WPA2/WPA3 Enterprise Configuration Guide
Verify that your client device system time/date settings match reality. Desynced device clocks will reject valid security certificates.
Verify credentials. Network identity strings are case-sensitive. Make sure Caps Lock is disabled during active setup entry.
Certain appliances (like Nintendo Switch or older smart home tech) do not natively process enterprise WPA 802.1X handshakes. Use a dedicated personal pre-shared key (WPA2-PSK) sub-SSID for those devices.