I spent a long time in the past couple of years trying to work out how to deploy secure WiFi and failed to come up with anything great. The biggest challenge is that client support for anything beyond wpa2 psk is virtually nonexistent. The Hotspot 2.0 spec is supposed to make all this easier but it&#x27;s not widely supported and heavily influenced by carriers whose goals don&#x27;t always align with everyone else in the space.