EAP-TTLS

An EAP variant that provides mutual authentication using a certificate for server authentication, and via a secure TLS tunnel for the client. It works in two steps:

• Establishes TLS between client and TTLS server
• Exchanges attribute-value pairs between client and server inside the TLS tunnel

Resources:

• A Technical Comparison of EAP-TTLS and PEAP
• Freeware EAP-TTLS client for Windows