---
title: isTLSClientCertificateRequired
framework: networkextension
role: symbol
role_heading: Instance Property
path: networkextension/nehotspoteapsettings/istlsclientcertificaterequired
---

# isTLSClientCertificateRequired

A Boolean value indicating whether a network requires two-factor authentication or allows zero-factor authentication.

## Declaration

```swift
var isTLSClientCertificateRequired: Bool { get set }
```

## Return Value

Return Value If true, the Wi-Fi network requires two-factor authentication for EAP-TTLS, PEAP and EAP-FAST. If false, the network requires zero-factor authentication for EAP-TLS. The default values are true if the EAP type is EAP-TLS and false for other EAP types.

## Discussion

Discussion Optional. EAP Transport Layer Security (EAP-TLS) is an IETF open security standard that requires a client certificate in addition to a password (two-factor authentication). If an EAP-TTLS, PEAP or EAP-FAST network requires two-factor authentication then a client identity must be configured. If isTLSClientCertificateRequired returns false, a client identity need not be configured. If isTLSClientCertificateRequired returns true, your app must set the client identity by using setIdentity(_:).

## See Also

### Accessing EAP properties

- [trustedServerNames](networkextension/nehotspoteapsettings/trustedservernames.md)
- [supportedEAPTypes](networkextension/nehotspoteapsettings/supportedeaptypes.md)
- [NEHotspotEAPSettings.EAPType](networkextension/nehotspoteapsettings/eaptype.md)
- [username](networkextension/nehotspoteapsettings/username.md)
- [password](networkextension/nehotspoteapsettings/password.md)
- [preferredTLSVersion](networkextension/nehotspoteapsettings/preferredtlsversion.md)
- [NEHotspotEAPSettings.TLSVersion](networkextension/nehotspoteapsettings/tlsversion.md)
- [outerIdentity](networkextension/nehotspoteapsettings/outeridentity.md)
- [ttlsInnerAuthenticationType](networkextension/nehotspoteapsettings/ttlsinnerauthenticationtype-swift.property.md)
- [NEHotspotEAPSettings.TTLSInnerAuthenticationType](networkextension/nehotspoteapsettings/ttlsinnerauthenticationtype-swift.enum.md)