CC3235MODSF: Which eap method does not need certificate?

Choongbeom You

Part Number: CC3235MODSF

Hello,

Which eap method does not need certificate handling If I don't want to use it with a radius server?

1. EAP_TLS
2. EAP_TTLS_TLS
3. EAP_TTLS_MSCHAPV2
4. EAP_TTLS_PSK
5. EAP_PEAP0_TLS
6. EAP_PEAP0_MSCHAPV2
7. EAP_PEAP0_PSK
8. EAP_PEAP1_TLS
9. EAP_PEAP1_PSK

Thanks,

Calvin

over 4 years ago

0 Kobi Leibovitch over 4 years ago

TI__Guru 63006 points

All the methods are based on TLS an requires server authentication (i.e. at least the server Root CA certificate is needed).

Server using TEAP-TTLS may require client authentication through PKI certificate but typically it won't.

All the methods that do mention TLS specifically - will require client authentication using client certificate.

0 Choongbeom You over 4 years ago in reply to Kobi Leibovitch

Expert 1670 points

Thank you Kobi,

Could you fill in the table below to clarify?

	TLS	TTLS_TLS	TTLS_MSCHAPV2	TTLS_PSK	PEAP0_TLS	PEAP0_MSCHAPV2	PEAP0_PSK	PEAP1_TLS	PEAP1_PSK
Client-side certificate required	Yes	Yes			Yes			Yes
Server-side certificate required	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes

0 Kobi Leibovitch over 4 years ago in reply to Choongbeom You

TI__Guru 63006 points

I believe your table is correct.

0 Choongbeom You over 4 years ago in reply to Kobi Leibovitch

Expert 1670 points

Hi Kobi,

What are the methods that I can use only username and password without installing the server root CA on my device?

I need that list.

Thanks,

Calvin

0 Kobi Leibovitch over 4 years ago in reply to Choongbeom You

TI__Guru 63006 points

You can't. You always need the server's root CA.

Wi-Fi

Wi-Fi forum

CC3235MODSF: Which eap method does not need certificate?