Do you mean WPA3 personal (WPA3-SAE)? WPA3 enterprise is less restrictive and should work with older Wi-Fi cards.
Assuming card on Apalis is using Marvell driver like on Colibri iMX6ULL Wi-Fi, just PCIE instead of SDIO, here’s Ciphers of Marvell driver, which doesn’t support WPA3 (SAE / personal):
iw phy | grep -A15 Ciphers
Supported Ciphers:
* WEP40 (00-0f-ac:1)
* WEP104 (00-0f-ac:5)
* TKIP (00-0f-ac:2)
* CCMP-128 (00-0f-ac:4)
* WPI-SMS4 (00-14-72:1)
* CMAC (00-0f-ac:6)
And here’s Ciphers of NXP driver for the same card, which supports WPA3:
~# iw phy | grep -A15 Ciphers
Supported Ciphers:
* WEP40 (00-0f-ac:1)
* WEP104 (00-0f-ac:5)
* TKIP (00-0f-ac:2)
* CCMP-128 (00-0f-ac:4)
* WPI-SMS4 (00-14-72:1)
* CMAC (00-0f-ac:6)
* GMAC-256 (00-0f-ac:12)
* GCMP-128 (00-0f-ac:8)
* GCMP-256 (00-0f-ac:9)
* CCMP-256 (00-0f-ac:10)
Notice missing 00-0f-ac:8.
Additionally you need support from software side. wpa_supplicant and hostapd in Yocto are configured with disabled WPA3 support. You would need to enable it. Don’t know about connman or networkmanager, perhaps they as well may miss WPA3 support, I’m not using them.
See older threads, you may find there how to enable WPA3 support:
https://community.toradex.com/t/colibri-imx6ull-which-kernel-driver-version-for-wpa3/12881
https://community.toradex.com/t/does-colibri-imx6ull-support-wpa3/12521