> What am I missing? You're missing that the change was reverted in the iOS 9 GM due to the current compatibility bite. If you look at a packet capture of the EAPOL, you'll see TLS 1.0 being negotiated and used in the EAP exchange. That's likely to change again when all the cards are in order. Nick