1. How To Use Windows Connect Now To Enable Simple Setup For Consumer Wi-Fi Networks Scott Manchester Program Director Windows Rally Microsoft Corporation

2. Windows ® Rally™ Program Simple Unified License Access to Technologies Technical Guidance

3. Windows ® Rally™ Devices Reliable and simple to manage Effortless to configure and maintain More secure and provide rich digital experiences

4. Windows Rally™ Technologies Applications IP Network (IPv4, IPv6) Wireless Setup Ethernet/Wireless Quality Experiences Discovery Network Map Windows Rally Technologies Network Device Installation and Configuration Network Connected Devices LLTD: QoS ExtensionsLLTD: Topology MapWindows Connect Now Function Discovery UPnP, Device Profile for Web Services, … Plug and Play Extensions

5. Session Outline Wi-Fi Simple Config Overview Windows Connect Now (WCN) Overview and Background WCN technologies WCN-UFDWCN-NETWCN-MTP WCN User Experience Demo

6. Wi-Fi Simple Configuration Simple Config Task Group Formed Aug 2004 Focus is Home WLAN Set-up (WPA-Personal) Strong WFA interest and participation – 9 companies submitted 6 proposals Seven companies formed 7C group to converge on one proposal. 7C proposal selected on Feb 8, 2006 First WFA compliance plug fest had strong participation Simple Config Specification available to WFA members at www.wi-fi.org New Standard from WFA *Other names and brands may be claimed as the property of others

7. Wi-Fi Simple Configuration Access Point Registrar Enrollee OOB Channel NFC Functional Components

8. Setting Up A New Network Ethernet Steps 1. Discovery of New Access Point (New UPnP Device and Service, GENA, GetDeviceInfo Action) 2. Transfer of PIN using OOB mechanism 3. Registration Protocol runs over UPnP Actions 4. New AP Settings sent encrypted Access Point Registrar Transfer of PIN Registration Protocol New AP Settings Discovery

9. Setting Up A New Network Wireless Steps 1. Discovery of New Access Point (New IEs in Beacon, Probe and Probe-Response) 2. Transfer of PIN using OOB mechanism 3. Registration Protocol runs as EAP method 4. New AP Settings sent encrypted Access Point Registrar Transfer of PIN Registration Protocol New AP Settings IE – Information Element in 802.11 message EAP – Extensible Authentication Protocol Discovery Securely Connected

10. Adding A New Member Device Wireless Enrollee Access Point Registrar UPnP Discovery UPnP Event Start EAP New Enrollee Notification User reads PIN from Enrollee Registration Protocol Continues WLAN Credentials Received UPnP – Universal Plug and Play EAP – Extensible Authentication Protocol Securely Connected

11. Wi-Fi Simple Config Features Transport Independent Registration (EAP, UPnP, UFD, NFC) Uses Authenticated Diffie-Hellman Exchange Default method uses a random PIN Options include UFD, NFC, PBC UPnP Management interface permits Registrars to securely configure AP settings Supports multiple registrars, not just PC (cell phone, TV, AP, etc.) Support for legacy APs Specification includes many extensibility features

12. Registration Protocol Protocol exchange between Registrar and Enrollee Exchanges DH Keys Two-way Authentication Transfer of Configuration Characteristics Transport Independent (EAP, UPnP, UFD, and NFC) Lock-step message validation Detects invalid PIN/PW

13. AP Management Interface Proxied 802.11/UPnP Events Probe request IE Registration Protocol messages from Enrollee Registration Protocol messages from Registrar (UPnP) Unauthenticated UPnP Actions GetDeviceInfoPutWLANResponse Authenticated UPnP Actions PutMessage (for Ethernet) GetAPSettings, SetAPSettings, DelAPSettings GetSTASettings, SetSTASettings RebootAP, ResetAP, RebootSTA, ResetSTA SOAP layer is very simple, parameters are base64-encoded using same binary format as EAP message data

14. Wi-Fi Simple Config Requirements AP WFA IE in beacons, probe responses WFA EAP method, no RADIUS required WFA UPnP device May include built-in Registrar STA (Enrollee) WFA IE in probe requests 802.1X supplicant and PIN for WFA EAP method May support one or more OOB channels or Push-Button Registrar (no formal WFA requirements…) UPnP control point for AP management interface In-band Registration Protocol over EAP and/or UPnP May support one or more OOB channels or Push-Button May support Registration Protocol over ad hoc All: Diffie-Hellman, HMAC-SHA-256, AES-CBC

15. Windows Vista WCN Overview Windows Connect Now includes additional methods to Wi-Fi Simple Config WCN supports the following methods USB Cable (WCN-MTP) USB Flash Drive w/ XML Schema (WCN-UFD) Windows Vista Implements a Sub Set of Wi-Fi Simple Config Does not support at RTM NFC Push Button Direct Wireless-In Band USB Flash Drive with Binary Format

16. Windows Vista WCN Overview Windows Vista Does Include the Following Methods PC as Registrar Access Point Configuration USB Flash Drive (WCN-UFD) Ethernet Enrollee Configuration USB Flash Drive (WCN-UFD) USB Cable (WCN-MTP)* EthernetWireless** PC as Enrollee USB Flash Drive (WCN-UFD)

17. Windows Vista Windows XP & Windows Vista USB Flash Drive Ethernet Ethernet Windows Connect Now Wi-Fi USB

18. Windows Connect Now UFD Portable Media used to Transfer Settings Settings Transferred using XML Schema Ideal for PCs or devices with USB Host Ports Shipped in Windows XP SP2 Many Products on the Market Xbox 360, DLink, IO Data, Belkin, HP, ZyXEL, UbiCom, Sercomm, Cybertan, …

19. Windows Connect Now UFD

20. Windows Connect Now MTP WCN-MTP provides mechanism to transfer settings or associate devices using a USB Cable Wi-Fi settings can be transferred to a Digital Still Camera over USB Uses same XML schema as WCN-UFD WCN-UFD does not require any encryption and is secure by default USB

21. Windows Connect Now NET Allows transfer of settings over Ethernet (Out of Band)/Wi-Fi (In Band) to create a secured wireless network Uses existing capabilities of devices with wired/wireless network interfaces Provides the ability to configure the device with Plug and Play experience in Windows Vista

22. Windows Connect Now NET Allows transfer of settings over Wi-Fi (In Band) to create a secured wireless network Wireless settings encrypted using PIN In-Band method requires no additional interfaces for configuration Provides the ability to configure the device with Plug and Play experience in Windows Vista (when proxied by WCN Access Point)

23. Windows Connect Now

24. Windows Logo Program For Network Infrastructure Devices Requirements Router or WLAN AP must support WCN-NET WLAN AP must use an 8 character PIN WLAN AP must support WCN-NET Wireless Proxy

25. Call To Action Support Windows Connect Now for wireless configuration in your devices Chose a suitable method for setup and configuration USB Flash Drive NetworkUSB Contact Microsoft for simple licensing terms

26. Additional Resources Web Resources Specs: http://www.microsoft.com/rally http://www.microsoft.com/rally Whitepapers: http://www.microsoft.com/rally http://www.microsoft.com/rally Other Resources: http://www.microsoft.com/whdc http://www.microsoft.com/whdc Related Sessions Plug and Play for Network Connected Devices qWAVE Diagnostics for AV Streaming and LLTD Working with the Windows Logo Program for Network Infrastructure Devices More Information Rally @ microsoft.com

27. © 2006 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.