Page History

...

This method allows with Wi-Fi Passpoint involves using EAP-TLS (Extensible Authentication Protocol - Transport Layer Security), where client devices authenticate to the Wi-Fi network using digital certificates rather than usernames, passwords, or SIM credentials. This ensures a high level of security, especially in environments such as enterprises, or public Wi-Fi hotspots

Steps to Map Certificate Authentication with Wi-Fi Passpoint:

1. 1. 1. 1. Understanding EAP-TLS (Certificate-Based Authentication):

            • EAP-TLS is an authentication method within the EAP framework that uses digital certificates for mutual authentication between the client and the server.
            • In this method, both the client and the network's RADIUS server exchange certificates to authenticate each other securely.
            • Certificates are issued and managed by a Certificate Authority (CA).

         2. Components Involved in EAP-TLS Authentication with Passpoint:

            • Passpoint Profile: Configured on the client device to connect to Passpoint-enabled Wi-Fi networks that support certificate-based authentication (EAP-TLS).
            • Access Point (AP): Configured to use WPA2-Enterprise or WPA3-Enterprise security, with EAP-TLS as the authentication method.
            • RADIUS Server: Handles the authentication process and validates the client certificates using the CA's public key.
            • Client Device: Must have a digital certificate installed, along with a private key that corresponds to the certificate. This certificate is typically issued by the network provider or organization.
            • Certificate Authority (CA): Issues the certificates for the client and RADIUS server, allowing mutual authentication.

...