RE: Secrets to getting Windows 8.1 to connect to PEAP-TTLS and PAP

Likely to be a cert issue. Latest versions of freeradius now have the extra extension present that windows 8/8.1 (and windows phone) require Yes. If you want working and secure EAP TTLS the CA of the RADIUS server needs to be known/trusted. Use the certificate manager to ensure the cert is in the LOCAL MACHINE trusted root folder. .. not the current user folder. alan