Skip to main content

Apple iOS - EAP-PEAP Configuration

Configure iPhone, iPad, and Mac devices to connect securely to IronWifi WPA-Enterprise wireless networks using EAP-PEAP authentication. This guide covers manual configuration, configuration profiles, and MDM deployment for enterprise environments.

Overview​

EAP-PEAP provides secure wireless authentication using a username and password. iOS devices fully support EAP-PEAP and can be configured manually or via MDM profiles.

Prerequisites​

  • iOS 10 or later (iOS 14+ recommended)
  • Valid IronWifi user credentials
  • Wireless network configured with WPA2-Enterprise

Manual Configuration​

iPhone / iPad​

  1. Open Settings > Wi-Fi
  2. Tap your enterprise network name
  3. Configure the following:
    • Username: Your IronWifi username (usually email)
    • Password: Your password
  4. Tap Join
  5. When prompted about the certificate, tap Trust

First-Time Connection​

On first connection, iOS will display a certificate trust dialog:

  1. Review the certificate details
  2. Verify the server name matches your expected RADIUS server
  3. Tap Trust to accept the certificate
  4. The certificate will be remembered for future connections

Configuration Profile (MDM)​

For enterprise deployment, create a Wi-Fi configuration profile:

Using Apple Configurator 2​

  1. Open Apple Configurator 2
  2. File > New Profile
  3. Add Wi-Fi payload
  4. Configure:
    • SSID: Your network name
    • Security Type: WPA2 Enterprise
    • Protocols: Select PEAP
    • Authentication: Username and password
    • Username: Leave blank for per-user entry or use variable
    • Password: Leave blank for per-user entry
  5. Add Certificate payload for the CA certificate
  6. Save and deploy the profile

Profile XML Example​

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadContent</key>
    <array>
        <dict>
            <key>AutoJoin</key>
            <true/>
            <key>EAPClientConfiguration</key>
            <dict>
                <key>AcceptEAPTypes</key>
                <array>
                    <integer>25</integer>
                </array>
                <key>TTLSInnerAuthentication</key>
                <string>MSCHAPv2</string>
            </dict>
            <key>EncryptionType</key>
            <string>WPA2</string>
            <key>SSID_STR</key>
            <string>YourNetworkSSID</string>
            <key>PayloadType</key>
            <string>com.apple.wifi.managed</string>
        </dict>
    </array>
</dict>
</plist>

Intune / Jamf Deployment​

Microsoft Intune​

  1. Go to Devices > Configuration profiles
  2. Create new profile for iOS/iPadOS
  3. Select Wi-Fi template
  4. Configure:
    • Wi-Fi type: Enterprise
    • EAP type: PEAP
    • Certificate server names: Your RADIUS hostname
    • Root certificate for server validation: Select deployed CA cert

Jamf Pro​

  1. Computers/Devices > Configuration Profiles
  2. Add Network payload
  3. Select:
    • Security Type: WPA2 Enterprise
    • Protocol: PEAP
    • Configure authentication settings

Troubleshooting​

"Unable to Join Network"​

  1. Verify your credentials are correct
  2. Check that the network is within range
  3. Forget the network and try again:
    • Settings > Wi-Fi > tap (i) > Forget This Network

Certificate Trust Issues​

If iOS won't trust the certificate:

  1. Check if the CA certificate needs to be installed
  2. Go to Settings > General > About > Certificate Trust Settings
  3. Enable trust for the certificate

Authentication Loops​

If repeatedly prompted for credentials:

  1. Ensure username format is correct (may need full email)
  2. Check account isn't locked in IronWifi console
  3. Verify password hasn't expired

Profile Installation Fails​

  1. Check the profile isn't corrupted
  2. Ensure device isn't managed by conflicting MDM
  3. Review profile in Settings > General > VPN & Device Management

Mac OS Configuration​

macOS Ventura and Later​

  1. Click Wi-Fi icon in menu bar
  2. Select your enterprise network
  3. Enter:
    • Username: Your username
    • Password: Your password
  4. Click Join
  5. Trust the certificate when prompted

802.1X Settings​

For advanced configuration:

  1. System Preferences > Network
  2. Select Wi-Fi > Advanced
  3. Add network with 802.1X authentication
  4. Configure EAP-PEAP settings