Windows WiFi with WPA2-Enterprise + EAP-TTLS + PAP

Question

The task is to teach Windows (XP,Vista,7) how to connect to a WiFi with WPA2-Enterprise using EAP-TTLS and PAP.

So far I know the following solutions:

• SecureW2 Personal Client 2.X: Vendor declared end-of-life. Not publicly available.
• The "Intel PROSet/Wireless WiFi Connection Utility" works on Intel WiFi cards.
• The Windows port of wpa_supplicant is still called experimental and difficult install.

The only notebook with a non-Intel wireless network card that I got my hands on bluescreened with the Intel tool so I'm reluctant to borrow me another one for testing. Has anyone done this successfully?

Do you know other software to achieve this?

Answer 1

You need to install a 3rd party tool as EAP-TTLS is not supported by the OS out-of-the-box.

If you're not comfortable with SecureW2 I'd recommend XSupplicant. It's open source (GPLv2), runs fine on Windows and has a GUI.

Answer 2

Windows XP and Vista don't support TTLS out of the box, so it requires the installation of a helper program. The program to use is SecureW2, which unfortunately is no longer freeware. However, the last freeware version 1.13 is reported as still working very well on all versions from XP to Windows 7. I have managed to find a version from the University of Manitoba. To download, type "guest" in the UMnetID field and click Continue, then Utilities, then download SecureW2 Eap Suite version 1.13.

The following instructions were taken from Windows 7 - EAP-TTLS securew2. Alternative and much more graphically-oriented instructions can be found in WPA2 Enterprise with 802.1x / EAP-TTLS section "Client 802.1x | Windows XP/Vista".

1. Download the EAP Suite v 1.13, and install it. Most likely, you'll have to restart Windows 7 after the install.
2. After reboot, click the Windows start button, then Control Panel. The Control Panel opens.
3. In the left pane, click Control Panel Home, then in the right pane under the Network and Internet section click View network status and tasks.
4. In the left pane, click Manage wireless networks. A list of previously connected wireless networks appears.
5. If YourNetwork appears in the list, double-click the YourNetwork icon and go to step 12. Otherwise, proceed to the next step.
6. Click Add.
7. Click Manually create a network profile. A dialogue box appears.
8. In the Network name: field, type YourNetwork
9. In the Security type: drop-down box, select 802.1x.
   10. Click Next. The message 'Successfully added YourNetwork' should appear.
   11. Click Change connection settings. The YourNetwork Wireless Network properties dialogue box appears.
   12. Click the Security tab.
   13. Ensure the settings are as follows:
       • Security type: 802.1x
       • Encryption type: WEP
       • Choose a network authentication method: SecureW2 EAP-TTLS
       • Check the Cache user information for subsequent connections to this network check box
   14. Click Settings...
   15. Click New and enter YourNetwork. Click OK.
   16. In the Connection tab, ensure the Use alternate outer identity checkbox is selected, and the Use anonymous outer identity radio button is selected.
   17. Ensure the Enable session resumption (quick connect) checkbox is selected.
   18. In the Certificates tab, ensure the Verify server certificate checkbox is selected, then click Add CA. Locate and highlight Thawte Premium Server CA then click Add CA.
   19. Ensure the Verify server name: checkbox is selected, then enter auth.yournetwork.com in the corresponding field.
   20. In the Authentication tab, for the Select Authentication Method: drop-down menu, ensure PAP is selected.
   21. Click Advanced.
   22. Ensure the Allow users to setup new connections checkbox is selected.
   23. Click OK to close each open dialogue box.