System and techniques for secure wireless association are described herein. A station (STA) may transmit a probe request for the wireless network that includes identification of a certificate. An access point (AP) receiving the probe request may obtain the identified certificate and use the certificate to encrypt a key. The encrypted key may then be included in a beacon by the AP. The STA may then obtain the encrypted key from the beacon, decrypt the key with the certificate, and then use the key to associate to the wireless network via the AP.