Okay, that implies it's PSK only, so no certs and hence no TLS. ... View more

Thanks again.  If there is a certificate involved, then there must be some TLS/SSL stack, and hence the partner question if it's TLS 1.2 with SHA-2 support.  ... View more

Thanks Phil, so the security protection for the autoVPN is only pre-shared key? Meraki does not support PKI to protect the tunnel?  I think the partner is asking in the case of certificates/PKI being used to protect the VPN, not pre-shared key.  If only pre-shared key is supported then that answers it.  Thanks again. ... View more

Ah, yes. It's more than encryption as the AP needs to authenticate and hence needs a client identity cert.  Okay, well let's see if anyone has visibility into what signing algorithm is used on the AP certificate.  ... View more

Thanks Phil, That really helps. I'd guess there is only a server cert in this flow of encrypting traffic between AP and controller.  If anyone on the community knows otherwise and there is a client cert on the AP, it would be good to know what signing hash algorithm was used on the AP client cert as well.    ... View more