Re: brcmfmac SAE/WPA3 negotiation - Part 2

James Prestwood
2025-01-27T14:29:02Z

Hi Keith,

On 1/25/25 8:37 AM, KeithG wrote:

<snip>
>> With wpa_supplincant, before the AP sends the 'PAE:', we get this
>> which is not in any of the iwmon logs with iwd:
>> < Request: Set PMKSA (0x34) len 92 [ack] 14.561627
>> Interface Index: 3 (0x00000003)
>> PMKID: len 16
>> 05 cb 9d 0d 9a c6 7c 42 77 b5 d2 23 f0 62 f7 4d ......|Bw..#.b.M
>> MAC Address D8:3A:DD:60:A3:0C
>> Unknown: 287 len 4
>> c0 a8 00 00 ....
>> Unknown: 288 len 1
>> 46 F
>> PMK: 254 len 32
>> 35 28 07 cb 94 de 82 e7 0a 5c 73 d3 e4 1f 88 ae 5(.......\s.....
>> 74 84 82 66 86 8d b5 aa 79 cb 75 d9 75 8d da 3a t..f....y.u.u..:
>>> Response: Set PMKSA (0x34) len 4 [0x100] 14.562171
>> Status: Success (0)
>>
>> Is there any more info or help I can provide?

Looks like the only difference between IWD working and not working is
when it includes the PMKID. This is due to the new PMKSA feature which
looks like it requires some extra work on brcmfmac (using SET_PMKSA).
Try disabling PMKSA in main.conf with:

[General].DisablePMKSA=true

This should hopefully get IWD reliably connecting.

Thanks,

James