itlwm 2.4.0 + HeliPort 2.0.0 with WPA2-Enterprise (unofficial, eap2)

Unofficial build of itlwm + HeliPort with WPA2-Enterprise (PEAP/MSCHAPv2)
support, from the open PRs OpenIntelWireless#1075 (with OpenIntelWireless#1074) and OpenIntelWireless/HeliPort#288.
Not affiliated with or endorsed by the OpenIntelWireless maintainers.

Downloads

File	What
itlwm-v2.4.0-eap2.zip	itlwm.kext (Release build)
HeliPort-v2.0.0-eap2.zip	HeliPort.app (ad-hoc signed, not notarized)
SHA256SUMS.txt	checksums

Source: the wpa2-enterprise branches of dantdmdarealguy/itlwm and dantdmdarealguy/HeliPort
(GPLv2 / BSD-3-Clause; hostap code BSD).

Changes since eap1

• itlwm: PMK installation and enterprise association run on the driver's work
  loop; the EAPOL hook is enabled only after a successful start and routed per
  adapter; fragmented EAP frames are handled; enterprise association is WPA2 only.
• HeliPort: a changed server certificate is now reported as such; forgetting a
  network removes its pinned certificate; the PMK buffer is wiped reliably.

Requirements

• itlwm (not AirportItlwm), any macOS version itlwm supports.
• Use both downloads together — the HeliPort build needs this itlwm, and stock
  HeliPort can't use the new features.

Install

1. Replace itlwm.kext in your OpenCore EFI/OC/Kexts (keep a copy of your current
   one), reboot.
2. Unzip HeliPort.app into /Applications. It isn't notarized, so macOS blocks
   the first launch. Either:
   • run xattr -dr com.apple.quarantine /Applications/HeliPort.app, or
   • try to open it, then click Open Anyway in System Settings → Privacy &
     Security.
3. Pick your enterprise network in HeliPort, enter username and password, and check
   the certificate it shows you before clicking Trust.

Verify the download

shasum -a 256 -c SHA256SUMS.txt in the download folder.

ef88e60da27617de57a0606d69ed625bf7645f3e48e3175f8e8041a60416dca5  itlwm-v2.4.0-eap2.zip
168c0148b93a056e4163a37dbf761675e2b3a08dbc52535712e46b8290c1785b  HeliPort-v2.0.0-eap2.zip

Known limitations

• PEAP/MSCHAPv2 only, and WPA2-Enterprise only.
• Tested on one university network (Texas A&M) with an Intel AC 9560.
• On periodic reauthentication, expect a connectivity blip of about 1–2 s.
• Personal and open networks work as with stock itlwm/HeliPort.

Please report what works and what doesn't on OpenIntelWireless/HeliPort#4.

Going back

Put your previous itlwm.kext back in EFI/OC/Kexts, and reinstall stock HeliPort.

itlwm 2.4.0 + HeliPort 2.0.0 with WPA2-Enterprise (unofficial, eap1)

Superseded by v2.4.0-eap2, which fixes issues found in review. Please use that one.