I have a TL-WN722N USB wifi adaptor that I'm using to set up an AP on a RaspberryPI.

```

$ sudo cat /etc/NetworkManager/system-connections/AP-blackberry.nmconnection
[connection]
id=AP-blackberry
uuid=b6672c5d-c0cb-42a0-b20a-b1f051241a10
type=wifi
interface-name=wlan2
master=br0
slave-type=bridge
timestamp=1773089910

[wifi]
band=bg
mode=ap
ssid=blackberry

[wifi-security]
key-mgmt=wpa-psk
proto=rsn;
psk=TopSecretPassword

```

My existing AP is `kestrel`; the new one is `blackberry`.

The problem is that some clients can connect to `blackberry` (in particular, old ones), but others can't.

```

$ sudo nmcli dev wifi list --rescan yes
IN-USE  BSSID              SSID               MODE   CHAN  RATE        SIGNAL  BARS  SECURITY
*       9C:3D:CF:E2:56:5E  kestrel            Infra  2     0 Mbit/s    85      ▂▄▆█  WPA2
        C0:4A:00:11:BE:20  blackberry         Infra  6     65 Mbit/s   69      ▂▄▆_  WPA2 WPA3

```

The obvious difference is WPA3.

The connection dialogue in Win10 is also different and entering the password doesn't work until I click some button.

Before clicking the button it says something about 'a PIN from the router' --- which is obviously nonsense.

So: how can I get rid of WPA3?