I've turned off the Guest Network joining and set up a new WLAN Hotspot.
for joining and getting a DPSK... Turn off the Apple CNA feature for Hotspot.
Then, all my students get is the nasty Certificate Error, which I have no way of fixing that I can find.
Cheers
Martin