Relution Signet Customer Hub

Wi-Fi

Relution allows Wi-Fi networks to be centrally set up on Windows devices without requiring users to enter credentials themselves.

Configuration

  • The network’s SSID – required, maximum 32 characters, no leading or trailing spaces, must be unique within the policy version.
  • This network is hidden – for networks that do not broadcast their SSID (disabled by default).
  • Join Network automatically – enabled by default.
  • Authentication type: Open (default), Personal WPA, Personal WPA2, Personal WPA3, Enterprise WPA, Enterprise WPA2, Enterprise WPA3, Enterprise WPA3 192-bit
  • Encryption type – for WPA and WPA2 (personal or enterprise) either AES (default) or TKIP; fixed to AES for Personal WPA3 and Enterprise WPA3, fixed to GCMP-256 for Enterprise WPA3 192-bit; not shown for Open.
  • Password – network key for the personal authentication types, maximum 64 characters. The portal also shows the field for Open, but it is not transferred there. If left empty, no key is transferred.
  • Transition mode – only for Personal WPA3

If several policies assign Wi-Fi configurations with the same The network’s SSID to a device, only the configuration from the policy with the highest priority is applied.

Enterprise Authentication (EAP)

For the enterprise authentication types, the Encryption settings section is displayed. At least one EAP type must be selected. As soon as an EAP type is selected, the Trust section with trusted server names and certificates is displayed as well.

  • Accept EAP Types – TLS, TTLS, and/or PEAP
  • Identity Certificate – only for TLS/TTLS; required there. Two options are available:
    • Select certificate – a manually uploaded certificate (see Certificate Management →) or a certificate template, e.g. of the Built-In CA →.
    • Use user certificate – the user certificate from the profile of the user assigned to the device (see User certificates →). The optional Certificate name field selects a specific certificate by name if the user has several and may contain placeholders. If left blank, the longest-lived certificate is used.
  • Inner authentication type – for TTLS: PAP, CHAP, MSCHAP or MSCHAPv2 (required); as soon as PEAP is selected, only MSCHAPv2 (optional)
  • Inner authentication – text field, only for TTLS without PEAP; required for PAP, CHAP or MSCHAP
  • Anonymous username – for TTLS/PEAP, optional
  • Prompt user for server certificate – PEAP only. If enabled, the server certificate is not validated automatically, and Windows may prompt the user if the certification authority is not found.
  • Trusted Server Names
  • Trusted Certificates – multiple selection of certificates (PKCS#1 or PKCS#12) from Certificate Management →