Table Of Contents
Release Notes for Cisco Aironet Client Utilities 2.50 and Driver 2.50 for Windows CE
This document contains the following sections:
This document describes system requirements, important notes, new and changed information, installation and upgrade procedures, and caveats for the following releases of Cisco Aironet client adapter software:
•2.50 of the Cisco Aironet client utilities for Windows CE
•2.50 of the Cisco Aironet client adapter driver for Windows CE
The client utilities, driver, and help files are released together in a single file entitled WinCE-PCMCIA-LMC-v250.exe.
You need the following in order to install client utility and driver release 2.50 for Windows CE:
•One of the following Windows CE devices equipped with a Type II or Type III PC card slot:
–HPC 2000 device running Windows CE 3.0 with an ARM, StrongARM, MIPS, SH4, or X86 platform
–PPC 2000 device running Windows CE 3.0 with an ARM, StrongARM, MIPS, or SH3 platform
–PPC 2002 device running Windows CE 3.0 with a StrongARM platform
–PPC 2003 device running Windows CE .NET 4.2 with a StrongARM platform
–Windows CE .NET device running Windows CE .NET 4.0, 4.1, or 4.2 with a StrongARM, ARMv4, ARMv4T, or X86 platform
•Cisco Aironet 350 Series Wireless LAN Client Adapter (PC card or LM card)
Note Client adapter driver and utility version 2.50 is not supported for use with Cisco Aironet 340 series client adapters.
•Client adapter firmware version 5.40.10 or later (recommended)
•Laptop or PC running a Windows operating system and Microsoft ActiveSync
•ActiveSync connection (which can be serial, USB, etc.) to the Windows CE device
•A PPC 2002, PPC 2003, or Windows CE .NET 4.2 device, if your wireless network uses EAP-FAST, EAP-TLS, or PEAP authentication
•Certificate Authority (CA) and user certificates for EAP-TLS authentication or CA certificate for PEAP authentication
•If your wireless network uses PEAP authentication with a One-Time Password (OTP) user database:
–The hardware token from an OTP vendor
–Your hardware token password
•The following information from your system administrator:
–The logical name for your Windows CE device (also referred to as client name)
–The case-sensitive service set identifier (SSID) for your RF network
–The primary and secondary Domain Name System (DNS) and Windows Internet Name Service (WINS) to be assigned to your Windows CE device
–If your network setup does not include a DHCP server, the IP address, subnet mask, and default gateway address to be assigned to your device
–The wired equivalent privacy (WEP) keys of the access points with which your client adapter will communicate, if your wireless network uses static WEP for security
–Your username and password for LEAP, EAP-FAST, or PEAP authentication, if your wireless network uses one of these authentication types
–Your username for EAP-TLS authentication, if your wireless network uses EAP-TLS authentication
–Protected access credentials (PAC) file if your wireless network uses EAP-FAST authentication with manual PAC provisioning
•Access points to which your client adapter may attempt to authenticate must use the following firmware versions or later: 12.00T (340, 350, and 1200 series access points) or Cisco IOS Release 12.2(4)JA (1100 series access points).
•All necessary infrastructure devices such as access points, servers, gateways, and user databases must be properly configured for the authentication type you plan to enable on the client.
Recommended Firmware Version
Client adapter firmware version 5.40.10 or later is recommended for use with client utility and driver release 2.50 for Windows CE. If your client adapter is using a previous firmware version, follow the instructions in the Cisco Aironet 350 Series Wireless LAN Client Adapters Installation and Configuration Guide for Windows CE (part number OL-1375-04) to upgrade the firmware after installing client utility and driver release 2.50.
Using Client Adapters with Both Windows and Windows CE Devices
After you install Cisco Aironet client adapter Install Wizard 1.0 or later on a Windows computer, the firmware of any client adapter that is inserted into that computer may be automatically upgraded to the version included in the Install Wizard file. If you insert a client adapter that has been upgraded to firmware version 5.02.19 or later into a Windows CE device, the adapter functions only if the device is running client utility and driver release 2.30 or later for Windows CE.
Cisco Aironet Software Requires Completion of Encryption Authorization Form
In order to access Cisco Aironet software from the Software Center on Cisco.com, you must now fill out a form to receive authorization to download encrypted software. Registered Cisco.com users are required to fill out the form only once while public users must do so once each session, each time software is downloaded. A form is automatically created for public users. The form for registered Cisco.com users is located at the following URL:
Version OL-1375-04 of the Cisco Aironet 350 Series Wireless LAN Client Adapters Installation and Configuration Guide for Windows CE pertains specifically to client utility and driver release 2.50. If you are using, installing, or upgrading to an older release of client adapter software, refer to a previous version of this manual for information and instructions.
New and Changed Information
Support for EAP-TLS and Cisco PEAP on Additional Platforms
EAP-TLS and Cisco PEAP authentication are now supported for use on PPC 2003 and Windows CE .NET 4.2 devices.
Support for EAP-FAST Authentication
Extensible Authentication Protocol-Flexible Authentication via Secure Tunneling (EAP-FAST) authentication is available on PPC 2002, PPC 2003, and Windows CE .NET 4.2 devices. EAP-FAST offers flexible, easy deployment and management, supports a variety of user and password database types, supports server-initiated password expiration and change, and does not require digital certificates. Cisco developed EAP-FAST for customers who want to deploy an 802.1X EAP type that does not use certificates and provides protection from dictionary attacks. For example, a customer using Cisco LEAP who cannot enforce a strong password policy and does not want to use certificates can migrate to EAP-FAST for protection from dictionary attacks.
EAP-FAST uses a three-phased tunneled authentication process to provide advanced 802.1X EAP mutual authentication.
•Phase 0 enables the client to dynamically provision a protected access credentials (PAC) when necessary. During this phase, a PAC is generated securely between the user and the network.
•Phase 1 uses the PAC to establish a mutually authenticated and secure tunnel between the client and the RADIUS server. RADIUS servers that support EAP-FAST include Cisco Secure ACS version 3.2.3 and later.
•Phase 2 performs client authentication in the established tunnel.
EAP-FAST is enabled in ACU, and either a saved EAP-FAST username and password are entered in ACU or a temporary EAP-FAST username and password are entered in WLM. In addition, automatic or manual PAC provisioning is enabled in ACU. The client adapter uses the username, password, and PAC to perform mutual authentication with the RADIUS server through the access point. The temporary EAP-FAST username and password are stored in the client adapter's volatile memory and need to be re-entered whenever an EAP-FAST profile is selected, the client adapter is ejected and reinserted, or the Windows CE device is reset.
PACs are created by Cisco Secure ACS and are identified by an ID. The user obtains a copy of the PAC from the server, and the ID links the PAC to the profile created in ACU. When manual PAC provisioning is enabled, the PAC file is manually copied from the server and imported onto the client device. The following rules govern PAC storage:
•PACs are stored in a single PAC database and are available to all users of the device.
•PAC files can be added or replaced using the import feature, but they cannot be removed or exported.
EAP-FAST authentication is designed to support the following user databases over a wireless LAN:
•Cisco Secure ACS internal user database
•Cisco Secure ACS ODBC user database
•Windows NT/2000/2003 domain user database
•LDAP user database
LDAP user databases (such as NDS) support only manual PAC provisioning while the other three user databases support both automatic and manual PAC provisioning.
Note Refer to Chapter 5 of the Cisco Aironet 350 Series Wireless LAN Client Adapters Installation and Configuration Guide for Windows CE (part number OL-1375-04) for instructions on enabling EAP-FAST authentication for your client adapter.
Installing or Upgrading to a New Client Utility and Driver Release
This section describes how to install or upgrade to client utility and driver release 2.50 for
Uninstalling the Current Driver and Client Utilities
Cisco recommends that you uninstall the existing driver and client utilities for your client adapter before upgrading to more recent releases. Follow these steps to uninstall your client adapter's current driver and client utilities.
Step 1 Eject the client adapter and remove it from the Windows CE device.
Step 2 Tap Start > Settings > System tab > Remove Programs (on PPC devices) or Start > Settings > Control Panel > Remove Programs (on HPC and Windows CE .NET devices).
Step 3 Tap Cisco Wireless LAN Adapter.
Step 4 Tap the Remove button.
Step 5 When asked to verify your decision to remove the adapter, tap Yes.
Step 6 Tap OK. The driver, client utilities, registry entries, and Cisco directory are removed.
Step 7 Go to the "Loading a New Driver and Client Utilities" section below for instructions on loading the new driver and client utilities.
Loading a New Driver and Client Utilities
Follow these steps to install client utility and driver release 2.50 for your client adapter.
Step 1 Connect your Windows CE device to a laptop or PC running Microsoft ActiveSync. This is typically done using a serial or USB cable.
A message appears on the Windows CE device indicating that it is connecting to the host. After the Windows CE device is connected, the New Partnership window appears on the laptop or PC. This window asks if you want to set up a partnership.
Note Cisco recommends that you install the latest release of ActiveSync.
Step 2 Perform one of the following:
•If you want to establish a partnership that enables you to synchronize files between the laptop or PC and the Windows CE device, choose Yes, click Next, and follow the instructions on the screen to specify the files to be synchronized and to finish setting up the partnership.
•If you do not want to synchronize files and want to connect as a "guest," choose No and click Next. The screen indicates that you are connected as a guest.
Step 3 Use your laptop or PC's web browser to access the following URL:
Step 4 Click Option #2: Aironet Wireless Software Display Tables.
Note You can download software from the Software Selector tool instead of the display tables. To do so, click Option #1: Aironet Wireless Software Selector, follow the instructions on the screen, and go to Step 9.
Step 5 Click Cisco Aironet Wireless LAN Client Adapters.
Step 6 Find the section for Windows CE client adapter drivers and utilities.
Step 7 Click the link for Windows CE 3.0 or Windows CE .NET, depending on your device's operating system.
Step 8 Click the WinCE-PCMCIA-LMC-v250.exe file.
Step 9 Complete the encryption authorization form; then read and accept the terms and conditions of the Software License Agreement.
Step 10 Click the WinCE-PCMCIA-LMC-v250.exe file to download it.
Step 11 Save the file to the hard drive of your laptop or PC.
Step 12 Find the file using Windows Explorer, double-click it, and extract its files to a folder.
Note Make sure you keep all of the extracted files together in one folder. Moving them to different locations may prevent the software from operating correctly.
Step 13 Double-click the ceInstall.exe file.
Step 14 If you are using a PPC 2002 device, the Install 802.1X Support screen appears. If you are planning to use EAP-TLS or PEAP authentication, click Yes. Otherwise, click No.
Note If you choose Yes, the PPC 2002 802.1X backport, which provides support for 802.1X security, is installed. The backport then becomes part of the base Windows CE operating system and cannot be uninstalled.
Step 15 If you are using a PPC 2002, PPC 2003, or Windows CE .NET 4.2 device, the Cisco PEAP screen appears. If you are planning to use Cisco PEAP authentication, make sure the Install Cisco PEAP Support check box is checked and click Next. Otherwise, uncheck the Install Cisco PEAP Support check box and click Next.
Note If you install the Cisco PEAP supplicant and later want to use the Microsoft PEAP supplicant, you must default your Windows CE device and reinstall the client adapter software.
Step 16 If you installed the 802.1X backport on a PPC 2002 device, a message appears indicating that you must reset your device when the installation is complete. Click OK.
Step 17 If you are not using a PPC 2002 device, the Cisco Aironet Wireless LAN Adapter Setup screen appears. Click Next to start the Windows CE Application Manager (CeAppMgr), which is installed with ActiveSync. CeAppMgr interrogates the Windows CE device to determine its platform type.
Note If a Windows CE device is not connected to the laptop or PC (as instructed in Step 1), click Exit to quit the setup program and connect a Windows CE device or click Next to continue the installation. If you choose Exit, click OK to shut down CeAppMgr and start again beginning with Step 1. If you choose Next, a message appears indicating that the software will be downloaded the next time a mobile device is connected. Click OK. The next time a Windows CE device is connected to the laptop or PC via ActiveSync, CeAppMgr starts automatically, and you are prompted to install the software.
Step 18 When the Installing Applications dialog box appears asking if you want to install the client adapter using the default application installation directory, click Yes. The default directory is \Windows\Start Menu\Programs\Cisco on PPC devices and \Windows\Programs\Cisco on HPC and Windows CE .NET devices.
A message and a progress bar appear indicating that the client adapter (and 802.1X backport if you are using a PPC 2002 device) is being installed.
The driver and help files are copied to the \Windows directory, and the client utilities are installed in the \Windows\Start Menu\Programs\Cisco directory on PPC devices or the \Windows\Programs\Cisco directory on HPC and Windows CE .NET devices. Shortcuts to ACU and WLM are automatically added to the desktop on HPC and Windows CE .NET devices.
Step 19 When the installation process is complete on the laptop or PC, a message appears asking you to view the screen of the Windows CE device to see if any additional steps are required to complete the installation. Click OK to terminate the installation process on the laptop or PC.
Step 20 Complete any required steps on the Windows CE device.
Step 21 Disconnect the Windows CE device.
Step 22 If you are using a PPC 2002 device and you installed the 802.1X backport, reset your Windows CE device now. (You should have been notified earlier that a reset would be required after installation.)
Step 23 Insert the client adapter into the PC card slot of the Windows CE device. The Windows CE device should configure the client adapter, and the green LED on the adapter should blink. If this does not happen, remove the client adapter, reset the Windows CE device, and reinsert the client adapter.
Step 24 The Cisco Wireless LAN Adapter Settings dialog box appears. If the dialog box does not appear, perform one of the following:
•Tap Start > Settings > the Connections tab > Connections > Advanced > Network Card > Cisco Wireless LAN Adapter on PPC 2003 devices.
•Tap Start > Settings > the Connections tab > Network Adapters > Cisco Wireless LAN Adapter > Properties on PPC 2002 devices.
•Tap Start > Settings > Control Panel > Network > the Adapters tab > Cisco Wireless LAN Adapter > Properties on HPC devices.
•Tap Start > Settings > Network and Dial-up Connections > the Cisco Wireless LAN Client Adapter icon on Windows CE .NET devices.
Step 25 Perform one of the following:
•If your device is connected to a DHCP server, choose Obtain an IP address via DHCP or
Use server-assigned IP address and tap OK.
•If your device is not connected to a DHCP server, choose Specify an IP address or Use specific IP address and follow these steps:
a. Enter the IP address, subnet mask, and default gateway address you want to assign to your device. They can be obtained from your system administrator.
b. Choose the Name Servers tab and enter the primary and secondary DNS and WINS you want to assign to your device. They can be obtained from your system administrator.
c. Tap OK.
The driver and client utility installation is complete. To verify that you have properly installed the driver and client utilities, check the client adapter's LEDs. If the installation was successful, the client adapter's green LED blinks.
Note Refer to the Cisco Aironet 350 Series Wireless LAN Client Adapters Installation and Configuration Guide for Windows CE (part number OL-1375-04) for information on configuring your client adapter.
This section describes resolved and open caveats for client utility and driver release 2.50 for
The following caveats are resolved in client utility and driver release 2.50 for Windows CE.
•CSCed33596—Client adapter fails to associate after fourth or fifth power-off
The client adapter fails to associate to an access point after the iPAQ in which it is inserted is powered on and off four or five times.
•CSCed46532—LEAP login prompt may be delayed after boot
If your client adapter is inserted in a PPC 2002 device and is configured for a manually prompted LEAP login, the LEAP login prompt may be delayed for 60 seconds after the device boots.
•CSCin63766—Cisco PEAP does not work with static IP address in Max PSP mode
Initial Cisco PEAP authentication attempts fail when the client adapter is configured for Max PSP mode with a static IP address. To work around this issue, use Cisco PEAP with another power save mode or switch to Max PSP mode after the client initially authenticates using another power save mode.
•CSCin62582—No relevant message appears when installing without ActiveSync
If you attempt to execute the ceInstall.exe installation utility on a laptop or PC without Microsoft ActiveSync installed, the following message appears: "ceInstall.exe—Unable to Locate DLL" rather than a message indicating that you must install ActiveSync prior to running the installation utility.
The following caveats have not been resolved in client utility and driver release 2.50 for Windows CE.
•CSCec05940—Driver causes Itautec PDA to lock up after power resume
If your client adapter is using driver version 2.30 or later on an Itautec PDA, the device may lock up upon resuming from power save mode. You must reset the device in order to get it to power back up again.
•CSCin68646—PEAP authentication fails if wrong credentials are entered once
If you enter the wrong credentials for PEAP authentication, the authentication attempt fails repeatedly, even if you eventually enter the correct credentials. To work around this issue, reset your Windows CE device and carefully enter the correct credentials for PEAP authentication.
Getting Bug Information on Cisco.com
If you are a Cisco registered user, you can use the Cisco TAC Software Bug Toolkit, which consists of three tools (Bug Navigator, Bug Watcher, and Search by Bug ID Number) that help you to identify existing bugs (or caveats) in Cisco software products.
Access the TAC Software Bug Toolkit today at:
For the most up-to-date, detailed troubleshooting information, refer to the Cisco TAC website at
Click Hardware Support > Wireless Devices. Then choose your product and Troubleshooting to find information on the problem you are experiencing.
For more information about Cisco Aironet 350 series client adapters for Windows CE, refer to the following documents:
•Cisco Aironet 350 Series Wireless LAN Client Adapters Installation and Configuration Guide for Windows CE, OL-1375-04
•Release Notes for Cisco Aironet 350 and CB20A Client Adapter Firmware 5.40.10, OL-5516-01
Cisco documentation and additional literature are available on Cisco.com. Cisco also provides several ways to obtain technical assistance and other technical resources. These sections explain how to obtain technical information from Cisco Systems.
You can access the most current Cisco documentation on the World Wide Web at this URL:
You can access the Cisco website at this URL:
International Cisco websites can be accessed from this URL:
You can find instructions for ordering documentation at this URL:
You can order Cisco documentation in these ways:
•Registered Cisco.com users (Cisco direct customers) can order Cisco product documentation from the Ordering tool:
•Nonregistered Cisco.com users can order documentation through a local account representative by calling Cisco Systems Corporate Headquarters (California, USA) at 408 526-7208 or, elsewhere in North America, by calling 800 553-NETS (6387).
You can submit e-mail comments about technical documentation to firstname.lastname@example.org.
You can submit comments by using the response card (if present) behind the front cover of your document or by writing to the following address:
Attn: Customer Document Ordering
170 West Tasman Drive
San Jose, CA 95134-9883
We appreciate your comments.
Obtaining Technical Assistance
For all customers, partners, resellers, and distributors who hold valid Cisco service contracts, the Cisco Technical Assistance Center (TAC) provides 24-hour-a-day, award-winning technical support services, online and over the phone. Cisco.com features the Cisco TAC website as an online starting point for technical assistance. If you do not hold a valid Cisco service contract, please contact your reseller.
Cisco TAC Website
The Cisco TAC website provides online documents and tools for troubleshooting and resolving technical issues with Cisco products and technologies. The Cisco TAC website is available 24 hours a day, 365 days a year. The Cisco TAC website is located at this URL:
Accessing all the tools on the Cisco TAC website requires a Cisco.com user ID and password. If you have a valid service contract but do not have a login ID or password, register at this URL:
Opening a TAC Case
Using the online TAC Case Open Tool is the fastest way to open P3 and P4 cases. (P3 and P4 cases are those in which your network is minimally impaired or for which you require product information.) After you describe your situation, the TAC Case Open Tool automatically recommends resources for an immediate solution. If your issue is not resolved using the recommended resources, your case will be assigned to a Cisco TAC engineer. The online TAC Case Open Tool is located at this URL:
For P1 or P2 cases (P1 and P2 cases are those in which your production network is down or severely degraded) or if you do not have Internet access, contact Cisco TAC by telephone. Cisco TAC engineers are assigned immediately to P1 and P2 cases to help keep your business operations running smoothly.
To open a case by telephone, use one of the following numbers:
Asia-Pacific: +61 2 8446 7411 (Australia: 1 800 805 227)
EMEA: +32 2 704 55 55
USA: 1 800 553-2447
For a complete listing of Cisco TAC contacts, go to this URL:
TAC Case Priority Definitions
To ensure that all cases are reported in a standard format, Cisco has established case priority definitions.
Priority 1 (P1)—Your network is "down" or there is a critical impact to your business operations. You and Cisco will commit all necessary resources around the clock to resolve the situation.
Priority 2 (P2)—Operation of an existing network is severely degraded, or significant aspects of your business operation are negatively affected by inadequate performance of Cisco products. You and Cisco will commit full-time resources during normal business hours to resolve the situation.
Priority 3 (P3)—Operational performance of your network is impaired, but most business operations remain functional. You and Cisco will commit resources during normal business hours to restore service to satisfactory levels.
Priority 4 (P4)—You require information or assistance with Cisco product capabilities, installation, or configuration. There is little or no effect on your business operations.
Obtaining Additional Publications and Information
Information about Cisco products, technologies, and network solutions is available from various online and printed sources.
•Cisco Marketplace provides a variety of Cisco books, reference guides, and logo merchandise. Go to this URL to visit the company store:
•The Cisco Product Catalog describes the networking products offered by Cisco Systems, as well as ordering and customer support services. Access the Cisco Product Catalog at this URL:
•Cisco Press publishes a wide range of general networking, training and certification titles. Both new and experienced users will benefit from these publications. For current Cisco Press titles and other information, go to Cisco Press online at this URL:
•Packet magazine is the Cisco quarterly publication that provides the latest networking trends, technology breakthroughs, and Cisco products and solutions to help industry professionals get the most from their networking investment. Included are networking deployment and troubleshooting tips, configuration examples, customer case studies, tutorials and training, certification information, and links to numerous in-depth online resources. You can access Packet magazine at this URL:
•iQ Magazine is the Cisco bimonthly publication that delivers the latest information about Internet business strategies for executives. You can access iQ Magazine at this URL:
•Internet Protocol Journal is a quarterly journal published by Cisco Systems for engineering professionals involved in designing, developing, and operating public and private internets and intranets. You can access the Internet Protocol Journal at this URL:
•Training—Cisco offers world-class networking training. Current offerings in network training are listed at this URL:
This document is to be used in conjunction with the documents listed in the "Related Documentation" section.
CCIP, CCSP, the Cisco Arrow logo, the Cisco Powered Network mark, Cisco Unity, Follow Me Browsing, FormShare, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, and iQuick Study are service marks of Cisco Systems, Inc.; and Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, the Cisco IOS logo, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Empowering the Internet Generation, Enterprise/Solver, EtherChannel, EtherSwitch, Fast Step, GigaStack, Internet Quotient, IOS, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, LightStream, Linksys, MGX, MICA, the Networkers logo, Networking Academy, Network Registrar, Packet, PIX, Post-Routing, Pre-Routing, RateMUX, Registrar, ScriptShare, SlideCast, SMARTnet, StrataView Plus, Stratm, SwitchProbe, TeleRouter, The Fastest Way to Increase Your Internet Quotient, TransPath, and VCO are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0402R)
Copyright © 2004 Cisco Systems, Inc.
All rights reserved.