo on for

%&'()&*T 8n Vista /T' %&'5ost does not display any additional dialo durin **8 if and only if there #as successful machine authentication before the user authentication. .or"around- Disable machine authentication or up rade to Vista *'1.

$*$s"A1020?&ll sa!ed '&$s are remo!ed on module up rade

3p radin )&*T from 2.0.26 remo!es all e7istin '&$s. .or"around- 1one.

$*$s@2A222? $anFt authenticate usin #indo#s credentials usin default inner method
settin s #ith &$* =.2.= %&'()&*T is by default confi ured to use %&'(+*$5&'!2 #ith .indo#s user credentials, but &$* Version =.2.= only supports %&'(4T$ inner method durin authentication phase. *o authentication #ill fail #ith default confi uration. .or"around- 3p rade to &$* Version =.= or abo!e or set the profile to use %&'(4T$ inner method. $%taining Tec&nical Assistance T(e Developer Support Pro'ra, provides for,ali.ed support for Cis+o S&ste,s interfa+es to ena/le CCX Pro'ra, partners to a++elerate t(eir deliver& of +o,pati/le solutions0 T(e Developer Support En'ineers are an e1tension of t(e produ+t te+(nolo'& en'ineerin' tea,s0 T(e& (ave dire+t a++ess to t(e resour+es ne+essar& to provide e1pert support in a ti,el& ,anner0 For additional infor,ation on t(is pro'ra,2 refer to t(e Developer Support Pro'ra, 3e/ Site at www0+is+o0+o,!'o!developersupport!0
Cop&ri'(t "))* Cis+o S&ste,s Co,pan& Confidential

"

CCX Software Developer Kit Date Printed: !"#! $

EAP-FAST Module Release Notes

Developers usin' CCX SDK are en+oura'ed to 4oin t(e Cis+o Developer Support Pro'ra,0 T(is pro'ra, provides a +onsistent level of support w(ile levera'in' Cis+o interfa+es in develop,ent pro4e+ts0 Note: Cis+o Te+(ni+al Assistan+e Center 5TAC6 support does not in+lude CCX SDK support and is li,ited to Cis+o produ+t installation!+onfi'uration and Cis+o-developed appli+ations0 For ,ore infor,ation a/out t(e Developer Support Pro'ra,2 please +onta+t Cis+o at developer-support7+is+o0+o,0

Cop&ri'(t "))* Cis+o S&ste,s

Co,pan& Confidential