Network Configuration Generator

Select the authentication type, from the following:

• Open - for public networks, without any authentication
• Personal (PSK) - also referred to as WPA-PSK (pre-shared key) mode, this is designed for basic uses (home, small office) Wi-Fi networks requiring only a password or pre-shared key (i.e., WPA/WPA2/WP3-Personal), without an authentication server
• Enterprise - also referred to as WPA-802.1X mode, this is designed for WPA/WPA2/WPA3-Enterprise Wi-Fi networks and requires a RADIUS authentication server

SpinetiX DSOS™ supports various 802.1X authentication methods, but only the most common ones are available on this configurator:

• PEAPv0/EAP-MSCHAPv2 is the most common form of PEAP in use, and what is usually referred to as PEAP
• EAP Transport Layer Security (EAP-TLS) require mutual authentication using client-side X.509 certificates - it is considered one of the most secure EAP standards available

A PEM-formatted X.509 client certificate to send on authenticator server request.

A PEM-formatted client PKCS#8 private key corresponding to the public key provided in EAP-TLS Client Certificate.

A PEM-formatted X.509 certificate (CA root or any intermediary certificate) to use for trust verification of the authenticator. Omitting this is insecure (and not recommended!) as the authentication secrets would not be securely encrypted.