Determining WPA2 Capability
The operating system determines whether an 802.11 miniport driver supports WPA2 by querying the driver with OID_802_11_CAPABILITY. To be considered WPA2-capable, the driver must return the following values in the NDIS_802_11_CAPABILITY structure:
NoOfPMKIDs must have a value from 3 through 16.
NoOfAuthEncryptPairsSupported must be greater than 0.
AuthenticationEncryptionSupported must have values that show support for encryption mode Encryption3. These entries must also show support for authentication modes Ndis802_11AuthModeWPA2 and Ndis802_11AuthModeWPA2PSK.
If the driver returns NDIS_STATUS_SUCCESS to the query and returns the correct data in the NDIS_802_11_CAPABILITY structure, then the operating system considers the driver to be WPA2-capable. The driver can then expect to receive set and query requests for the WPA2-required 802.11 OIDs.
If the driver does not return NDIS_STATUS_SUCCESS in response to the query or does not return the correct data in the NDIS_802_11_CAPABILITY structure, then the operating system tests the driver for WPA support as described in Determining WPA Capability.