two form of authentication to same Peer

[owen2]

Router 1101 is it possible to set two form authentication PSK and Certification to the same peer?

Existing is using PSK, intend to upgrade to Certification for better security.

Keeping PSK as a form of backend authentication 

[balaji.bandi]

This is Good question ( never come across this requirement) - since risk is bit high interms of failure of same device can bring down both the authentication, Technically i do not see any issue  they should work independently, this need to be tested.

Please feedback your testing, let us know any issue to understand deploy model.

[owen2]

@balaji.bandi how do I priority certification as the primary and psk as secondary?

[balaji.bandi]

As i understand your requirement :   PSK and Certification (using same device)

Certificate will be predeployed in teh device, the Router act as CA server to validated.

PSK you manaully input or store when you connecting the device to SSID

But why do yo need 2 Authentication, when the Cert valid, you can go to user Login process with AD ?