Connecting an Azure Sphere device to a Wpa2 enterprise network with username and passwork

AP-4148 0

Searching online for any resources led to this link (https://learn.microsoft.com/en-us/answers/questions/1291490/does-azure-sphere-support-wpa2-enterprise) which does not provide any details. I have tried searching the documentation but all I can find are pages simply saying that the azure sphere can connect to a Wpa2 network, but not how (i.e. PowerShell prompts etc.). Any help would be very much appreciated, thank you in advance!

1 answer

AshokPeddakotla-MSFT 27,571 Reputation points

2023-07-21T13:25:34.3+00:00

AP-4148 Greetings!

I have tried searching the documentation but all I can find are pages simply saying that the azure sphere can connect to a Wpa2 network, but not how (i.e. PowerShell prompts etc.). Any help would be very much appreciated, thank you in advance!

You can follow the same approach for connecting Azure Sphere device to WPA2 Enterprise network as mentioned here : Connect Azure Sphere to Wi-Fi. You can use the Azure Sphere CLI, which includes commands for configuring Wi-Fi

You can also configure network to Azure Sphere using Visual Studio/Visual Studio code/ CLI.

Using CLI:

azsphere device wifi add --ssid <SSID> --psk <EXAMPLEPSK>

Replace <EXAMPLEPSK> with your WPA/WPA2 key. Azure Sphere devices do not support WEP.

Please check Set up Wi-Fi on your Azure Sphere device for more details if you haven't checked earlier.

Hope this helps. Do let us know if you any further queries.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Please sign in to rate this answer.
AP-4148 0 Reputation points

2023-07-21T14:24:17.2833333+00:00

Thank you for the response, we tried to use

azsphere device wifi add --ssid <SSID> --psk <EXAMPLEPSK>

without success. Our network needs a username and password, it is an enterprise network, the ssid and psk method does "connect" but the output is as follows

ID SSID ConfigurationState ConnectionState SecurityState TargetedScan

============================================================================

2 ******** enabled unknown psk False

LeelaRajeshSayana-MSFT 13,471 Reputation points

2023-07-21T14:58:40.6266667+00:00

Hi @AP-4148 ,

We noticed your feedback that the answer on this thread was not helpful. Thank you for taking time to share your feedback. Thank you for sharing additional information on the error you are encountering. We will look into this and get back to you with additional details.

AP-4148 0 Reputation points

2023-07-21T15:44:43.5966667+00:00

I think the comments in my above reply are the issues that I am having. I can't seem to find anything that details how to connect an azure sphere using a username and password. The azure sphere can connect to wifi as shown above, but it can not connect properly to the desired network. The network is an Wpa2 enterprise network that uses a username and password, not just an ssid and passkey.

AshokPeddakotla-MSFT 27,571 Reputation points

2023-07-24T09:37:35.1466667+00:00

AP-4148 I'm looking into your feedback and will update you as earliest.

Appreciate your time and patience.

AshokPeddakotla-MSFT 27,571 Reputation points

2023-07-25T09:18:56.5066667+00:00

AP-4148 Could you try adding --targeted-scan in the command and update us the result?

azsphere device wifi add --ssid " " --psk " " --targeted-scan

The additional "--targeted-scan" handles the case where some environments have many Wi-Fi access points.

Please try and let me know if that works or need further help.

AshokPeddakotla-MSFT 27,571 Reputation points

2023-07-31T04:42:20.05+00:00

AP-4148 Just checking to see if you had a chance to see above response? Do let us know if adding --targeted-scan solves the issue?

AP-4148 0 Reputation points

2023-07-31T12:00:04.0266667+00:00

Thank you for following up, it did not have an effect, the connection state field is still displaying an unknown status.

AshokPeddakotla-MSFT 27,571 Reputation points

2023-08-03T01:57:24.3833333+00:00

AP-4148 Thanks for confirming.

I have escalated this issue internally. I will update you once I hear anything on this. Thanks for your time and patience.

James Devine 165 Reputation points Microsoft Employee

2023-08-04T09:34:12.51+00:00

Hi!

WPA2 Enterprise is supported by Azure Sphere using EAP-TLS. EAP-TLS is certificate based and it can be adopted via the CLI or implemented in an application. The EAP-TLS gallery sample provides a strong overview and example implementation of an application implementing EAP-TLS.

The particular scenario you have outlined of connecting to an enterprise network via username and password is not implemented on the device by default. Ultimately, I would guess that the username/password combination entered at connection results in the device being issued a certificate. This fundamental scenario of certificate based authentication is supported directly by Azure Sphere. This may mean you need to contact the administrator of the enterprise network to pre-issue your device a certificate. A more thoughtful approach may have to be considered for enterprise deployments at scale. Refer to the documentation mentioned in the first paragraph of this post.

I hope provides clarity to your question. Please reach out again if it does not!

AshokPeddakotla-MSFT 27,571 Reputation points

2023-08-08T10:23:32.41+00:00

AP-4148 Just checking to see if you had a chance to review the latest response.

Do let us know if that helps or have any other queries.
Sign in to comment