Per 802.11 Standard, section 13.8.2 FT Auth sequence: contents of first message: If present, the RSNE shall be set as follows: Version field shall be set to 1. PMKID Count field shall be set to 1. PMKID List field shall contain the PMKROName. Multiple PMKIDs are allowed in certain situations. However, if I am understanding the standard correctly, this does not seem to be one though, and the supplicant is passing two PMKIDs. Have you seen this issue with any device that is not running Windows? What about Windows with a non-Intel driver? ... View more

Hi @RaphaelL, Do you know if you were experiencing MIC failures in an 802.11r SSID while having PMK caching disabled on the Windows clients? Could you please check in your monitor mode captures if the MIC failures occur when STAs include two PMKIDs in their message 2? You can check it on EAPOL Message 2 under 802.1X Auth > WPA Key data > RSN info > PMKID Count/List Lastly, if you have an open case with Support, could you please provide a working capture to Meraki Support showcasing multiple successful roams in r28 for comparison? Sorry for the inconvenience, and thanks! ... View more