Smallstep Wi-Fi is an enterprise wireless network security solution that uses certificate-based authentication to secure Wi-Fi access. It implements EAP-TLS (Extensible Authentication Protocol - Transport Layer Security) to mutually authenticate devices attempting to join a network, replacing traditional username/password authentication. The solution supports WPA2-Enterprise and WPA3-Enterprise standards, including WPA3 192-bit mode. It provides a fully-managed Certificate Authority (CA) and RADIUS server to enable certificate-based Wi-Fi deployments across multiple operating systems including macOS, iOS, Windows, Linux, and ChromeOS. By relying on device certificates rather than credentials, the system mitigates common wireless attacks such as MAC spoofing, traffic sniffing, credential sniffing, and evil twin network attacks. Certificate-based authentication also reduces Wi-Fi join times and improves roaming performance compared to credential-based methods. Device enrollment is handled through integration with Mobile Device Management (MDM) platforms, supporting both corporate-managed devices and BYOD scenarios. Certificates and Wi-Fi configurations are centrally managed, enabling zero-touch provisioning for managed devices. The platform uses SCEP and ACME DA protocols for certificate issuance. The solution is positioned to enforce device identity as a network access control point, ensuring only trusted, authorized devices can reach internal network resources, including locally-running AI systems and services.