Wireless Products
Intel® Wi-Fi Products
Wi-Fi Profile Management

What is a Wi-Fi Profile?

A profile is a saved group of network settings. Profiles created are displayed in the profiles list. Profiles are useful when moving from one network to another.

When the user connects to a wireless network, a Wi-Fi profile is created. If the profile is not configured already, the user adds details of configuration to the non-configured profile.

A Wi-Fi profile includes the following categories of information:

  • AP information: SSID, authentication algorithm, cipher algorithm, passphrases. Collectively these are called “security settings.”
  • Usage policy: Manual connection versus auto connection.

Intel Wi-Fi Profile Types

IT profiles:

  • Available to all users of the system
  • Not changeable by users
  • Can be changed through the Intel PROSet/Wireless Software IT administrator tool (by an IT administrator only)

User profiles:

  • Profiles available to the user
Note Intel® PROSet/Wireless Software on Microsoft Windows 7* does not support persistent profiles.

Microsoft Wi-Fi Profile Types

All User profiles:

  • Available to all users of the system
  • Changeable by any user

Per User profiles:

  • Available to the current logon user
  • Changeable by any user

Group Policy profiles:

  • Available to all users of the system
  • Changeable only by the domain administrator

Intel® PROSet Single Sign-On
Single sign-on (SSO) is a feature targeted towards enterprise users. The SSO feature set consists of:

  • Pre-logon connect (PLC)
    • Establishes a wireless connection prior to Windows logon
    • Allows user to authenticate to a domain using a wireless connection (instead of the traditional wired connection)
  • Persistent connect (PST)
    • Establishes and maintains a wireless connection when no user is logged in
  • PST + PLC
    • Maintains connection at logoff (PST takes over when the user logs off and PLC kicks in when the user attempts to log in to the system)
    • Remote desktop connect

Single sign-on Considerations for Microsoft Windows Vista* and Microsoft Windows 7*
The following information applies only to single sign-on (SSO) profiles created for Microsoft Windows Vista* and Microsoft Windows 7*.

  • Persistent profiles are ignored during package import. Microsoft does not support the concept of PST profiles in Windows Vista and higher.
  • Saved credentials in profiles that are both Persistent and Pre-logon/Common are not supported.
    • Microsoft does not support saved credentials for profiles when no user is logged on. Saved credential profiles become prompt for credentials profiles.
    • Profiles that are Persistent-plus-Pre-logon/Common use machine credentials, with an exception of TTLS profiles. Machine credentials are used, because once the user logs off, there is no user context for the profiles.
    • Profiles that are Persistent-plus-Pre-logon/Common with TTLS are not supported. Only Pre-logon/Common with TTLS profiles are supported.
  • There is no native Pre-logon support for TLS profiles (including profiles with TLS as tunnel method).
    • TLS applies user certificates after user logon.
    • Machine certificates for user connection are not supported (a design change by Microsoft).
    • Machine certificate setting changes to user certificate setting on import. The Intel PROSet Connection utility detects the current operating system and maps the credential settings accordingly.

Pre-Logon/Common Profiles (PLC)

Figure 1 A Windows PLC single sign-on profile

Figure 2 An Intel PROSet single sign-on PLC profile

A Pre-Logon/Common profile is applied once a user logs on. If SSO is installed, the connection is made before the Windows Logon sequence (PLC). If SSO is not installed, the profile is applied after the user session becomes active.

Note Installing SSO is a custom option in the Intel PROSet installation through the Administrative Tools option, and has to be manually selected.

PLC profiles always have higher priority than regular user profiles. They cannot be prioritized by users. These profiles are the first to be used for auto connections before any user-created profiles.

Valid Pre-Logon Common Profiles (PLC):

  • Username/password based credentials
    • Windows logon credentials
    • Saved credentials
  • Prompt for credentials
    • Certificates (user or machine):
    • Smart card
  • EAP FAST

The PLC feature functions from system power-up, with the assumption that a saved profile exists. This saved profile has valid security settings marked with "Use Windows Logon user name and password" that are applied at the time of Windows log on.

  1. After a system power-up, enter your Windows logon domain, user name, and password.
  2. Click OK. The Pre-logon/Common Profile Status page displays the progress of the network connection. After the Wi-Fi adapter is connected to the network access point, the status page closes and the Windows user logs on.

If the corresponding access point rejects your credentials during the connection, the profile credentials prompt you for your user credentials.

  1. Enter your credentials.
  2. Click OK. The profile is applied and the Status page displays the progress of the connection status until you are logged onto Windows.
  3. Click Cancel on the credentials page to select another profile.
Note Before using the PLC profile, the user must log on to the computer once using a wired connection, alternate profile or local login. This step creates a user certificate. The Pre-logon/Common profile authenticates with the user certificate.

Persistent Profiles (PST)
Persistent profiles are applied at boot time or when no one is logged on the computer. After a user logs off, a PST profile maintains a wireless connection until the computer is powered off, or until a different user logs on.

PST is desirable when, for example, user-specific data needs to be uploaded to the server post-logoff or when roaming profiles are used.

Note Any profile with user interaction is not allowed to be a persistent profile.

Valid PST Profiles:

  • Profiles that do not require 802.1x authentication (non-enterprise profiles)
  • Profiles using machine authentication (such as machine certificate, machine PAC)
  • Profiles with saved credentials
Note Create a profile that is marked as both Pre-logon/Common and Persistent to achieve this functionality.

This applies to:

Intel® Centrino® Advanced-N + WiMAX 6250
Intel® Centrino® Advanced-N 6200
Intel® Centrino® Advanced-N 6205
Intel® Centrino® Advanced-N 6205 For Desktop
Intel® Centrino® Advanced-N 6230
Intel® Centrino® Advanced-N 6235
Intel® Centrino® Ultimate-N 6300
Intel® Centrino® Wireless-N + WiMAX 6150
Intel® Centrino® Wireless-N 100
Intel® Centrino® Wireless-N 1000
Intel® Centrino® Wireless-N 1030
Intel® Centrino® Wireless-N 105
Intel® Centrino® Wireless-N 130
Intel® Centrino® Wireless-N 135
Intel® Centrino® Wireless-N 2200
Intel® Centrino® Wireless-N 2200 For Desktop
Intel® Centrino® Wireless-N 2230
Intel® Dual Band Wireless-AC 3160
Intel® Dual Band Wireless-AC 7260
Intel® Dual Band Wireless-AC 7260 for Desktop
Intel® Dual Band Wireless-N 7260
Intel® PRO/Wireless 3945ABG Network Connection
Intel® PROSet/Wireless Software
Intel® WiFi Link 1000
Intel® WiFi Link 5300 and Intel® WiFi Link 5100 products
Intel® WiMAX/WiFi Link 5350 and Intel® WiMAX/WiFi Link 5150 products
Intel® Wireless WiFi Link 4965AGN
Intel® Wireless-N 7260

Solution ID: CS-032783
Last Modified: 09-Apr-2014
Date Created: 18-Sep-2011
Back to Top