diff --git a/snippets/wifi/wifi-enterprise/wifi-enterprise-nrf.conf b/snippets/wifi/wifi-enterprise/wifi-enterprise-nrf.conf
index d66e7ceeadb8..ad422fbd06ff 100644
--- a/snippets/wifi/wifi-enterprise/wifi-enterprise-nrf.conf
+++ b/snippets/wifi/wifi-enterprise/wifi-enterprise-nrf.conf
@@ -1,5 +1,8 @@
-# For TLS and X.509 processing MbedTLS needs large heap size and using separate heap
-# for MbedTLS gives us more control over the heap size.
-CONFIG_MBEDTLS_HEAP_SIZE=75000
+# Enterprise uses the legacy HostAP mbedtls alt backend (not ALT_PSA).
+CONFIG_HOSTAP_CRYPTO_ALT_LEGACY_PSA=y
+
+# nRF5340 app RAM is 448 KiB; trim heaps vs wifi-enterprise.conf (100000 / 70000).
+CONFIG_NRF_WIFI_DATA_HEAP_SIZE=28672
+CONFIG_MBEDTLS_HEAP_SIZE=70000
 CONFIG_WIFI_CREDENTIALS_RUNTIME_CERTIFICATES=y
 CONFIG_WIFI_SHELL_RUNTIME_CERTIFICATES=y