---
title: WPA2 / WPA3 Enterprise authentication
slug: dmg-android/guide/wpa2-wpa3-enterprise-authentication
createdAt: 2026-10-06T07:46:35.840Z
---

WPA-Enterprise uses TKIP with RC4 encryption, while WPA2-Enterprise adds AES encryption. WPA3 uses Simultaneous Authentication of Equals (SAE) to provide stronger defenses against password guessing. SAE is a secure key establishment protocol. WPA3-Enterprise provides additional protections for networks transmitting sensitive data by offering the equivalent of 192-bit cryptographic strength.

Use the following guidelines to configure WPA2 or WPA3 Enterprise authentication.

Except for Apple TV, WPA2 Enterprise is applicable to iOS 8.0 or supported newer versions.

WPA3 Enterprise is applicable to iOS 13.0 or supported newer versions.

Table: Wi-Fi WPA2 / WPA3 enterprise authentication Field description

| Item                        | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| --------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Network Name (SSID)         | Enter the name (i.e., service set identifier) of the Wi-Fi network these settings apply to. This field is case sensitive.<br />                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| Description                 | Enter additional text to clarify the purpose of this group of Wi-Fi settings.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| Hidden Network              | Select this option if the SSID is not broadcast.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| Authentication              | Select one:<br />- WPA2 Enterprise<br />- WPA2 Enterprise (iOS 8 or later except Apple TV)<br />- WPA3 Enterprise (iOS 13 or later)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| Data Encryption             | Select the data encryption method associated with the selected authentication type. For WPA2 Enterprise authentication, the following encryption options are available:<br />- AES<br />- TKIP                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
| User Name                   | Specify the variable to use as the user name when establishing the Wi-Fi connection. See WPA2 / WPA3 Enterprise authentication.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| Password                    | Specify the variable to use and any necessary custom formatting for the Wi-Fi password. The default variable selected is $PASSWORD$.<br />Enter additional variables or text in the text box adjacent to the Password field. Entries in this text box are kept hidden and will not be visible to any Ivanti EPMM administrator.<br />If you specify $PASSWORD$, also enable <font color="#323232">Save User Password</font> under <font color="#323232">Settings &gt; System Settings &gt; Users &amp; Devices &gt; Registration</font>.<br />All variables and text up to the last valid variable will be visible. Anything after the last valid variable will not be visible. The valid variable may appear in either of the password fields. Valid variables are variables in the drop-down list. |
| Apply to Certificates       | Configure this field with the CA certificate needed to validate the Identity Certificate presented by the Wi-Fi Access Point. It is **not** the CA certificate needed to validate the Identity Certificate sent to the device in the Wi-Fi configuration.<br />If you configure multiple certificates, either as root certificates in separate files, or chain certificates in a single file, they appear in the CA cert drop-down on the client, however, “unspecified” is the selected value for the certificate.                                                                                                                                                                                                                                                                                  |
| Trusted Certificate Names   | This feature is not supported on Android devices.<br />                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
| Allow Trust Exceptions      | This feature is not supported on Android devices.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
| Use Per-connection Password | This feature is not supported on Android devices.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
| EAP Type                    | Select the authentication protocol used:<br />- PEAP<br />- TLS<br />- TTLS<br />You must select only one protocol.<br />**If you select EAP-FAST,&#x20;**&#x74;hen you also need to specify the Protected Access Credential (PAC).<br />**If you select TLS,** then you must specify an Identity Certificate.<br />**If you select TTLS,** then you must also specify the Inner Identity Authentication Protocol. You may optionally specify an Outer Identity, which on Android devices is propagated to the Anonymous Identity field in the Android system Wi-Fi settings.<br />                                                                                                                                                                                                                  |
| Connects To                 | Select Internet or Work.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
| Apple Settings              | These features are not supported on Android devices.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
| Android Settings            | See [Wi-Fi network priority for Android devices](docId\:p2i1vq8CvfECN_OtMD3Py).                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| Windows Settings            | These settings apply only to Windows devices.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |

**Related topics&#xA0;**

- [Open authentication](docId\:oj_yBJNBFudaCOJMKc6dv)
- [Shared authentication](docId:8ENngkPkGpFsI0rdA7vSA)
- [WPA Enterprise authentication](docId:3lX9hh5qVW5CB5tPuADNz)
- [WPA Personal authentication](docId\:bDNXpNXdRS-wx4lSQRLda)
- [WPA2 / WPA3 Personal authentication](docId\:MfaTp7IP9zQapf3Bt7euI)
- [Supported variables for Wi-Fi authentication](docId\:TnlsUNYF8I57WKPAdYsFy)