I'm trying to connect our university's WiFi network but it requires a TTLS (PAP) certificate for authentication. And there is no certificate for Windows Phone, only for Android, Windows, Mac OS and Linux. Is it possible to use one of these certificates with my Windows Phone
Unfortunately, this is not possible at the moment.
@MarkusBlaurock this is working only through MDM configuration at the moment. I passed along the wish for a UI to configure it manually— Matthijs Hoekstra (@mahoekst) 22. April 2014
According to a number of sources, like aboves tweet from Matthijs Hoekstra (working for Microsoft since 2002, member of the Windows Phone Team since 2013) and a news message on Windows Central (http://www.windowscentral.com/wi-fi-eap-tls-support-coming-windows-phone-some-point) this is only possible if you buy a MDM Solution like Microsoft Intune, since the UI does not offer any option to choose the second level handshake mechanism.
Unfortunately, Microsoft does not seem to see the need to make TTLS available soon. My employer thus recommends all employees to not buy Windows Phones, since they cannot login to our WiFi.
TTLS is more commonly referred to as EAP-TTLS. From Enterprise Wi-Fi authentication (EAP):
EAP-TTLS is a standards-based EAP tunneling method that supports mutual authentication and provides a secure tunnel for client inclusion authentication by using EAP methods and other legacy protocols.
And there is no certificate for Windows Phone, only for Android, Windows, Mac OS and Linux
The certificate should be OK for Windows, too. Certificate are standardized in a couple of documents (like ITU's X.509 and IETF's RFC 5280), so they usually interoperate fairly well.
To manually configure EAP-TLS or EAP-TTLS authentication on a Windows Phone 8.1 device do the following:
When selecting an SSID for a connection that you do not currently have a profile for on the phone, you are presented with a sign in screen
The default setting for the “Connect using” box displays “user name+password”. For EAP-TLS and EAP-TTLS tap the “Connect using” box.
For EAP-TLS and EAP-TTLS tap “certificate” in the drop down menu. If you have more than one certificate installed on the phone then there will be a “choose a certificate” option box.
If you select that box you will get another screen with a list of the certificates that can be used for EAP-TLS or EAP-TTLS.
Once you select the certificate it will appear in the second box. Tapping the details button will show the detail information for the selected certificate.
Tap either the EAP method TLS or TTLS in the bottom “EAP Method” dropdown.
Once everything is configured, select done, and the phone will attempt to connect to the Wireless Access Point.