Hi  @AnandEdwin 

Thanks for posting here.

Here are some troubleshooting steps you may refer to:

1. Verify Device Compatibility
- Client Support: Ensure the RPi4’s Wi-Fi adapter and `wpa_supplicant` version support WPA3-Enterprise (check for `wpa_supplicant 2.10+`).  
  - Check version: `wpa_supplicant -v`  
  - Update: `sudo apt upgrade wpasupplicant`  
 

2. Check FreeRADIUS Configuration 
- EAP Type Restrictions: Ensure FreeRADIUS is not forcing WPA2-compatible EAP methods.  
  - In `mods-enabled/eap`, verify:  
    ```ini
    tls {
        tls1_3 = yes  # Enable TLS 1.3 (recommended for WPA3)
    }
    ```  
- Certificate Requirements: WPA3-Enterprise has stricter certificate rules:  
  - Key length **≥2048 bits** (especially for CA and server certs).  
  - Extended Key Usage (EKU) must include `TLS Web Server Authentication` and `TLS Web Client Authentication`.  

3. wpa_supplicant Configuration  
Ensure the client config (`/etc/wpa_supplicant.conf`) explicitly enables WPA3:  
```plaintext
network={
    ssid="Your_SSID"
    key_mgmt=WPA-EAP
    eap=TLS
    identity="client@example.com"
    ca_cert="/path/to/ca.pem"
    client_cert="/path/to/client.pem"
    private_key="/path/to/client.key"
    private_key_passwd="(optional)"
    phase2="auth=MSCHAPV2"  # If using EAP-TTLS/MSCHAPv2
    ieee80211w=2  # Mandatory for WPA3 (enables PMF)
}
```  
Key parameters:  
- `ieee80211w=2` → Enforces PMF (required for WPA3).  
- If still falling back, try adding `proto=RSN` (forces WPA2/WPA3 RSN protocol).  

4. Other Possible Issues  
- Driver Limitations: The RPi4’s Wi-Fi driver (e.g., `brcmfmac`) may lack WPA3 support—try updating the kernel or using a different adapter (e.g., Intel AX200).  
- Time Sync: Certificate validation depends on system time—ensure NTP sync between client and server.