E410 - Invalid pre-shared key

I have 3 identical e410 cnPilot.
I have configured 3 SSID (WPA-PSK) on each cnPilot.
I’m trying to connect a RaspberryPI (debian Stretch) to one of those SSIDs, but I keep receiving "
Invalid pre-shared key" message on Cambium logs.

The key is valid, the raspberry is connecting to other hotspots. I have tried all SSIDs and all 3 cnPilots.

sw version of Access Points is 4.2-r15

Can you help me?
thank you

Seems that disabling PMF 802.11w protocol, solves this problem.
Now I can associate correctly the RaspberryPi to the e410 ap.

Any idea why only the Raspberry is having this problem?

Most likely the driver for the Pi lacks 802.11w capability.

Check iw phy0 info | grep -A9 ‘Supported Ciphers’ to see what the driver supports.


Honestly frustrating in this day and age that os drivers still have spotty PMF support.

This is the output

        Supported Ciphers:
                * WEP40 (00-0f-ac:1)
                * WEP104 (00-0f-ac:5)
                * TKIP (00-0f-ac:2)
                * CCMP-128 (00-0f-ac:4)
                * CMAC (00-0f-ac:6)

And (00-0f-ac:6 ) is present in that list although it says only CMAC and not AES-CMAC

I’m suspecting that the phy0 interface is not supporting PMF, as the article states:

Additionally, to check whether the driver+firmware supports optional 802.11w, ensure you are using iw 5.0 or later and look for MFP_OPTIONAL in Supported extended features: in the iw phy output.

and the output of the iw phy output is:

Supported extended features:
                * [ CQM_RSSI_LIST ]: multiple CQM_RSSI_THOLD records
                * [ 4WAY_HANDSHAKE_STA_PSK ]: 4-way handshake with PSK in station mode
                * [ 4WAY_HANDSHAKE_STA_1X ]: 4-way handshake with 802.1X in station mode
                * [ DFS_OFFLOAD ]: DFS offload
                * [ 4WAY_HANDSHAKE_AP_PSK ]: AP mode PSK offload support

so I’m guessing that PMF is not supported by the driver.