This article covers SecurePass security architecture and which networking hardware supports it. Before enabling SecurePass, confirm your access points meet the Passpoint / Hotspot 2.0 requirements listed below.
Security architecture
SecurePass uses WPA2/WPA3-Enterprise with 802.1X mutual authentication - the same security standard used in corporate and cellular networks.
SSID configuration
SecurePass requires a dedicated SSID - separate from your existing captive portal SSID. Key requirements:
For step-by-step vendor configuration, see Hardware vendor guides
Hardware requirements
SecurePass requires your access points to support Passpoint / Hotspot 2.0. The table below lists certified vendors and their minimum firmware requirements.
| Vendor | Models | Minimum requirement | Status |
|---|---|---|---|
| Cisco Meraki | MR Series APs | Any firmware | Certified |
| Cisco Catalyst | IOS-XE WLC | IOS-XE v16.10+ or AireOS v8.2.100.0+ | Certified |
| Aruba (HP) | Instant (IAP) or Controller | v6.5.0.0+ | Certified |
| Ubiquiti UniFi | UniFi Controller / UDM | Controller v7.0+ · AP firmware v6.6.75+ | Certified |
| Ruckus | SmartZone / ZoneDirector | SmartZone v3.0+ or ZoneDirector v9.8+ | Certified |
| TP-Link Omada | EAP Controller | v3.1.13+ or v4/v5 | Certified |
| Juniper Mist | Mist-managed APs | All models | Certified |
| Fortinet | FortiGate / FortiCloud | FortiGate v5.6.0+ | Certified |
Not on the list? If your AP supports Passpoint / Hotspot 2.0 and WPA2/WPA3-Enterprise, it is likely compatible. View all supported hardware