Skip to main content

Technical Guides

Deep, expert-led technical guides on guest WiFi, analytics, captive portals, and venue technology.

Ready to move from research to rollout? See how Purple's captive portal software handles branded guest sign-in, analytics, and compliance in one platform.

341 guides

The Ultimate Guide to OpenRoaming Architecture and Authentication
Security

The Ultimate Guide to OpenRoaming Architecture and Authentication

This guide provides an authoritative technical reference on WBA OpenRoaming architecture, covering the Passpoint foundation, RADIUS federation, RadSec mTLS security, and step-by-step deployment guidance for enterprise venues. It equips IT managers, network architects, and venue operators with the knowledge to replace captive portals with seamless, secure, and compliant WiFi connectivity that delivers measurable ROI.

7 mins read2k words
Google Workspace WiFi Authentication: Chromebook and LDAP Integration
Enterprise WiFi Security

Google Workspace WiFi Authentication: Chromebook and LDAP Integration

A definitive technical reference for IT administrators deploying secure WiFi in Google Workspace environments. This guide covers 802.1X certificate deployment to managed Chromebooks via Google Admin Console, Google Secure LDAP integration as a RADIUS backend, and architecture decisions for education, media, and enterprise venues. It provides actionable implementation steps, real-world case studies, and a direct comparison of EAP methods to help teams move from vulnerable shared PSKs to robust, identity-based network access control.

8 mins read2k words
RADIUS Accounting: Tracking Sessions, Usage, and Audit Logs
Analytics

RADIUS Accounting: Tracking Sessions, Usage, and Audit Logs

This guide provides a comprehensive technical reference on RADIUS accounting - how it records WiFi session start, stop, and interim-update data, what attributes are captured, and how to leverage that data for security auditing, GDPR compliance, and capacity planning. It is essential reading for network operations and security teams who need defensible audit trails from WiFi authentication events, and for venue operators seeking to integrate session data into SIEM platforms and analytics dashboards.

9 mins read2k words
How Passpoint (Hotspot 2.0) Transforms the Guest WiFi Experience
Captive Portals

How Passpoint (Hotspot 2.0) Transforms the Guest WiFi Experience

A comprehensive technical reference guide detailing how Passpoint (Hotspot 2.0) and 802.11u protocols replace traditional captive portals with seamless, secure, cellular-like WiFi roaming. It provides IT leaders with architectural overviews, implementation frameworks, and the business case for adopting credential-based authentication to solve MAC randomisation challenges and improve guest experience.

6 mins read1k words
The Future of Seamless Connectivity: Passpoint and OpenRoaming Explained
Network Design

The Future of Seamless Connectivity: Passpoint and OpenRoaming Explained

This technical reference guide provides actionable insights for IT leaders on transitioning from traditional captive portals to Passpoint and OpenRoaming. It details the underlying IEEE 802.11u and WPA3 standards, secure authentication flows, and real-world deployment strategies to improve seamless connectivity, enhance security, and drive measurable ROI in enterprise venues.

5 mins read1k words
Dynamic VLAN Assignment with RADIUS: Segmenting Users by Role
Network Design

Dynamic VLAN Assignment with RADIUS: Segmenting Users by Role

This guide provides a comprehensive technical overview of implementing dynamic VLAN assignment using RADIUS attributes. It details how enterprise venues can automate network segmentation for staff, guests, and IoT devices to enhance security and reduce manual configuration overhead.

5 mins read1k words
OCSP and Certificate Revocation for WiFi Authentication
Security

OCSP and Certificate Revocation for WiFi Authentication

This comprehensive guide explores the critical mechanisms of certificate revocation in enterprise WiFi environments, focusing on the transition from CRLs to OCSP. It provides actionable implementation strategies for IT teams managing large-scale, high-density networks where real-time security and low latency are paramount.

6 mins read1k words
Device Posture Assessment for Network Access Control
Security

Device Posture Assessment for Network Access Control

This technical guide explains how device posture assessment works for Network Access Control (NAC), detailing the architecture, MDM integration, and remediation flows required to implement Zero Trust WiFi in enterprise and venue environments.

8 mins read2k words
802.1X Authentication: Securing Network Access on Modern Devices
Authentication

802.1X Authentication: Securing Network Access on Modern Devices

This guide provides a comprehensive, actionable overview of IEEE 802.1X authentication for senior IT professionals and network architects. It details the critical steps for securing network access across diverse enterprise environments, focusing on practical, vendor-neutral deployment guidance to mitigate risk, ensure compliance, and deliver a seamless, secure user experience.

7 mins read2k words
Securing Networks with WiFi 7: A Technical Deep Dive
WiFi Standards

Securing Networks with WiFi 7: A Technical Deep Dive

This guide provides a comprehensive technical reference on WiFi 7 security features for enterprise IT teams, covering the mandatory enforcement of WPA3 encryption, the security implications of Multi-Link Operation (MLO), and the practical challenges of supporting legacy devices during migration. It equips network architects, IT managers, and CTOs at hotels, retail chains, stadiums, and public-sector organisations with actionable deployment strategies, compliance guidance aligned to PCI DSS and GDPR, and real-world case studies with measurable outcomes. Understanding these changes is critical for any organisation planning a wireless infrastructure upgrade this year, as WiFi 7 represents a fundamental shift in the security baseline for enterprise wireless networks.

10 mins read2k words
dotdigital (formerly Dotmailer): Integration Guide, Best Practices, and Troubleshooting for Purple AI Users
Integrations

dotdigital (formerly Dotmailer): Integration Guide, Best Practices, and Troubleshooting for Purple AI Users

This guide provides Purple AI users - particularly IT managers, network architects, and CTOs at hotels, retail chains, stadiums, and conference centres - with a definitive technical reference for deploying and optimising the dotdigital (formerly Dotmailer) connector. It covers the end-to-end integration architecture, step-by-step configuration, GDPR-compliant data handling, automation programme design, and a structured troubleshooting framework. Organisations that implement this integration correctly convert guest WiFi logins into a high-value, consent-gated marketing database that drives measurable revenue outcomes.

11 mins read3k words
MDU Login: Simplifying WiFi Access in Multi-Dwelling Units
Network Design

MDU Login: Simplifying WiFi Access in Multi-Dwelling Units

This technical reference guide provides IT managers, network architects, and CTOs with a definitive framework for deploying and managing WiFi access in Multi-Dwelling Units (MDUs), covering the trade-offs between shared PSK, WPA3-Enterprise 802.1X, and Identity PSK (iPSK) authentication models. It addresses the core operational challenges of RF interference, security segmentation, and resident lifecycle management, and demonstrates how a managed WiFi platform such as Purple transforms connectivity from a cost centre into a measurable revenue asset. Drawing on real-world deployment scenarios and referencing standards including IEEE 802.1X, WPA3, GDPR, and PCI DSS, the guide equips venue operators with the architecture, implementation steps, and ROI metrics needed to make an informed investment decision this quarter.

10 mins read2k words
Hardening RADIUS against MD5 collision attacks (BlastRADIUS)
Authentication

Hardening RADIUS against MD5 collision attacks (BlastRADIUS)

Mitigate CVE-2024-3596 BlastRADIUS attacks. Enforce RADIUS Message-Authenticator, patch FreeRADIUS & Cisco ISE, and migrate to 802.1X EAP-TLS.

8 mins read1k words
The definitive timeline of WiFi: from ALOHAnet to WiFi 7 and beyond
WiFi Standards

The definitive timeline of WiFi: from ALOHAnet to WiFi 7 and beyond

Trace the complete history of WiFi standards from 1971 ALOHAnet through 802.11 iterations to WiFi 7 and WiFi 8. A strategic planning guide for IT leaders and venue operators.

7 mins read2k words
Staff WiFi security guide: 802.1X, WPA3 & RADIUS access
Network Design

Staff WiFi security guide: 802.1X, WPA3 & RADIUS access

Technical reference for IT leaders on designing secure staff WiFi networks with 802.1X authentication, WPA3-Enterprise, cloud RADIUS, and network segmentation.

7 mins read2k words
MAC address randomization: Enterprise WiFi impact & guide
Security

MAC address randomization: Enterprise WiFi impact & guide

Understand how iOS, Android & Windows MAC address randomization impacts enterprise WiFi analytics and security. Learn identity-first 802.1X & guest access strategies.

8 mins read2k words
Passpoint (Hotspot 2.0): A Comprehensive Guide to Secure and Seamless WiFi Roaming
Authentication

Passpoint (Hotspot 2.0): A Comprehensive Guide to Secure and Seamless WiFi Roaming

This guide provides a comprehensive technical overview of Passpoint (Hotspot 2.0) for IT leaders and network architects, covering the IEEE 802.11u standard, GAS/ANQP discovery protocols, WPA3-Enterprise security, and the WBA OpenRoaming federation. It delivers a vendor-neutral implementation framework with phased deployment guidance, real-world case studies from hospitality and retail, and a clear analysis of the ROI and compliance benefits for enterprise venue operators.

8 mins read2k words
Guest WiFi: The Ultimate Guide for Businesses to Enhance Customer Experience and Gather Valuable Data
Captive Portals

Guest WiFi: The Ultimate Guide for Businesses to Enhance Customer Experience and Gather Valuable Data

This guide is the definitive technical reference for IT leaders and venue operators on deploying enterprise-grade guest WiFi. It provides actionable guidance on network architecture, security, and data analytics to transform guest WiFi from a cost centre into a powerful tool for enhancing customer experience and driving business intelligence.

7 mins read2k words
Purple AI: The Definitive Guide to Our WiFi Analytics and Guest WiFi Management Platform
Analytics

Purple AI: The Definitive Guide to Our WiFi Analytics and Guest WiFi Management Platform

Discover how Purple AI transforms guest WiFi into real-time footfall analytics, dwell time metrics, and captive portal lead generation. Read the guide.

5 mins read1k words
Fix Windows 11 802.1X & Internet Connectivity Issues Post-Upgrade
Hardware

Fix Windows 11 802.1X & Internet Connectivity Issues Post-Upgrade

Fix Windows 11 802.1X wired and wireless network authentication failures post-upgrade. Detailed troubleshooting for wiped dot3svc profiles, Intune SCEP certificate validation errors, Credential Guard MSCHAPv2 issues, and GPO policies.

7 mins read2k words
Measuring WiFi Network Performance: Key Metrics for IT Teams
Analytics

Measuring WiFi Network Performance: Key Metrics for IT Teams

A comprehensive technical reference for IT managers and network architects on the key metrics for measuring and benchmarking enterprise WiFi network performance. This guide provides actionable insights into interpreting performance data to optimise user experience and achieve business objectives in large-scale venues.

8 mins read2k words
Estimote Beacons: A Comprehensive Guide to Setup, Configuration, and Use Cases
Hardware

Estimote Beacons: A Comprehensive Guide to Setup, Configuration, and Use Cases

This guide provides a comprehensive technical reference for IT managers and network architects on deploying Estimote beacons. It covers setup, configuration, and advanced use cases like wayfinding, proximity marketing, and asset tracking, offering actionable guidance for achieving measurable ROI in enterprise environments.

6 mins read1k words
Band Steering and Load Balancing for High-Density WiFi
Network Design

Band Steering and Load Balancing for High-Density WiFi

This authoritative technical reference equips IT managers, network architects, and venue operations directors with the knowledge to design, configure, and optimise high-density WiFi networks using band steering and load balancing. It covers the architectural principles behind 2.4 GHz vs. 5 GHz band selection, AP load distribution strategies, and vendor-neutral configuration best practices for demanding environments such as stadiums, hotels, and conference centres. By applying these strategies, organisations can measurably improve wireless throughput, reduce user complaints, and transform their network infrastructure into a strategic business asset.

10 mins read2k words
DHCP and DNS Fundamentals for WiFi Network Administrators
WiFi Standards

DHCP and DNS Fundamentals for WiFi Network Administrators

An authoritative technical reference for IT leaders and network administrators on the critical roles of DHCP and DNS in enterprise WiFi deployments. This guide provides practical, vendor-neutral guidance for designing, implementing, and troubleshooting robust network services in hospitality, retail, and large-venue environments.

6 mins read1k words