From: Lucas Raab Subject: Re: wifi protected management frame (PMF) support To: Stefan Sperling Cc: tech@openbsd.org Date: Tue, 25 Nov 2025 02:46:21 +0000 On Sat, Nov 22, 2025 at 10:45:08PM +0100, Stefan Sperling wrote: > This patch adds protected management frame support to iwm, iwx, and qwx. > Support for PMF is a prerequisite for WPA3. > > I am sending this as one giant patch for testing. I do have incremental > changes with individual commit messages which make review a bit easier. > If you would like to review these diffs individually, please ask me to > send them to you. > > Tested by me on: > iwm 7265, 9265 (offloads unicast PMF, multicast is done in software) > iwx AX200 (offloads both unicast and multicast PMF) > qwx QCNFA765 (offloads unicast PMF, multicast is done in software) > > Use of PMF is controlled by the access point, so there is nothing to > configure with ifconfig. Please check if your access point offers settings > related to management frame protection related when testing this. > Tests in any combination of PMF disabled/optional/required across a range > of access points would be welcome. Works here with a Ubiquiti U7 Pro version 8.2.17 and PMF set to optional as well as required. This is also in their WPA2/3 combo mode. iwx0 at pci6 dev 0 function 0 "Intel Wi-Fi 6 AX210" rev 0x1a, msix iwx0: hw rev 0x420, fw 77.f92b5fed.0, pnvm ce1a5094, address 04:cf:4b:21:77:a3 Similar to Landry, I see changes in the rsncap from 0x8c when optional and 0xcc to required.