09212011AccessConnectionsV583ConfigurationW7

09212011AccessConnectionsV583ConfigurationW7.doc

Configuring the IBM Wireless LAN Client Using Access Connections Version 5.83 (Windows 7) This document describes how to configure the IBM Wireless LAN Client Using Access Connections. This software is delivered on the client for e-business images and also may be installed from ISSI. Note: For the most up-to-date version of this document, see: Getting Started with IBM Wireless LAN. Before You Start This document assumes that you have already: 1. Verified you have a supported wireless adapter (see:

http://d02ntcl02.ibm.com/Content/View/2af3fd54-c0aa-4f5c-a16f-2120dc9e9393/determining_if_a_supported_wlan_adapter_is_already_installed_in_a_thinkpad). Important: The IBM Wireless LAN Client Using Access Connections will not install if an unsupported wireless adapter is detected.

2. Registered as a Wireless LAN Client appropriate to the authentication method for your wireless adapter (see: Getting Started with IBM Wireless LAN ).

3. For LEAP (Lightweight Extensible Authentication Protocol) authentication, you have received a userid and password. If you don’t remember your password, it was originally mailed from the IBMWirelessLAN id. You also may go to http://bluewireless.ibm.com to request a password change if you need a new password.

Table of Contents

IBM Wireless LAN Client Using Access Connections 1 1.1 Determining Your Installation Method 2 1.2 Determining What Version of Access Connections is installed 3 1.3 Installation from ISSI 5

2. Configuring for LEAP Authentication 10 2.1 Troubleshooting LEAP Authentication 17

3. Creating and Configuring New Profiles 19 3.1 Configuring for EAP-TLS (Certificate) Authentication 19 3.2 Configuring Travel_Hotspots 26

4. Performing a Complete Uninstall 28 1. IBM Wireless LAN Client Using Access Connections Note: This document reflects configurations for IBM only. The IBM Wireless LAN Client Using Access Connections is a connectivity assistant program that allows you to create and manage location profiles. Each location profile stores all the network and Internet configuration settings needed to connect to a network from a specific location- such as your home or work. By switching between profiles as you move from place to place, you can easily connect to a specific network without manually reconfiguring and restarting your computer each time. The IBM Wireless LAN Client Using Access Connections provides pre-configured profiles for the LEAP Security authentication method supported within IBM (a Travel Hotspots profile is also provided). The IBM Wireless team has provided carefully designed profiles to meet IBM Security and Networking guidelines. Because of this, only IBM WLAN configuration profiles specifically designed for use within IBM should be used with Access Connections. Use the profiles provided.

21.1 Determining Your Installation Method The installation and configuration of the WLAN IBM Wireless LAN Client Using Access Connections varies slightly based on how the code is applied on your computer. See Determining What Version of Access Connections is Installed .

For best results, always check ISSI for the latest version of the IBM Wireless LAN Client Using Access Connections (see Determining What Version of Access Connections is Installed ).

If you installed IBM Wireless LAN Client Using Access Connections Version from ISSI, press the CTRL key and click on the following link or go to: For ISSI Installs .

If your computer is a Windows 7 client for e-business build (version V1.03.00.AC B04 or newer), it will have the IBM Wireless LAN Client Using Access Connections Version 5.83 pre-installed. Press the CTRL key and click on the following link or go to: Configuring for LEAP Authentication .

If you need to create additional profiles, see: Creating and Configuring New Profiles.

31.2 Determining What Version of Access Connections is installed To determine what version of the IBM Wireless LAN Client Using Access Connections is installed:

Locate and right-click the Access Connections icon in the Task Bar at bottom of your desktop. Select Launch Access Connections from the resulting menu:

The ThinkVantage Access Connections main screen is shown. From the upper toolbar of this screen, click Help. From the menu, select About Access Connections. The version is shown:

The version shows both the Lenovo version of Access Connections and the IBM build:

4

Access Connection Version: 5.83 IBM Build: WLANv10 (If installed from ISSI, IBM Build: WLANv10.1)

5

1.3 Installation from ISSI The IBM Wireless LAN Client Using Access Connections can be downloaded from the Network Catalog of ISSI: IBM Standard Software Installer | ISSI Home . Enter your id and password, and begin the Installation. The installation begins.

Note: This document reflects configurations for IBM only.

User Account Control Warnings

During the installation of the IBM-customized Access Connections package, Windows 7 will display User Account Control warnings. These are a normal part of Windows 7 security.

During the Access Connections installation, you may see either a flashing icon near the Start icon (lower left of the desktop) that, when clicked shows a User Account Warning:

Or the actual warning message:

6

These are normal when seen during the Access Connections installation.

Select Yes to continue the installation process.

A Wireless LAN Adapter Identification message indicating the type of wireless adapter detected on your computer is shown. Note that the type of supported WLAN Security for the adapter will also be listed:

The Wireless LAN Adapter Identification panel detects your wireless adapter. Ensure the Supported LAN Security type indicated for your wireless adapter is correct. Click OK.

Note: If you are using the AT &T Network Client (or other Virtual Private Network client) to connect to the IBM network, the Access Connections installation will detect and close the connection. If the AT &T Network Client is active, the installation displays the following message:

The installation disconnects the AT &T Network Client and a confirmation message is shown:

Note: The customer's current LEAP credentials (or 802.1x (EAP-TLS) Digital Certificate under specific circumstances) will be preserved. Do NOT manipulate the keyboard or mouse as the package installs Access Connections, wireless drivers, and required power management software, as this may interrupt the installation process.

Note: If the installation does not seem to progress, there may be a Symantec Firewall message associated with the driver installation attempting to access the internet. Check the Taskbar at the bottom of your desktop screen. Select Permit Always (Recommended).

When complete, an Installation Complete message is shown:

7

This message also mentions some configuration aids: a new desktop icon; Wireless Troubleshooting Tips, which provides a link to the IBM intranet IT Tools troubleshooting tips; and the Setup Wireless LAN icon for complete configuration instructions (recommended for new wireless users).

Note: An IBM intranet network connection is required to access the Wireless Troubleshooting Tips on IT Tools. You may need to reconnect your wired connection.

Disconnect your wired connection and click OK at the prompt to reboot your system:

8Select OK to reboot your system.

Note: A system reboot is necessary to complete Access Connections configuration.

Do not touch the keyboard or mouse until the import has completed.

If you had Windows 7 Access Connections profiles configured previously, the following message is shown:

If there were no previously configured Windows 7 Access Connections profiles, the following message is shown:

If you had previously configured Windows 7 profiles, Access Connections will start automatically after the profiles have successfully been imported. If your id and password are valid and if you are connecting to the IBM wireless environment, Access Connections should connect to the network.

After the profiles have imported successfully, test your wireless connection. If you have a successful connection, the profile and credentials were imported properly and you are done.

9If you don’t have a wireless connection, click the Setup Wireless LAN icon on the desktop:

For addition configuration instructions, press the CTRL key and click on the following link or go to:

Configuring for LEAP Authentication .

10

2. Configuring for LEAP Authentication Note: This version of the IBM Wireless LAN Client Using Access Connections includes pre-configured templates. Unless otherwise noted during the profile configuration, accept all defaults.

This version of the IBM Wireless LAN Client Using Access Connections is specially packaged and customized by IBM to automate most of the configuration steps. It includes detection for supported wireless adapters and adapter drivers. The stronger IBM-required encryption standard- Wi-Fi Protected Access (WPA) - is also preset in the provided profile..

Prior to configuring a LEAP connection under Access Connections, ensure the following:

You have registered as a LEAP Wireless LAN Client (see: Getting Started with IBM Wireless LAN ).

For LEAP authentication, you have received a userid and password. If you don’t remember your password, it was originally mailed from the IBMWirelessLAN id. You also may go to http://bluewireless.ibm.com to request a password change if you need a new password.

Click the setup wireless LAN icon on the desktop:

The installation begins.

User Account Control and Firewall Warnings

During the installation of the IBM-customized Access Connections package, the Windows 7 operating system may display User Account Control warnings. A similar warning from the Symantec Endpoint Protection (SEP) firewall may also be shown. The warnings are normal part of Windows 7 and SEP security

During the Access Connections installation, you may see either a flashing icon near the Start icon (lower left of the desktop) that, when clicked shows a User Account Warning:

Or the actual warning message:

11

Enter your system password at the above prompt.

A SEP warning may also be seen after clicking the Setup Wireless LAN desktop icon:

These are normal when seen during the Access Connections installation. Select Yes to continue the installation process. The Wireless LAN Adapter Identification panel displays:

Assuming the adapter detected is correct, select: The adapter is correct, let’s continue. The IBM Wireless Security panel is shown:

12

Click I know my LEAP userid and password, let’s continue. The Configuration Assistant panel is shown:

Click OK at the bottom of the Configuration Assistant panel. Additional information on Access Connections profiles is provided via the Configuration Assistant panel:

Click OK at the Configuration Assistant panel to start Access Connections. A New Configuration Assistant panel with step-by-step configuration instructions and the Access Connections screen is shown on your desktop.

Complete the step-by-step configuration instructions indicated in the Configuration Assistant panel (shown below, at left). The Access Connections screen is shown below, at right. All instructions in the Configuration Assistant panel (left) indicate actions to be taken on the Access Connections screens:

13

Step 1: From the ThinkVantage Access Connections screen, select the Location Profiles tab.

The Location Profiles screen is shown:

Step 2: At the upper right of the screen, press the button to the right of the Switch to entry to ensure that the Advanced view option is selected.

Step 3: Highlight the Template_Leap profile.

Step 4: Click the Edit button at right. The Edit Profile: Template_LEAP screen displays:

14

Note: Use the preset values unless instructed otherwise.

Step 5: From the Edit Profile: Template_LEAP screen, select the Wireless Settings tab at top.

The Edit Profile: Template_LEAP window opens at the Wireless Settings screen:

15Step 6: From the Wireless Settings screen, click the Properties button at right (directly under item 3,

Network name (SSID): IBM (Note: all capital letters)

Connection Type: Infrastructure

Wireless security type: Use 802.1x or other security.

The Wireless Network Properties panel is shown:

Step 7: Encryption type: This value depends on the type and capability of the wireless adapter detected by the IBM Wireless LAN Client’s installation.

Note: AES (Advanced Encryption Standard) encryption is now the Windows 7 default to be used by all wireless adapters.

Accept the default value assigned by the installation.

Security type: WPA2-Enterprise

Network Authentication Method: Cisco:LEAP

Check the box to the left of Remember my credentials for this connection each time I’m logged on.

Step 8: Click the Settings button to the right of the Network Authentication Method value.

The Leap Properties panel is shown:

16

Step 9: Enter your LEAP ID in the User name box (for example, [email protected]).

Step 10: Enter your LEAP password twice: in the Password box and in the Confirm password box.

Note: LEAP passwords are case sensitive and may contain special characters. Do NOT use copy/paste to move the password value.

Step 11: Click OK at the bottom. Continue to click OK until you return to the Access Connections Location Profile tab:

From the Access Connections Location Profile screen:

Step 12: Ensure the Location value shows the Template_LEAP profile.

Step 13: With the Template_LEAP profile shown in the Location box, click the Connect button.

The Access Connections Connection Successful message is shown:

17

After completing the configuration steps, click the red X at the upper right of the Access Connections Location Profile screen to exit the application.

An additional Configuration Assistant panel appears with troubleshooting information:

Click OK to exit this screen (if needed, press the CTRL key and click on the following link or go to: Troubleshooting LEAP Authentication ). The Configuration Assistant Completion screen is shown:

Click OK to finish the configuration (to create additional profiles, use Back and select Create, from the Location Profiles tab). A message indicating where this help document may be found is displayed:

Click OK to complete your configuration.

2.1 Troubleshooting LEAP Authentication The Configuration Assistant provides several methods to assist in wireless connectivity:

18

The most common error involves incorrect user credentials. Press the CTRL key and click on the following link or go to: Leap Settings.

Uninstall/Reinstall

In some cases, completely uninstalling the WLAN IBM Wireless LAN Client Using Access Connections and re-installing it from ISSI may solve problems. When doing so, ensure that the location profiles are removed as they may be the cause of your problems.

For a detailed procedure of the process to completely uninstall the IBM Wireless LAN Client Using Access Connections, press the CTRL key and click on the following link or go to: Performing a Complete Uninstall

Additional Troubleshooting Tips

The latest installation from ISSI delivers a new desktop icon, Wireless Troubleshooting Tips. This icon provides an IBM intranet link to IT Tools troubleshooting tips.

The Wireless Troubleshooting Tips desktop icon:

Note: An IBM intranet network connection is required to access the Wireless Troubleshooting Tips on IT Tools. You may need to reconnect your wired connection.

A link to this compilation of troubleshooting tips from within this document is available by pressing the CTRL key and clicking on the following link: Wireless LAN troubleshooting tips .

193. Creating and Configuring New Profiles The IBM-customized Access Connections package delivers both Template_LEAP and Travel_Hotspot profiles.

In some cases, additional profiles may also be needed. This section outlines the process for creating and configuring new Access Connections profiles.

As an example, a profile is created for an Extensible Authentication Protocol- Transport Layer Security (EAP-TLS) or certificate connection.

These steps can be adapted to create other profiles you may need as well.

3.1 Configuring for EAP-TLS (Certificate) Authentication LEAP authentication remains the preferred method for connecting wirelessly to the IBM Network, but there may be legitimate reasons for using EAP-TLS authentication. To do so, a profile must be created.

Follow these steps to create a new EAP-TLS (certificate) authentication profile:

Request a digital certificate: http://d02ntcl02.ibm.com/Content/View/714090c6-09d4-4e7a-9953-72787e5a73f3/getting_started_with_ibm_wireless_lan .

The certificate must be received with a codeword and correctly imported on your machine.

Import the Certificate.

From the Access Connections panel:

Select the Location Profiles tab.

Push the button to the right of Switch to and select the Advanced view.

The Locations Profile tab is shown:

20

Select Create.

The Create New Profile screen is shown:

Name of location profile = Template_EAPTLS

Type of network = Best available network

Choose the network adapter you want to use at this location = Select both your Ethernet (wired) adapter and your wireless adapter.

Check only the boxes for:

1. Select Speed and Duplex settings for Ethernet = Auto

2. Disconnect from the network and power off any wireless radio associated with this profile when switching to a different location

21Click Next.

The Wireless Settings screen is shown:

Network name (SSID) = IBM (Note: all capital letters)

Connection type = Infrastructure

Wireless Security Type = Use 802.1x or other security

Click Properties.

The Template_EAPTLS Wireless Network Properties panel opens at the Security tab.

22From the Security tab:

Security type = WPA2-Enterprise

Encryption type = AES

Note: AES (Advanced Encryption Standard) encryption is now the Windows 7 default to be used by all wireless adapters.

From the Choose a network authentication method pull-down choices, select Microsoft: Smart Card or other Certificate.

Click Settings.

The Smart Card or other Certificate Properties panel opens:

In the Smart Card or other Certificate Properties panel: Ensure that the radio button to the left of the Use a certificate on this computer is selected. Check the boxes for:

1. Use simple certificate selection (Recommended). 2. Validate server certificate.

Using the scroll bar at right, locate and check:

1. Equifax Secure Certificate Authority 2. GeoTrust Global CA

Click OK twice to return to the Wireless Settings panel:

23

Click Next at bottom.

The Additional Settings panel is shown:

In the Additional Settings panel, check only:

Network security. Click Settings. Check only:

1. Disable file and print sharing.

2. Disable internet connection sharing.

Click OK to return to the Additional Settings panel.

Override TCP/IP and DNS defaults. Click Settings. Check only:

1. Obtain an IP address automatically

2. Obtain DNS server address automatically

24Click the Add Advanced DNS Settings button (lower right).

The Advanced DNS Settings panel is shown:

At the Advanced DNS Setting screen:

Check Use the following advanced DNS settings.

Check the radio button to Append these DNS suffixes (in order).

Click the Add button. Enter IBM.COM.

Re-check the Use Current advanced DNS Settings radio button at top left of the Advanced DNS Settings screen.

Click OK at bottom right of the Advanced DNS Settings screen.

Click OK at bottom right of the TCP/IP Setting screen.

Click Finish at bottom right of the Additional Settings panel.

Click Yes at the resulting Apply this profile now prompt?

The ThinkVantage Access Connections opens at the Locations Profile tab.

Select Template_EAPTLS in the Location box.

Click the Connect button to the right of the Location box.

Optional: Making the newly created profile the Preferred WLAN profile

The IBM-customized Access Connections package is pre-set to have Template_LEAP as the Preferred WLAN profile. This means the preferred WLAN profile will be used after resuming from a system suspend or hibernation (or roaming).

To change this for your new profile:

25

Push the button to the right of Switch to and select the Advanced view.

Select the Tools tab.

Press the graphic to the left of Location Switching.

The Location Switching panel is shown:

From the Automatic Location Switching panel, select your preferred profile from the pull-down and ensure the Preferred WLAN profile checkbox at left is checked for your new profile. Push OK at the bottom of the screen when complete.

Troubleshooting EAPTLS Authentication

The most common error involves incorrect installation of the digital certificate. If problems persist, return to the above configuration steps to verify your client configuration.

26

3.2 Configuring Travel_Hotspots You can customize your settings, such as adding a specific printer, etc., for a particular wireless profile by editing the profile. To edit a profile:

Locate and right-click the Access Connections icon in the Task Bar at bottom of your desktop. Select Launch Access Connections from the resulting menu:

Right Click and select Launch Access Connections from the pop up menu.

The ThinkVantage Access Connections screen is shown:

Click the Location Profiles tab from the main Access Connections screen.

Push the button to the right of Switch to and select the Advanced view.

The Locations Profile tab is shown:

27

In the Location Profiles tab, highlight the profile you wish to customize.

In this example, the Travel_Hotspots profile is selected. Click the Edit button at right. The Edit Profile: Travel_Hotspots screen is shown:

From the Edit Profile: Travel_Hotspots window, click the Additional Settings tab at top. The Edit Profile: Travel_Hotspots is shown:

28

From within the Edit Profile: Travel_Hotspots window you can set a default printer, start specific applications automatically within the profile, etc.

4. Performing a Complete Uninstall In some cases, completely uninstalling the WLAN IBM Wireless LAN Client Using Access Connections and re-installing the package may solve problems.

When doing so, ensure that the location profiles are removed as they may be the cause of your problems.

The following procedure details the process to completely uninstall the IBM Wireless LAN Client Using Access Connections.

Note: This process will remove any special location profiles you have created as well as any customizations you may have made to any profiles (local printers, etc.).

Make sure you have a wired LAN connection to re-install the package before beginning this process. Step 1: Download the latest version of the WLAN software from ISSI: IBM Standard Software Installer | ISSI Home .

Step 2: From your desktop, click the Start button (extreme lower left of desktop), then click Run from the menu.

The Run command window is displayed:

Step 3: Enter appwiz.cpl as the program to Open. Click OK.

29The Uninstall or change a program window is shown:

From the Uninstall or change a program window, select your wireless adapter driver application from the list.

Note: The specific Wireless software will vary depending on which adapter is installed.

Double-click the software and click the resulting Uninstall button.

Follow the on screen instructions to remove both the Wireless software and application settings..

Do not reboot if prompted.

Step 4: Return to the Uninstall or change a program window and locate ThinkVantage Access Connections:

30

Double-click ThinkVantage Access Connections:

Click the Uninstall button and follow the on-screen instructions to remove Access Connections.

Select No at the Do you want to keep the Access Connections profiles and SMS messages/phone book prompt.

When prompted to restart your system, select Yes.

Step 4: After the reboot:

If a prompted by the Windows New Hardware Wizard, select the Cancel button.

Find and double-click the wlan_win7_v10.exe application previously downloaded in Step 1.

Follow the installation instructions.