44 45Create a VPN Server ConnectionYou can create a Virtual Private Network (VPN) connection to securely connect to serv-ers, such as a corporate network, through the Internet� Before you can create a VPNconnection, you need this information from your network administrator:• User name• Password• Domain name• TCP/IP settings• Host name or IP address of the VPN serverAfter you have located this information, you can create a VPN server connection�1 Tap Start > Settings > Connections >Connections�2 Under My Work Network, tap Add a newVPN server connection�3 Step through the screens to set up yourVPN connection�About Wireless SecurityThe computer provides five types of security for your wireless network:• Wi-Fi Protected Access 2 (WPA)• Wi-Fi Protected Access (WPA)• 802.1x• LEAP• WEPThis section explains how to configure wireless security on your mobile computer. ecominstruments recommends that you implement WPA2 security using PSK (Personal) or802�1X (Enterprise) key management as appropriate�You must use either Funk or Microsoft security to implement your security solution�For details, see the next section, Choose Between Microsoft and Funk Security�” ecominstruments recommends that you always implement WPA2 security using PSK (Per-sonal) or 802�1X (Enterprise) key management�If you are using WPA-802�1x, WPA2-802�1x, or 802�1x security, this section also assumesthat your authentication server and authenticators are properly configured.Note:Your security choice does not depend on your authentication server� For example, youcan choose Funk security if you use Microsoft Active Directory® to issue certificates.Choose Between Microsoft and Funk SecurityThe computer supports both Funk and Microsoft security, which dynamically selectwireless networks based on your preferences� The option you choose depends on yournetwork security needs�• If you are using the computer in a static environment that requires a highlevel of security, you should use Funk security, which offers CCX v4�0compliance, support for LEAP and TTLS, and configuration for up to fourprofiles. To use Funk security, you need to select a profile. For help, see thenext section, Select a Funk Security Profile.”• If you are primarily using the computer to connect to Wi-Fi hotspots, youmay want to use Microsoft security� To use Microsoft security, you needto select it as your security choice� For help, see Select “Microsoft as YourSecurity Choice” on page 47�Select a Funk Security ProfileYou can define up to four profiles for Funk security. Different profiles let your computercommunicate in different networks without having to change all of your security set-tings. For example, you may want to set up one profile for the manufacturing floor andone for the warehouse. By default, the active profile is Profile 1.Select a Funk Security ProfileUse the following procedure to select a Funk security profile.1 Start Intermec Settings�2 Choose Communications > 802�11 Radio > Funk Security�3 Choose a profile. A list of configurable settings appears.4 (Optional) In the Profile Label text box, enter a meaningful name foryour profile.5 Configure your security settings. For help, see the next sections.6 Repeat Steps 3 through 5 for each profile you want to define.7 Set an active profile by choosing it in the Active Profile list.8 Save your settings�Configure WPA or WPA2 Enterprise (802.1x) Security With FunkUse these procedures to set WPA-802�1x or WPA2-802�1x security on your computerwith Funk security�1 Make sure the communications and radio parameters on your 70 Seriesare configured.2 Make sure Funk is selected as your security choice�3 Start Intermec Settings�4 Choose Communications > 802�11 Radio > Funk Security�5 Select the profile you want to configure.6 For Association, choose WPA or WPA2� Encryption automatically defaultsto TKIP or AES, respectively�7 For 8021x, choose TTLS, PEAP, EAP-FAST, or TLS�8 If you choose TTLS, EAP-FAST, or PEAP:a For Prompt for Credentials, choose Enter credentials now�b Enter a User Name and User Password�c For Validate Server Certificate, choose Yes.Note:The correct date must be set on your computer when you enable Validate ServerCertificate.