Edit

Share via

WPA3-Personal with transition mode profile sample

This sample profile uses a password-based secure key exchange protocol (SAE) for network authentication. This sample profile is configured to use WPA3-Personal. It also includes transition mode, allowing clients that only support WPA2-PSK to connect to the network with the same profile (assuming the network is configured to also support WPA3 transition mode).

The shared key (TestPassword1!) is included in this sample profile in cleartext, so clients would not be prompted to enter the key on first connection. You can instead require the prompt by omitting the sharedKey child element of the security element.

<?xml version="1.0"?>
<WLANProfile xmlns="http://www.microsoft.com/networking/WLAN/profile/v1">
    <name>SampleWpa3TransitionProfile</name>
    <SSIDConfig>
        <SSID>
            <name>SampleWpa3TransitionProfile</name>
        </SSID>
    </SSIDConfig>
    <connectionType>ESS</connectionType>
    <connectionMode>auto</connectionMode>
    <MSM>
        <security>
            <authEncryption>
                <authentication>WPA3SAE</authentication>
                <encryption>AES</encryption>
                <useOneX>false</useOneX>
                <transitionMode xmlns="http://www.microsoft.com/networking/WLAN/profile/v4">true</transitionMode>
            </authEncryption>
            <sharedKey>
                <keyType>passPhrase</keyType>
                <protected>false</protected>
                <keyMaterial>TestPassword1!</keyMaterial>
            </sharedKey>
        </security>
    </MSM>
</WLANProfile>