WPA3-Enterprise Login Fails: "Certificate chain invalid"

cglavan83

My private home network uses wpa3 enterprise with nebula cloud authentication. My linux laptop can authenticate only when I choose not to require a CA certificate. My android phone running grapheneOS doesn't have this option because the OS is security-focused and this is a well-known security flaw which allows for man-in-the-middle attacks. Previously I could authenticate on my phone by choosing 'trust on first use' in the CA certificate field, however I had to do that every single time I wanted to connect to the network. For the past week or so I cannot even do that as I get the error in the title.
I would like to know a) where I can access Zyxel's CA certificate to install on my device, and/or b) when we can expect Zyxel to address this for cloud authentication.

Zyxel_Judy

Hi @cglavan83 ,

At the present, there is no feature as downloading the certificate from Nebula for Android device which need to join the network uses WPA enterprise with Nebula cloud authentication. We assume this feature is also useful for other users, so, we would like to propose it as an idea for evaluation. You can find the link to the idea section below:

https://community.zyxel.com/en/discussion/17784/download-the-certificate-from-nebula-for-android-device

Thank you for using Zyxel products and service.