Intel WiFi with WPA3-Personal & GCMP (Solved)

Hi!

Just wanted to check… has anyone else noticed problems getting Windows devices with Intel NICs working with WPA3 & GCMP 256?
Intel’s product brief for the NICs indicate that they are compatible with WPA3, 128-bit CCMP, and 256-bit GCMP. However, only 128-bit CCMP seems to actually work.
The Android devices I have to test with (Pixel 7 Pros) work with literally any valid configuration of WPA3-Personal.

CAPs: Audience
RouterOS: 7.13.3 w/ wifi-qcom-ac package

Thanks for any insight!

Hello @goodbye,

Yes it’s a known behaviour, see here https://help.mikrotik.com/docs/display/ROS/WiFi#WiFi-SecurityProperties, look at encryption part, there is a special remark for intel cards.

Best regards,

Try this at a windows command prompt it should show you.
netsh wlan show drivers

Thanks!
But this chip with the latest drivers (or, really, drivers from last year) should support both gcmp-256. And yet…

That’s actually gives a lot of insight, and definitely shows Intel’s shenanigans.

WPA3-Personal(SAE) and OWE only support CCMP
WPA3-Enterprise only supports GCMP-256

That’s… wow.

Thanks for pointing this out!

C:\WINDOWS\system32>netsh wlan show drivers

Interface name: Wi-Fi

    Driver                    : Intel(R) Wi-Fi 6 AX201 160MHz
    Vendor                    : Intel Corporation
    Provider                  : Intel
    Date                      : 29-Nov-23
    Version                   : 23.20.0.4
    INF file                  : oem197.inf
    Type                      : Native Wi-Fi Driver
    Radio types supported     : 802.11g 802.11a 802.11ac
    FIPS 140-2 mode supported : Yes
    802.11w Management Frame Protection supported : Yes
    Hosted network supported  : No
    Authentication and cipher supported in infrastructure mode:
                                Open            None
                                Open            WEP-40bit
                                Open            WEP-104bit
                                Open            WEP
                                WPA-Enterprise  TKIP
                                WPA-Enterprise  CCMP
                                WPA-Personal    TKIP
                                WPA-Personal    CCMP
                                WPA2-Enterprise TKIP
                                WPA2-Enterprise CCMP
                                WPA2-Personal   TKIP
                                WPA2-Personal   CCMP
                                Open            Vendor defined
                                WPA3-Personal   CCMP
                                Vendor defined  Vendor defined
                                WPA3-Enterprise GCMP-256
                                OWE             CCMP
    IHV service present       : Yes
    IHV adapter OUI           : [00 00 00], type: [00]
    IHV extensibility DLL path: C:\WINDOWS\system32\IntelIHVRouter10.dll
    IHV UI extensibility ClSID: {00000000-0000-0000-0000-000000000000}
    IHV diagnostics CLSID     : {00000000-0000-0000-0000-000000000000}
    Wireless Display Supported: Yes (Graphics Driver: Yes, Wi-Fi Driver: Yes)