Skip to main content
Support Documentation

BrightSign: PEAP/EAP 802.1x

  • June 3, 2025
  • 0 replies
  • 118 views
L

Solution

Add a custom code to the config-init.brs script, in the scripts folder, to apply the WPA enterprise username and password. If there is no config-init.brs in the Scripts folder, copy the config-init.brs from the example folder and move it to the Scripts folder. 

  • Add username (A domain isn't mandatory in username field)
  • Add Password
  • Add location of certificate file on storage (if one is required)

Note: The below example was provided by the BrightSign support team. Usernames and passwords in the scripts have been replaced by generic text. 

*Config.init file provided → Observe the following config-init.brs file: config-init.brs (downloadable file).

Sub Main()

    setupParams = {}

    setupParams.setupEthernet = true

    setupParams.ethernetParams = {}

    setupParams.ethernetParams.useDHCP = false
    setupParams.ethernetParams.staticIPAddress = "10.138.30.159"
    setupParams.ethernetParams.subnetMask = "255.255.254.0"
    setupParams.ethernetParams.gateway = "10.138.30.1."
    setupParams.ethernetParams.dns1 = "173.36.131.10"
    setupParams.ethernetParams.dns2 = "64.104.76.247"
    setupParams.ethernetParams.dns3 = "64.104.200.248"

    setupParams.ethernetParams.timeServer = "time.micorsoft.com"
    setupParams.ethernetParams.proxySpec = ""
    setupParams.ethernetParams.bypassProxyHosts = []

    setupParams.setupWireless = false

    setupParams.wirelessParams = {}

    ' enter SSID, passphrase below
    setupParams.wirelessParams.ssid = ""
    setupParams.wirelessParams.passphrase = ""

    setupParams.wirelessParams.useDHCP = true

    setupParams.wirelessParams.timeServer = "time.micorsoft.com"
    setupParams.wirelessParams.proxySpec = ""
    setupParams.wirelessParams.bypassProxyHosts = []

    ncz = CreateObject("roSystemTime")
    ncz.SetTimeZone("GMT+8")
    
    
    
    setupNetwork(setupParams)

End Sub

 

Sub setupNetwork(setupParams As Object)

    if type(setupParams.setupEthernet) = "roBoolean" and setupParams.setupEthernet and type(setupParams.ethernetParams) = "roAssociativeArray" then
        nc = CreateObject("roNetworkConfiguration", 0)
        if type(nc) = "roNetworkConfiguration" then

            ConfigureNetwork(nc, setupParams.ethernetParams)
        endif
    endif

    if type(setupParams.setupWireless) = "roBoolean" and setupParams.setupWireless and type(setupParams.wirelessParams) = "roAssociativeArray" then
        nc = CreateObject("roNetworkConfiguration", 1)
        if type(nc) = "roNetworkConfiguration" then
            ConfigureNetwork(nc, setupParams.wirelessParams)
        endif
    else
        DisableWireless()
    endif

End Sub


Sub ConfigureNetwork(nc As Object, networkingParameters As Object)

    if type(networkingParameters.ssid) = "roString" then
        nc.SetWiFiESSID(networkingParameters.ssid)
        nc.SetWiFiPassphrase(networkingParameters.passphrase)
    endif

    if networkingParameters.useDHCP then
        nc.SetDHCP()
    else
        nc.SetIP4Address(networkingParameters.staticIPAddress)
        nc.SetIP4Netmask(networkingParameters.subnetMask)
        nc.SetIP4Gateway(networkingParameters.gateway)
        if networkingParameters.dns1 <> "" then nc.AddDNSServer(networkingParameters.dns1)
        if networkingParameters.dns2 <> "" then nc.AddDNSServer(networkingParameters.dns2)
        if networkingParameters.dns3 <> "" then nc.AddDNSServer(networkingParameters.dns3)
    endif

    nc.SetRoutingMetric(-1)

    nc.SetTimeServer(networkingParameters.timeServer)
    nc.SetProxy(networkingParameters.proxySpec)
    nc.SetProxyBypass(networkingParameters.bypassProxyHosts)
    nc.SetInboundShaperRate(-1)
    
    
    'custom
    user = "domain\username"
    pass = "password"

    nc.SetWiFiIdentity(user)
    nc.SetWiFiPassphrase(pass)
    nc.SetWiFiClientCertificate("")    'add cert file here
    nc.SetWiFiPrivateKey("")
    nc.SetWiFiEapTlsOptions("")    

    ok = nc.Apply()
'stop

End Sub


Sub DisableWireless()
    nc = CreateObject("roNetworkConfiguration", 1)
    if type(nc) = "roNetworkConfiguration" then
        nc.SetDHCP()
        nc.SetWiFiESSID("")
        nc.SetObfuscatedWifiPassphrase("")
        nc.Apply()
    endif
End Sub

 

­­­­­­­­­­­­­­­­

In BA:connected (aka. BSN Cloud)

Network Authentication: Use this section to configure the player for WPA Enterprise authentication.

  • Enable 802.1X Authentication / Enable WPA Enterprise Authentication: Check this box to enable authentication via 802.1x (for wired) or WPA Enterprise Authentication (for wireless).
  • Choose Network Authentication Variant: Choose one of the following:
    • EAP-TLS: This authentication variant requires a client certificate and private key, which can be provided with one of the following certificate types:
      • PKCS#12: The client certificate and private key are both provided in a single PKCS#12 formatted file (usually with a .p12 file extension). Click the first Browse button to locate the certificate file.
      • X.509 PEM/DER: The client certificate is provided as a X.509 certificate (using PEM or DER encoding), and the key is encoded separately. Use the first Browse button to locate the X.509 certificate and the second Browse button to locate the PEM/DER key.
    • PEAP/MSCHAPv2: This authentication variant requires a Username (i.e. identity) and Passphrase. For this method to work, the server must be configured to accept a username/password scheme in lieu of a client certificate.
  • Press Browse to locate additional CA Certificate: If the authentication scheme requires additional PEM/DER CA certificates (for example, if the CA hierarchy requires intermediate certificates and the server does not supply them), click the Browse button to locate the certificate file.

image-2024-8-9_15-22-34-1.png?version=1&modificationDate=1723234950188&cacheVersion=1&api=v2&width=776&height=400

 

 
 

Terms & ConditionsAccessibility statement