NXP Semiconductors
UM11490
Feature Configuration Guide for NXP-based Wireless Modules on i.MX 8M Quad EVK
2.4.3 WPA3 security
WPA3 is the next generation of Wi-Fi security with new capabilities that enhance the Wi-
Fi protection in personal and enterprise networks. Built on the widely adopted WPA2
™
,
WPA3 adds new features to simplify Wi-Fi security, enable more robust authentication,
and deliver increased cryptographic strength for highly sensitive data markets.
All WPA3 networks use the latest security methods, disallow outdated legacy protocols,
and require the use of Protected Management Frames (PMF) to maintain resiliency of
mission critical networks.
This section describes the configurations for WPA3 SAE and SAE transition mode
(backward compatibility with WPA2-PSK) using hostapd and wpa_supplicant for Access
Point and Station. To test WPA3 security, load the drivers with the module parameter
host_mlme
set to
1
(
host_mlme=1
) to enable the host mlme support.
Configure WPA3 SAE mode for the Access Point
Create the configuration file:
root@imx8mqevk:~# nano /etc/hostapd-wpa3-sae.conf
Configuration file content:
interface=uap0
driver=nl80211
ssid=NXP_Demo
hw_mode=g
channel=6
wmm_enabled=1
ieee80211n=1
auth_algs=1
wpa=2
wpa_pairwise=CCMP
wpa_passphrase=1234567890
wpa_key_mgmt=SAE
wpa_group_rekey=1800
rsn_pairwise=CCMP
ieee80211w=2
sae_groups=19 20 21 25 26
sae_require_mfp=1
sae_anti_clogging_threshold=10
UM11490
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2021. All rights reserved.
User manual
Rev. 2 — 29 January 2021
16 / 88
