Here the specifics, I have also the CA certificate chain installed on the machine1 - hidden SSID (non-broadcast)2 - The authentication protocol used is PEAP, which is a username and password protocol.3 - The username and password are passed between the client and authentication server (RADIUS) over an SSL encrypted session.4 - 3-tier CA  environment. Root (offline), intermediate (offline), and 2 issuing CA certificates (online)The actual SSL certificates on the authentication servers (RADIUS) will come from on of the 2 issuing CAs. That enables a trusted SSL session to be established to pass the username and password.5 - MS-CHAPv2 SupportMy wpa_suplicant.conf file:ctrl_interface=/var/run/wpa_supplicantctrl_interface_group=wheelap_scan=1    # This is to make sure that we get the hidden SSIDupdate_config=1network={  priority=1  mode=0  scan_ssid=1                     ssid=FILTERED  proto=RSN                # WPA2/IEEE 802.11i  key_mgmt=WPA-EAP         # WPA using EAP authentication  eap=PEAP                       group=CCMP TKIP          # CCMP AES in Counter mode with CBC-MAC  pairwise=CCMP TKIP       # TKIP = Temporal Key Integrity Protocol  #phase1=peaplabel=1  phase2=auth=MSCHAPV2  identity=FILTERED      # Identity string for EAP  password=FILTERED  ca_cert=/etc/cert/CACertChain/CA1CertChain.pem}How can I determine what failed?bssid=34:XX:XX:XX:XX:02ssid=FILTEREDid=0pairwise_cipher=CCMPgroup_cipher=TKIPkey_mgmt=WPA2/IEEE 802.1X/EAPwpa_state=ASSOCIATEDip_address=0.0.0.0Supplicant PAE state=AUTHENTICATINGsuppPortStatus=UnauthorizedEAP state=IDLE> status  bssid=34:XX:XX:XX:XX:02ssid=pmwprocid=0pairwise_cipher=CCMPgroup_cipher=TKIPkey_mgmt=WPA2/IEEE 802.1X/EAPwpa_state=ASSOCIATEDip_address=0.0.0.0Supplicant PAE state=CONNECTINGsuppPortStatus=UnauthorizedEAP state=IDLE> statusbssid=34:XX:XX:XX:XX:02ssid=FILTEREDid=0pairwise_cipher=CCMPgroup_cipher=TKIPkey_mgmt=WPA2/IEEE 802.1X/EAPwpa_state=ASSOCIATEDip_address=0.0.0.0Supplicant PAE state=CONNECTINGsuppPortStatus=UnauthorizedEAP state=IDLE> <2>CTRL-EVENT-EAP-FAILURE EAP authentication failed<1>Setting authentication timeout: 2 sec 0 usec<2>Authentication with 34:XX:XX:XX:XX:02 timed out.<1>Setting scan request: 0 sec 0 usec<2>CTRL-EVENT-DISCONNECTED - Disconnect event - remove keys
Configure wpa_supplicant.conf to Hidden SSID using WPA2 / PEAP / MS-CHAPv2
wpa supplicant;wpa