<!--
{
  "availability" : [
    "iOS: 11.0.0 -",
    "iPadOS: 11.0.0 -",
    "macCatalyst: 13.1.0 -",
    "visionOS: 1.0.0 -"
  ],
  "documentType" : "symbol",
  "framework" : "NetworkExtension",
  "identifier" : "/documentation/NetworkExtension/NEHotspotEAPSettings",
  "metadataVersion" : "0.1.0",
  "role" : "Class",
  "symbol" : {
    "kind" : "Class",
    "modules" : [
      "Network Extension"
    ],
    "preciseIdentifier" : "c:objc(cs)NEHotspotEAPSettings"
  },
  "title" : "NEHotspotEAPSettings"
}
-->

# NEHotspotEAPSettings

Extensible Authentication Protocol settings for configuring WPA and WPA2 enterprise Wi-Fi networks.

```
class NEHotspotEAPSettings
```

## Topics

### Accessing EAP properties

[`isTLSClientCertificateRequired`](/documentation/NetworkExtension/NEHotspotEAPSettings/isTLSClientCertificateRequired)

A Boolean value indicating whether a network requires two-factor authentication or allows zero-factor authentication.

[`trustedServerNames`](/documentation/NetworkExtension/NEHotspotEAPSettings/trustedServerNames)

An array of server certificate common name strings used to verify a server’s certificate.

[`supportedEAPTypes`](/documentation/NetworkExtension/NEHotspotEAPSettings/supportedEAPTypes)

An array of supported EAP types.

[`NEHotspotEAPSettings.EAPType`](/documentation/NetworkExtension/NEHotspotEAPSettings/EAPType)

The EAP types that may be specified in [`supportedEAPTypes`](/documentation/NetworkExtension/NEHotspotEAPSettings/supportedEAPTypes).

[`username`](/documentation/NetworkExtension/NEHotspotEAPSettings/username)

The user name string for EAP authentication, encoded as UTF-8.

[`password`](/documentation/NetworkExtension/NEHotspotEAPSettings/password)

The password component of the IEEE 802.1X authentication credential.

[`preferredTLSVersion`](/documentation/NetworkExtension/NEHotspotEAPSettings/preferredTLSVersion)

The Transport Layer Security (TLS) version to use during a TLS authentication handshake.

[`NEHotspotEAPSettings.TLSVersion`](/documentation/NetworkExtension/NEHotspotEAPSettings/TLSVersion)

The EAPTLS Version identifiers that may be specified by [`preferredTLSVersion`](/documentation/NetworkExtension/NEHotspotEAPSettings/preferredTLSVersion).

[`outerIdentity`](/documentation/NetworkExtension/NEHotspotEAPSettings/outerIdentity)

The identity string to be used in the EAP-Identity/Response packet during outer EAP authentication.

[`ttlsInnerAuthenticationType`](/documentation/NetworkExtension/NEHotspotEAPSettings/ttlsInnerAuthenticationType-swift.property)

The inner-layer authentication protocol used by a TTLS module.

[`NEHotspotEAPSettings.TTLSInnerAuthenticationType`](/documentation/NetworkExtension/NEHotspotEAPSettings/TTLSInnerAuthenticationType-swift.enum)

The TTLS Inner Authentication Types that may be specified by [`NEHotspotEAPSettings.TTLSInnerAuthenticationType`](/documentation/NetworkExtension/NEHotspotEAPSettings/TTLSInnerAuthenticationType-swift.enum).

### Setting Keychain-based EAP Properties

[`setIdentity(_:)`](/documentation/NetworkExtension/NEHotspotEAPSettings/setIdentity(_:))

Sets the client identity for EAP authentication.

[`setTrustedServerCertificates(_:)`](/documentation/NetworkExtension/NEHotspotEAPSettings/setTrustedServerCertificates(_:))

Sets trusted EAP server certificates for an enterprise Wi-Fi or Hotspot 2.0 network.


---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)