ValdikSS

JEB05DFC esd0402-6 https://www.jjm.com/profhqj4/ TVS Diode Array ESD protective components are TVS arrays specially used for small-signal ESD protection or surge protection and are mostly used for multi-channel protection. It has the advantages of a small package size and high integration.

Hello, have you found what is ED1 part? I have a fried board as well, and ED1 seems to be a culprit. UPD: According to Orange Pi Zero2 schematics, it's JEB05DFC esd0402-6. I just removed it and the board is working again.

Could you please post the output of `iw dev` and wpa_cli commands, as I do? The raw output is useful for the future reference.

The current image is broken due to incorrect GPT header. https://github.com/armbian/build/issues/10647 I had the same issue and somehow when I flashed the image the first attempt, the bootloader detected *something* and tried to boot *something*, but the console never appeared. The subsequent writes, after wiping the start and the end of MicroSD, failed at the bootloader (the bootloader did not see the partition table, just as Linux both times). So my guess is that even if the bootloader uses backup partition table somehow, the Linux kernel does not and fails to mount rootfs. The fix is to set Number of partition entries in array = 16. See the ticket. The image successfully boots after that.

ArmSoM P2pro. Ampak AP6256, Synaptics SYN43456 (Broadcom licensee, BCM43456). 2.4, 5 GHz 802.11a/b/g/n/ac 1x1 SISO, UART/PCM for Bluetooth 5.2 Datasheets: [1], [2] bcmdhd module @ Kernel 5.10.110, firmware: Aug 25 2022 12:38:28 version 7.45.96.150 (g31bd2ca8) FWID 01-af0bb8b0 es7.c5.n4.a3 ❌ Does not work in WPA3-Personal Only: fails to associate, seems to be a known bug in driver/firmware, affects Raspberry Pi 4/5 as well ✔️ Should work in WPA3-Enterprise (supports PMF, CCMP-128 and GCMP-256 for pairwise/group ciphers) ✔️ Should work in WPA3-Enterprise 192-bit mode (supports PMF, GCMP-256, WPA-EAP-SUITE-B-192) Confirmed SAE not working for BCM/SYN43456 also on Raspberry Pi 400 (Raspberry OS, kernel 6.18.39), Orange Pi 4a (Armbian kernel 7.1.13, AurealNix v0.4.1 kernel 6.18.44). # iw phy Wiphy phy0 wiphy index: 0 max # scan SSIDs: 10 max scan IEs length: 2048 bytes max # sched scan SSIDs: 0 max # match sets: 0 Retry short limit: 7 Retry long limit: 4 Coverage class: 0 (up to 0m) Device supports roaming. Device supports T-DLS. Supported Ciphers: * WEP40 (00-0f-ac:1) * WEP104 (00-0f-ac:5) * TKIP (00-0f-ac:2) * CCMP-128 (00-0f-ac:4) * CMAC (00-0f-ac:6) * GMAC-256 (00-0f-ac:12) * GMAC-128 (00-0f-ac:11) * CMAC-256 (00-0f-ac:13) * 00-90-4c:0 * GCMP-128 (00-0f-ac:8) * GCMP-256 (00-0f-ac:9) * GMAC-128 (00-0f-ac:11) * GMAC-256 (00-0f-ac:12) Available Antennas: TX 0x1 RX 0x1 Supported interface modes: * IBSS * managed * AP * P2P-client * P2P-GO * P2P-device … get_capability eap: MD5 TLS WFA-UNAUTH-TLS MSCHAPV2 PEAP TTLS GTC OTP SIM LEAP PSK AKA AKA' FAST PAX SAKE GPSK WSC IKEV2 TNC PWD EKE get_capability pairwise: GCMP-256 CCMP GCMP TKIP get_capability group: GCMP-256 CCMP GCMP TKIP WEP104 WEP40 get_capability key_mgmt: NONE IEEE8021X WPA-EAP WPA-PSK WPA-EAP-SUITE-B WPA-EAP-SUITE-B-192 OWE DPP FT-PSK get_capability proto: RSN WPA get_capability auth_alg: OPEN SHARED LEAP SAE get_capability channels: Mode[G] Channels: 1 2 3 4 5 6 7 8 9 10 11 12 13 Mode[A] Channels: 36 40 44 48 52 56 60 64 149 153 157 161 165 Mode[B] Channels: 1 2 3 4 5 6 7 8 9 10 11 12 13 get_capability modes: IBSS AP Router: station: mac: b8:13:32:cf:b4:e4 ap: WifiMaster1/AccessPoint0 psm: no authenticated: yes txrate: 60 rxrate: 54 uptime: 773 txbytes: 159775 rxbytes: 26650656 ht: 40 mode: 11ac gi: 400 rssi: -79 mcs: 3 txss: 1 ebf: yes dl-mu: no _11: k _11: r pmf: yes security: wpa2-psk Tested on armsom-p2pro-debian-bullseye-base-arm64-20241101 image. More information in the attachment. armsom-p2pro-ap6256.zip

Wukong Pi, an Orange Pi Zero LTS clone. AllWinner XR819, 2.4GHz 1T1R 802.11bgn. Datasheet. Open https://github.com/fifteenhex/xradio Armbian SoftMAC driver (1 Sep 2026), supports everything Linux kernel and wpa_supplicant supports. ✔️ Works in WPA3-Personal Only: WPA3-SAE + CCMP-128/GCMP-128/GCMP-256 for pairwise/group ciphers. ✔️ Should work in WPA3-Enterprise Only: will connect if the AP supports CCMP-128 or GCMP-256 for pairwise/group ciphers. ✔️ Works for WPA3-Enterprise 192-bit mode (supports GCMP-256). Wiphy phy0 wiphy index: 0 max # scan SSIDs: 2 max scan IEs length: 2257 bytes max # sched scan SSIDs: 0 max # match sets: 0 Retry short limit: 7 Retry long limit: 4 Coverage class: 0 (up to 0m) Device supports AP-side u-APSD. Supported Ciphers: * WEP40 (00-0f-ac:1) * WEP104 (00-0f-ac:5) * TKIP (00-0f-ac:2) * CCMP-128 (00-0f-ac:4) * CCMP-256 (00-0f-ac:10) * GCMP-128 (00-0f-ac:8) * GCMP-256 (00-0f-ac:9) * CMAC (00-0f-ac:6) * CMAC-256 (00-0f-ac:13) * GMAC-128 (00-0f-ac:11) * GMAC-256 (00-0f-ac:12) … get_capability eap: MD5 TLS WFA-UNAUTH-TLS MSCHAPV2 PEAP TTLS GTC OTP SIM LEAP PSK AKA AKA' FAST PAX SAKE GPSK WSC IKEV2 TNC PWD EKE get_capability pairwise: CCMP-256 GCMP-256 CCMP GCMP TKIP get_capability group: CCMP-256 GCMP-256 CCMP GCMP TKIP WEP104 WEP40 get_capability key_mgmt: NONE IEEE8021X WPA-EAP WPA-PSK WPA-EAP-SUITE-B WPA-EAP-SUITE-B-192 OWE DPP FILS-SHA256 FILS-SHA384 FT-FILS-SHA256 FT-FILS-SHA384 FT-PSK FT-EAP SAE get_capability proto: RSN WPA get_capability auth_alg: OPEN SHARED LEAP SAE FILS_SK_WITHOUT_PFS FILS_SK_WITH_PFS get_capability channels: Mode[G] Channels: 1 2 3 4 5 6 7 8 9 10 11 12 13 Mode[B] Channels: 1 2 3 4 5 6 7 8 9 10 11 12 13 get_capability modes: IBSS AP MESH Router: ap: WifiMaster0/AccessPoint0 psm: no authenticated: yes txrate: 65 rxrate: 65 uptime: 223 txbytes: 8617 rxbytes: 4220 ht: 20 mode: 11n gi: 800 rssi: -51 mcs: 7 txss: 1 _11: k _11: v pmf: yes security: wpa3-psk Tested on Armbian sunxi 26.11.0-trunk.40 (fc4623bc6), 6.18.49-current-sunxi More information in the attachment. orange-pi-zero-xr819.zip

Continuing. Radxa Rock Pi S. Realtek RTL8723DS, 2.4GHz 1T1R 802.11bgn SDIO WLAN with Bluetooth 4.2 Single-Chip Controller Datasheet. Proprietary Realtek 8723ds driver (v5.1.1.5_20523.20161209_BTCOEX20161208-1212, year 2016) ❌ Does not work in WPA3-Personal Only: no WPA3-SAE support, no PMF support (no CMAC support) ❌ Does not work in WPA3-Enterprise (IEEE 802.1X with SHA-256): no PMF support (no CMAC support) ❌ Does not work for WPA3-Enterprise 192-bit mode: no support for GCMP-256, no support for WPA-EAP-SUITE-B-192 key_mgmt, no PMF support (no CMAC support) Tested on Radxa Rock Pi S image, Wed, 24 Jan 2024 More information in the attachment. Wiphy phy0 wiphy index: 0 max # scan SSIDs: 9 max scan IEs length: 2304 bytes max # sched scan SSIDs: 0 max # match sets: 0 Retry short limit: 7 Retry long limit: 4 Coverage class: 0 (up to 0m) Supported Ciphers: * WEP40 (00-0f-ac:1) * WEP104 (00-0f-ac:5) * TKIP (00-0f-ac:2) * CCMP-128 (00-0f-ac:4) Available Antennas: TX 0 RX 0 Supported interface modes: * IBSS * managed * AP * P2P-client * P2P-GO … get_capability eap: MD5 TLS WFA-UNAUTH-TLS MSCHAPV2 PEAP TTLS GTC OTP SIM LEAP PSK AKA AKA' FAST PAX SAKE GPSK WSC IKEV2 TNC PWD EKE get_capability pairwise: CCMP TKIP get_capability group: CCMP TKIP WEP104 WEP40 get_capability key_mgmt: NONE IEEE8021X WPA-EAP WPA-PSK WPA-EAP-SUITE-B OWE DPP FT-PSK FT-EAP get_capability proto: RSN WPA get_capability auth_alg: OPEN SHARED LEAP get_capability channels: Mode[G] Channels: 1 2 3 4 5 6 7 8 9 10 11 12 13 Mode[B] Channels: 1 2 3 4 5 6 7 8 9 10 11 12 13 get_capability modes: IBSS AP Router: ap: WifiMaster0/AccessPoint0 psm: no authenticated: yes txrate: 65 rxrate: 52 uptime: 10 txbytes: 6438 rxbytes: 1460 ht: 20 mode: 11n gi: 800 rssi: -55 mcs: 7 txss: 1 _11: k security: wpa2-psk Mainline rtw88 rtw_8723ds driver (SoftMAC driver, supports any feature the kernel/wpa_supplicant supports. Kernel 6.1): ✔️ Works in WPA3-Personal Only: WPA3-SAE + CCMP-128/GCMP-128/GCMP-256 for pairwise/group ciphers. ✔️ Should work in WPA3-Enterprise Only: will connect if the AP supports CCMP-128 or GCMP-256 for pairwise/group ciphers. ✔️ Works for WPA3-Enterprise 192-bit mode (supports GCMP-256). Tested on Radxa Rock Pi S image, Wed, 24 Jan 2024 More information in the attachment. Wiphy phy0 wiphy index: 0 max # scan SSIDs: 4 max scan IEs length: 2257 bytes max # sched scan SSIDs: 0 max # match sets: 0 Retry short limit: 7 Retry long limit: 4 Coverage class: 0 (up to 0m) Device supports T-DLS. Supported Ciphers: * WEP40 (00-0f-ac:1) * WEP104 (00-0f-ac:5) * TKIP (00-0f-ac:2) * CCMP-128 (00-0f-ac:4) * CCMP-256 (00-0f-ac:10) * GCMP-128 (00-0f-ac:8) * GCMP-256 (00-0f-ac:9) * CMAC (00-0f-ac:6) * CMAC-256 (00-0f-ac:13) * GMAC-128 (00-0f-ac:11) * GMAC-256 (00-0f-ac:12) … get_capability eap: MD5 TLS WFA-UNAUTH-TLS MSCHAPV2 PEAP TTLS GTC OTP SIM LEAP PSK AKA AKA' FAST PAX SAKE GPSK WSC IKEV2 TNC PWD EKE get_capability pairwise: CCMP-256 GCMP-256 CCMP GCMP TKIP get_capability group: CCMP-256 GCMP-256 CCMP GCMP TKIP WEP104 WEP40 get_capability key_mgmt: NONE IEEE8021X WPA-EAP WPA-PSK WPA-EAP-SUITE-B WPA-EAP-SUITE-B-192 OWE DPP FILS-SHA256 FILS-SHA384 FT-FILS-SHA256 FT-FILS-SHA384 FT-PSK FT-EAP SAE get_capability proto: RSN WPA get_capability auth_alg: OPEN SHARED LEAP SAE FILS_SK_WITHOUT_PFS FILS_SK_WITH_PFS get_capability channels: Mode[G] Channels: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 Mode[B] Channels: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 get_capability modes: IBSS AP Router: ap: WifiMaster0/AccessPoint0 psm: no authenticated: yes txrate: 65 rxrate: 72 uptime: 451 txbytes: 13352 rxbytes: 3779 ht: 20 mode: 11n gi: 800 rssi: -58 mcs: 7 txss: 1 _11: k _11: r _11: v pmf: yes security: wpa3-psk radxa-rock-pi-s-rtl8723ds.zip

95% of companies work only with and for their customers. Their customers are other companies which use their chips to manufacture the finished device. The customers receive code and support from the chip manufacturer. The end users, as well as community/hobby projects like Armbian, are not the customers for chip companies. It is a very tiny market compared to the embedded/retail use. Rockchip does not make consumer chips, they make specialized chips: for Android smartphones, for cameras, for vehicles, etc. The customers of Rockchip use Android, RTOSes, custom Linux-based OSes. Consumer chip companies, such as Intel and AMD, contribute to Linux because their customers use mainline Linux. PC operating systems are supplied by third parties that are not part of the computer manufacturer, motherboard or processor vendor. All component manufacturers must write drivers for Windows, certify them with Microsoft, and make sure that their device works properly ideally on any computer. You, the user, buy (or obtain) a copy of the operating system from the operating system company. The operating system for an appliance (smartphone) comes with the appliance itself (as a bundle), and is supplied by the appliance manufacturer, not by operating system manufacturer. The manufacturer of electronic components does not need to contact the creators of the operating systems, they write a driver for Android kernel (yes, for Android kernel, with all its wakelock subsystems and such in mind) and gives it to the manufacturer of the appliance directly (and sometimes only supplies hardware, and the driver must be made by the manufacturer of the appliance).

Made some power consumption tests of different USB-Ethernet 2.5G, 1G and 100M dongles. Test bed: Orange Pi Zero3 with 480 MHz CPU speed locked, connected to the PC over UART, Armbian 26.11.0-trunk.30 6.18.48-current-sunxi64 AVHzY CT-3 for power consumption monitoring Intel I226-V as another Ethernet side First I set a baseline Orange Pi consumption with USB Host enabled. The absolute minimum I could get is with a Logitech radio keyboard dongle plugged in — 0.934 W. Then I plugged in USB-Ethernet adapters and recorded its idle power consumption without cable connected, idle power with cable and Energy-efficient Ethernet (EEE) on/off, and power under load. Please note: all tests were performed over USB 2.0, the maximum transmission load was about 300-320 mbit/s, even on a 2.5G modules. Commands used: # Enable Energy-efficient Ethernet (EEE) and advertise 100M, 1G, 2.5G EEE support ethtool --set-eee $INTF advertise 0x80000000002a eee on # Disable Energy-efficient Ethernet (EEE) ethtool --set-eee $INTF eee off # Check Energy-efficient Ethernet (EEE) status ethtool --show-eee $INTF # Force link speed ethtool --change $INTF speed 100 #1: "GLAABIT" Black USB 3.0 Gigabit Lan dongle Realtek RTL8153, 1G usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=31.00 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=6 usb 1-1: Product: USB 10/100/1000 LAN usb 1-1: Manufacturer: Realtek usb 1-1: SerialNumber: 001000001 r8152-cfgselector 1-1: reset high-speed USB device number 10 using ehci-platform r8152 1-1:1.0 eth0: v1.12.13 Idle Transmisson Idle, no cable +0.169W - 1G, EEE off +0.786W +0.786-0.816W 1G, EEE on +0.236W +0.786-0.816W 100M, EEE off +0.432W +0.466-0.456W 100M, EEE on +0.279W +0.426W 10M, EEE off +0.216W +0.286W #2: Silver no text with LED Realtek RTL8153, 1G usb 1-1: new high-speed USB device number 15 using ehci-platform usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=30.00 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=6 usb 1-1: Product: USB 10/100/1000 LAN usb 1-1: Manufacturer: Realtek usb 1-1: SerialNumber: 000001 Idle Transmission Idle, no cable +0.026W - 1G, EEE off +0.696W +0.799W 1G, EEE on +0.121W +0.799W 100M, EEE off +0.242W +0.282W 100M, EEE on +0.102W +0.282W 10M, EEE off +0.086W +0.146W #3: Silver no text, with network icon, USB-C, large LEDs Realtek RTL8156, 2.5G usb 1-1: new high-speed USB device number 16 using ehci-platform usb 1-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=31.00 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=6 usb 1-1: Product: USB 10/100/1G/2.5G LAN usb 1-1: Manufacturer: Realtek usb 1-1: SerialNumber: 0013000001 r8152-cfgselector 1-1: reset high-speed USB device number 16 using ehci-platform r8152 1-1:1.0 eth0: v1.12.13 Idle Transmisson Idle, no cable +0.059W - 2.5G, EEE of +0.828W +0.869W 2.5G, EEE on +0.381W +0.796-0.806W 1G, EEE off +0.479W +0.518W 1G, EEE on +0.261W +0.516W 100M, EEE off +0.262W +0.291W 100M, EEE on +0.124W +0.291W #4: Dongle with USB HUB for 3 USB 2.0 ports + 100M Ethernet Realtek RTL8152 100M usb 1-1.4: new high-speed USB device number 20 using ehci-platform usb 1-1.4: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice=20.00 usb 1-1.4: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1.4: Product: USB 10/100 LAN usb 1-1.4: Manufacturer: Realtek usb 1-1.4: SerialNumber: 00E04C36001D r8152-cfgselector 1-1.4: reset high-speed USB device number 20 using ehci-platform r8152 1-1.4:1.0: skip request firmware Idle Transmission Idle, no cable +0.235W - 100M, EEE off +0.461W +0.565W 100M, EEE on +0.321W +0.561W #5: USB Network Adapter For Switch ASIX AX88772D, 100M Driverless CDC-NCM mode, does not support EEE. usb 1-1: new high-speed USB device number 21 using ehci-platform usb 1-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 3.00 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 1-1: Product: AX88772D usb 1-1: Manufacturer: ASIX usb 1-1: SerialNumber: 000D7413 cdc_ncm 1-1:2.0: MAC-Address: f8:e4:3b:0d:74:13 cdc_ncm 1-1:2.0: setting rx_max = 16384 cdc_ncm 1-1:2.0: setting tx_max = 16384 cdc_ncm 1-1:2.0 eth0: register 'cdc_ncm' at usb-5200000.usb-1, CDC NCM (NO ZLP), f8:e4:3b:0d:74:13 usbcore: registered new interface driver cdc_ncm usbcore: registered new interface driver cdc_wdm usbcore: registered new interface driver cdc_mbim cdc_ncm 1-1:2.0 enxf8e43b0d7413: renamed from eth0 Idle Transmisson Idle, no cable +0.14W - 100M, EEE off +0.224W +0.278W

Orange Pi Zero3. CDTech CDW-20U5622 / AllWinner AW859, Unisoc UWE5622 (sc2355) chip: 2.4, 5 GHz 802.11a/b/g/n/ac 1x1 MU-MIMO, Bluetooth 5.0 Datasheet. ❌ Does not work in WPA3-Personal Only: no WPA3-SAE support 🤷 Maybe it supports WPA3-Enterprise AKM:5 (IEEE 802.1X with SHA-256), don't know the method to check ❌ Does not work for WPA3-Enterprise 192-bit mode: no support for GCMP-256, no support for WPA-EAP-SUITE-B-192 key_mgmtno WPA3-SAE support Supports PMF for WPA2-PSK Station, but fails to configure AP with PMF. Tested on Armbian 24.xx More information in the attachment. Wiphy phy0 wiphy index: 0 max # scan SSIDs: 12 max scan IEs length: 2304 bytes max # sched scan SSIDs: 9 max # match sets: 9 RTS threshold: 2353 Retry short limit: 10 Retry long limit: 9 Coverage class: 0 (up to 0m) Device supports RSN-IBSS. Supported Ciphers: * WEP40 (00-0f-ac:1) * WEP104 (00-0f-ac:5) * TKIP (00-0f-ac:2) * CCMP-128 (00-0f-ac:4) * WPI-SMS4 (00-14-72:1) * CMAC (00-0f-ac:6) * 00-0f-ac:255 Available Antennas: TX 0x1 RX 0x1 Supported interface modes: * IBSS * managed * AP * P2P-client * P2P-GO * P2P-device … get_capability eap: MD5 TLS WFA-UNAUTH-TLS MSCHAPV2 PEAP TTLS GTC OTP SIM LEAP PSK AKA AKA' FAST PAX SAKE GPSK WSC IKEV2 TNC PWD EKE get_capability pairwise: CCMP TKIP get_capability group: CCMP TKIP WEP104 WEP40 get_capability key_mgmt: NONE IEEE8021X WPA-EAP WPA-PSK WPA-EAP-SUITE-B OWE DPP FT-PSK FT-EAP get_capability proto: RSN WPA get_capability auth_alg: OPEN SHARED LEAP get_capability channels: Mode[G] Channels: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 Mode[A] Channels: 36 40 44 48 52 56 60 64 100 104 108 112 116 120 124 128 132 136 140 144 149 153 157 161 165 Mode[B] Channels: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 get_capability modes: IBSS AP orange-pi-zero3-uwe5622.zip

Orange Pi 3G-IoT-A. MT6620 (?) Wi-FI inside Mediatek MT6572 smartphone chip. ❌ Does not work in WPA3-Personal Only: no WPA3-SAE support ✔️ Should work in WPA3-Enterprise Only: will connect if the AP supports CCMP-128 for pairwise/group ciphers. ❌ Does not work for WPA3-Enterprise 192-bit mode: no PMF no GCMP support I've applied this patch to kernel 3.4 to enable PMF, IEEE 802.1X with SHA-256 support was already in the driver. This confirms that WPA3-Enterprise is possible even on ancient kernels/modules and does not require anything special besides PMF. Tested on Armbian 24.xx More information in the attachment. orange-pi-3g-iot-mtk.zip

Radxa Zero 3w. AIC8800D80 — 2.4 + 5 GHz 802.11b/g/n/ac/ax 80 MHz 1x1 + BT5.3. Datasheet. ✔️ Works in WPA3-Personal Only: WPA3-SAE + CCMP-128 for pairwise/group ciphers. ✔️ Should work in WPA3-Enterprise Only: will connect if the AP supports CCMP-128 for pairwise/group ciphers. ❌ Does not work for WPA3-Enterprise 192-bit mode (no support for GCMP-256, no support for WPA-EAP-SUITE-B-192 key_mgmt). Tested on Armbian 26.8.1 (Armbian_26.8.1_Radxa-zero3_trixie_vendor_6.1.115_minimal.img.xz). More information in the attachment. Wiphy phy0 wiphy index: 0 max # scan SSIDs: 3 max scan IEs length: 200 bytes max # sched scan SSIDs: 0 max # match sets: 0 Retry short limit: 7 Retry long limit: 4 Coverage class: 0 (up to 0m) Device supports RSN-IBSS. Device supports AP-side u-APSD. Supported Ciphers: * WEP40 (00-0f-ac:1) * WEP104 (00-0f-ac:5) * TKIP (00-0f-ac:2) * CCMP-128 (00-0f-ac:4) * CMAC (00-0f-ac:6) * WPI-SMS4 (00-14-72:1) Available Antennas: TX 0 RX 0 Supported interface modes: * managed * AP * AP/VLAN * monitor * mesh point * P2P-client * P2P-GO * P2P-device … get_capability eap: MD5 TLS WFA-UNAUTH-TLS MSCHAPV2 PEAP TTLS GTC OTP SIM LEAP PSK AKA AKA' FAST PAX SAKE GPSK WSC IKEV2 TNC PWD EKE get_capability pairwise: CCMP TKIP get_capability group: CCMP TKIP WEP104 WEP40 get_capability key_mgmt: NONE IEEE8021X WPA-EAP WPA-PSK WPA-EAP-SUITE-B OWE DPP FT-PSK FT-EAP get_capability proto: RSN WPA get_capability auth_alg: OPEN SHARED LEAP SAE get_capability channels: Mode[G] Channels: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 Mode[A] Channels: 36 40 44 48 52 56 60 64 100 104 108 112 116 120 124 128 132 136 140 144 149 153 157 161 165 Mode[B] Channels: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 get_capability modes: AP MESH Router data, 802.11k/v and PMF supported, WPA3-SAE connection. station: mac: xx:xx:xx:xx:xx:xx ap: WifiMaster0/AccessPoint0 psm: no authenticated: yes txrate: 65 rxrate: 65 uptime: 410 txbytes: 18787 rxbytes: 27140 ht: 20 mode: 11n gi: 800 rssi: -57 mcs: 7 txss: 1 _11: k _11: v pmf: yes security: wpa3-psk radxa-zero-3w-AIC8800D80.zip

My tests: 1. Get information of the adapter capabilities with: iw phy 2. Get pairwise/group ciphers, supported key management and authentication algorithms with: for i in eap pairwise group key_mgmt proto auth_alg channels freq modes; do CAPABILITY="$(wpa_cli get_capability $i | grep -v 'Selected interface')" echo "get_capability $i:" echo "$CAPABILITY" echo done 3. Connect to WPA3-Personal Only network and check the information about connected client on the router. Caveats you should be aware of wpa_supplicant creates key_mgmt from the chip's cipher list if the chip does not return key_mgmt. It's filled from the presets and miss for example WPA-EAP-SHA256 needed for WPA3-Enterprise. Most probably it will work even if it's not listed. To detect whether key_mgmt you see is from chip or filled from the template, run wpa_supplicant ... -d | grep 'supported key_mgmt' If you don't see this string in the output, this means the key_mgmt is filled from the template.

In this topic I'll share information from Wi-Fi modules found in SBCs, and their compatibility with WPA3 standard. WPA3-Personal Only (not Transitional or Compatible) Wi-Fi 5 (ac), 6 (ax), 7 (be) on 2.4 and 5 GHz: Authentication and Key Management (AKM): WPA3-SAE with SHA256 (AKM:8, AKM:9 FT), optionally WPA3-SAE with a variable hash algorithm depending on Diffie-Hellman (DH) group SHA-256, SHA-384, or SHA-512 (AKM:24, AKM:25 FT) Key derivation methods: Hunting and Pecking (HnP) or Hash-to-Element (H2E) Pairwise cipher (PTK): CCMP-128, optionally GCMP-256, others possible but not TKIP Group data cipher (GTK): CCMP-128, optionally GCMP-256, others possible but not TKIP Group management cipher (IGTK): BIP-CMAC-128, optionally BIP-GMAC-256 Protected Management Frames (PMF/802.11w): required Wi-Fi 6 ax @ 6 GHz / Wi-Fi 7 be @ 6 GHz OR with Multi-Link Operation (MLO): Authentication and Key Management (AKM): WPA3-SAE with a variable hash algorithm depending on Diffie-Hellman (DH) group SHA-256, SHA-384, or SHA-512 (AKM:24, AKM:25 FT) Key derivation methods: Hash-to-Element (H2E) Pairwise cipher (PTK): GCMP-256 required, CCMP-128 optional, others possible but not TKIP Group data cipher (GTK): GCMP-256 required, CCMP-128 optional, others possible but not TKIP Group management cipher (IGTK): the same as non-6GHz (??) BIP-CMAC-128, optionally BIP-GMAC-256 Protected Management Frames (PMF/802.11w): required WPA3-Enterprise Only (not Transitional or Compatible) Wi-Fi 5 (ac), 6 (ax), 7 (be) on 2.4 and 5 GHz: Same as for Personal, but: Authentication and Key Management (AKM): At least WPA3 AKM:5 (IEEE 802.1X with SHA-256) Group management cipher (IGTK): BIP-CMAC-128, optionally BIP-GMAC-256, additional optional BIP-CMAC-256 and BIP-GMAC-128 Wi-Fi 6 ax @ 6 GHz / Wi-Fi 7 be @ 6 GHz OR with Multi-Link Operation (MLO): Same additional Key Deviation and GCMP constrains as for Personal. WPA3-Enterprise 192-bit mode Same as for Personal + Enterprise, but: Authentication and Key Management (AKM): only WPA3 AKM:12 (Suite B 192b, IEEE 802.1X with SHA-384). WPA-EAP-SUITE-B-192 in key_mgmt output. Pairwise cipher (PTK): GCMP-256 only Group data cipher (GTK): GCMP-256 mandatory, others optional Group management cipher (IGTK): BIP-GMAC-256 mandatory, others optional Source: https://www.wi-fi.org/system/files/WPA3 Specification v3.5.pdf

The easiest would be to use UART. You can configure Wi-Fi with netplan as a file in /etc/netplan/: https://docs.armbian.com/User-Guide_Networking/#connecting-to-wifi-network