hi, you say EAP-TTLS but the logs clearly show PEAP going on - does the windows box have the CA of your signed cert? PS users file, test Cleartext-Password := "testpassword" alan