What disadvantage does EAP-TLS have when compared with PEAPvO EAP/MSCHAPv2 as an 802. 11 WLAN security solution?

A.
EAP-TLS requires a PKI to create X509 certificates for both the server and client, which increases administrative overhead.

B.
EAP-TLS does not use SSL to establish a secure tunnel for internal EAP authentication.

C.
Fast/secure roaming in an 802 11 RSN is significantly longer when EAP-TLS is use.

D.
EAP-TLS does not protect the client’s username and password in side an encrypted tunnel.

E.
Though more secure EAP-TLS is not widely supported by wireless infrastructure or client vendors.

F.
Initially mobility authentication with EAP-TLS is significantly longer due to X509 certificate verification.

Explanation:
EAP – TLS requires the use of client – side certifi cates in addition to a server certifi cate.The biggest factor when deciding to implement EAP – TLS is whether an enterprise PKI infrastructure is already in place. This would usually, and optimally, include separate servers in a high – availability server cluster.