How to Connect to Wi-Fi Using EAP-PEAP on a Chromebook

EAP-PEAP (Protected Extensible Authentication Protocol) is commonly used in enterprise, university, and government networks. It authenticates users over a secure TLS tunnel using usernames and passwords.

Step-by-Step Instructions

1. Open the Wi-Fi Settings

1. Click the time in the bottom-right corner of your screen.
2. Click the Wi-Fi icon to see available networks.
3. Select your Wi-Fi network or click Join other network.

2. Configure EAP-PEAP Settings

Enter the following configuration values:

• Security: WPA2-Enterprise
• EAP Method: PEAP
• Phase 2 Authentication: MSCHAPv2
• Server CA Certificate:
  • Select your institution or company’s root certificate
  • Or choose Do not check (not recommended for production)
• Domain: ( radius.ironwifi.com) – Optional but recommended
• Identity: Your username (e.g., user@example.com)
• Anonymous Identity: Optional (e.g., anonymous@example.com)
• Password: Your network or directory password

Click Connect to complete the setup.

Troubleshooting Tips

• Make sure the username and password are correct and not expired.
• If you get certificate errors, ensure the RADIUS server certificate is signed by the correct CA.
• ChromeOS may require the domain to match the server certificate’s Subject Alternative Name (SAN).
• If you're using a managed Chromebook, the network settings may be locked by your administrator.

Security Tip

Always use a valid CA certificate and specify the server Domain to protect against rogue access points. Avoid using Do not check in production environments.