The selection based FIA_PSK_EXT.1.1 SFR makes pre-shared keys mandatory outside of the context of WPA2, however the application note implies pre-shared keys are not mandated for any protocol.

This Technical Decision supersedes TD0277.

The following changes will be made to FIA_PSK_EXT.1.1 in the PP_WLAN_AS_EP_V1.0.

1.  FIA_PSK_EXT.1 is moved to Appendix C – Selection-Based Requirements of PP_WLAN_AS_EP_1.0.

2.  FIA_PSK_EXT.1.1 is modified as follows:

FIA_PSK_EXT.1.1 The TSF shall be able to use pre-shared keys for [selection: RADIUS over TLS, IPSEC, IEEE 802.11 WPA2-PSK, [assignment: other protocols that use pre-shared keys]].

3. The first paragraph of the application note is modified as follows:

This requirement shall be included if IPsec or another protocol that uses pre-shared Keys is claimed, and pre-shared key authentication is selected. The intent of this requirement is that all protocols will support both text-based and bit-based pre-shared keys.

See issue description.