Skip to main content

Passpoint / Hotspot 2.0

Passpoint (also known as Hotspot 2.0 or Wi-Fi Certified Passpoint) enables seamless and secure Wi-Fi connectivity without manual network selection or credential entry. When combined with IronWifi's cloud RADIUS service, you can deploy enterprise-grade automatic WiFi authentication across any supported infrastructure.

What is Passpoint?​

Passpoint is a Wi-Fi Alliance certification program based on the IEEE 802.11u standard that enables:

  • Automatic network discovery - Devices find and connect to compatible networks automatically
  • Seamless roaming - Move between Passpoint networks without reauthentication
  • Carrier-grade security - Uses WPA2/WPA3-Enterprise encryption
  • Cellular-like experience - Connect to Wi-Fi as easily as cellular networks

How Passpoint Works​

  1. Discovery: Device broadcasts a probe request looking for Passpoint networks
  2. ANQP Query: Device queries network for capabilities and credential requirements
  3. Selection: Device automatically selects the best matching network
  4. Authentication: Secure authentication via EAP-TLS, EAP-TTLS, or EAP-SIM
  5. Connection: Encrypted connection established without user interaction

IronWifi Passpoint Features​

IronWifi provides complete Passpoint infrastructure:

  • Passpoint Profile Management - Configure and deploy Passpoint profiles
  • RADIUS Authentication - Full EAP support for Passpoint authentication
  • OpenRoaming Integration - Connect to the global OpenRoaming federation
  • Certificate Management - PKI for EAP-TLS authentication
  • Analytics - Track Passpoint connections and roaming

Supported Vendors​

IronWifi Passpoint is compatible with:

OpenRoaming​

OpenRoaming extends Passpoint by creating a global Wi-Fi roaming federation:

  • Connect to thousands of hotspots worldwide
  • Single credential for all participating networks
  • Automatic secure authentication

Device Support​

Passpoint is supported on:

PlatformSupport
iOS / iPadOSiOS 7+
AndroidAndroid 6+
WindowsWindows 10+
macOSmacOS 10.9+

Getting Started​

  1. Configure your access points - Follow vendor-specific guides
  2. Create Passpoint profile in IronWifi - Define authentication and roaming settings
  3. Deploy client profiles - Provision devices with Passpoint credentials
  4. Test connectivity - Verify seamless connection

Architecture​

┌─────────────┐     ┌─────────────┐     ┌─────────────┐
│   Client    │────▶│ Access Point│────▶│  IronWifi   │
│  (Phone)    │     │ (Passpoint) │     │   RADIUS    │
└─────────────┘     └─────────────┘     └─────────────┘
                           │                    │
                           │                    ▼
                           │            ┌─────────────┐
                           │            │  Identity   │
                           │            │  Provider   │
                           │            └─────────────┘
                           │
                           ▼
                    ┌─────────────┐
                    │ OpenRoaming │
                    │ Federation  │
                    └─────────────┘

Benefits​

For Organizations​

  • Reduce support calls for Wi-Fi connectivity
  • Improve security with automatic WPA2/WPA3-Enterprise
  • Enable guest access without sharing passwords
  • Join global roaming federations

For Users​

  • No manual network selection
  • No password entry
  • Seamless roaming between locations
  • Carrier-grade security

Next Steps​