Skip to main content
Cisco Meraki

Configuring EAP-TTLS + PAP Authentication on Windows 8 and 10

  1. Last updated
  2. Save as PDF

The following steps outline how to configure a Windows 8 or 10 device to authenticate to a Meraki wireless network configured to use WPA2-Enterprise 802.1X with Google Auth:

  1. In Windows, navigate to the Network and Sharing Center:
    image03.png
  2. Click Set up a new connection or network.
  3. Select Manually connect to a wireless network:
    image05.png
  4. Enter information for the wireless network:
    • Specify your SSID name.
    • Select WPA2-Enterprise as the security type:
      image04.png
  5. After the new WiFi configuration is successfully added, click Change connection Settings to open the connection properties:
    image02.png
  6. Go the the Security tab under the connection properties page.
    1. Choose Microsoft: EAP-TTLS as the authentication method. 
    2. Click Settings:
       image09.png
    3. Select PAP as the non-EAP method for authentication:

 

Note that it is generally best practice for end user security to set up Server certificate validation, which requires some additional client side configurations. Those steps will vary based on your environment's server configuration, and as such, they are not outlined here. If Server certificate validation is not configured, Enable identity privacy should be checked to maintain end user security, preventing user credentials from being sent in plain text to a potentially untrusted server.

 

image01.png

 

  1. ​Close the TTLS Properties window, then select Advanced Settings:

image09.png

  1. Check Specify authentication mode
  2. Select User authentication
  3. Click Save credentials
  4. Enter the user’s credentials

image10.png