Windows – TTLS + PAP

Windows – TTLS + PAP

IronWiFi and Windows device Configuration:

  1. Create an IronWiFi account the first >>> Open an account
  2. Follow the provided instructions to set up your AP configuration >>> AP configuration instructions
  3. Follow the instructions on how to configure your secured network connection on Windows⬇

 

EAP-TTLS / PAP requires the use of an 802.1X supplicant.

The following Operating Systems all include 802.1X supplicants and support EAP-TTLS and PAP:

  • Microsoft Windows v7+ (note: Windows Mobile does not support EAP-TTLS)
  • Microsoft Windows v8+ supports the default installation
  • Microsoft Windows before version 7, only with extra software/drivers

You can use our Profile Generator to automate user supplicant configuration. If the profile created with our generator doesn't work, you can configure your wireless profile manually.

 

1. Right-click on the Wlan Symbol >> Open Network&Internet Settings

secure network

2. Go to the Network and Sharing Center

sharing centre

3. Click on Set up a new connection or network

set up new connectoin

4. Click on Manually connect to a wireless network

manually connect

5. Enter your Network name, select WPA2-Enterprise Security Type and AES as Encryption type and click Next.

name

6. Click on Change connection settings

change connection settings

7. Review the settings and click on the Security tab

security tab

8. In tab Security, make sure to have Security type WPA2-Enterprise, Encryption type AES, Network authentication protocol Microsoft: EAP-TTLS, then click on Settings

9. Unselect check-box Enable identity privacy and make sure to have Unencrypted password (PAP) selected as Client authentication. Click OK to close the window.

enable identity

10. Click on Advanced settings and select Specify authentication mode check-box. Select User authentication.

user authentication-1

IMPORANT: If you are using Windows 10, click on Save credentials, enter valid credentials and click OK.

 save credentials

 

11. Select your new connection and click Connect.

network

Sometimes occurs problems with trying while having domain/server/certifikate verification enabled. If you cannot connect, try with disabled these security features.

 

12. If successful, you will see the Connected status below your network name.

13. If you want to export the profile and re-use it, you can create the profile without saving the credentials, and then export the profile. Run CMD to get to Windows terminal and then type:

netsh wlan show profile

to list all the profiles. 

Screenshot 2024-05-24 174352 - prv

You can then export the profile with the following command:

netsh wlan export profile name="Your_profile_name" folder="dst_folder"

Screenshot 2024-05-24 174631

After the profile has been exported, you can move it to any other computers, and import them using command:

netsh wlan add profile filename="Your_exported_file" user=all

Screenshot 2024-05-24 174715

Go to Network & internet > WiFi > Manage known networks to confirm that the profile has been succesfuly installed.

Screenshot 2024-05-24 174803

 

    • Related Articles

    • Intune - TTLS-PAP with IronWiFi PKI

      This is a guide for setting up TTLS-PAP with IronWiFi's multi-tiered HSM based Certificate Authority and Microsoft Intune to provision Windows OS based devices, using user profile. What do you need ? IronWiFi Root CA Certificate - certificate of the ...
    • MAC OS & iOS – TTLS + PAP

      Generate a Mobile profile Download Apple Configurator from the App Store: https://itunes.apple.com/us/app/apple-configurator-2/id1037126344?mt=12 1. Start Apple Configurator, click File -> New Profile -> Wi-Fi -> Configure. 2. Enter SSID, select ...
    • Invalid Signature error when downloading Passpoint profile on Windows

      Due to change of logic introduced in Windows update in the past few months, that was seemingly reversed in the latest Experience Pack, whilst downloading Passpoint profile on Windows machine from the Captive Portal environment, you might encounter ...
    • Android – TTLS + PAP

      IronWiFi and Android device Configuration: Create an IronWiFi account the first >>> Open an account Follow the provided instructions to set up your AP configuration >>> AP configuration instructions Follow the instructions on how to configure your ...
    • Windows – TLS

      This page describes the steps required to connect a Windows desktop system to a WPA2-Enterprise secured network using TLS authentication with client certificates. Installing Root CA Certificate For your Windows users to be able to authenticate using ...