Generating Dynamic PSKs

The process of creating unique passphrases for individual users or devices to securely access a WLAN. These keys are generated by SmartZone and can be associated with specific policies such as VLAN assignment, access roles, and usage limits, providing enhanced security and control compared to a shared PSK.
Before generating Dynamic PSKs (DPSKs), ensure that SmartZone is properly deployed and reachable, and that the required WLAN is already created and configured for DPSK/DPSK3 operation.
To generate DPSKs, perform the following -
  1. From the main menu, go to Security > Access Control > Dynamic PSK.
    This displays the Dynamic PSK page.
  2. Select a Zone from the system tree and click Generate DPSKs.
    This displays Generate DPSKs window.
  3. In the Generate DPSKs window, enter the following -
    • DPSK Enabled WLAN - Refers to the wireless network that is configured to use Dynamic Pre-Shared Keys (DPSKs) for client authentication instead of a single shared passphrase. Select a DPSK-enabled WLAN from the drop-down list.
    • Number of DPSKs - Enter the number of DPSKs to be created in a zone. A maximum of 500 Unbound or Group DPSKs can be created in one form submission.
    • User Name - Enter a user name to associate a Dynamic Pre-Shared Key (passphrase) with a specific user, making it easier to identify, manage, and track access. Alternatively, leave this field blank to allow SmartZone to automatically generate a user name.
    • Passphrase - Enter a passphrase to associate with the user, or leave this field blank to allow SmartZone to automatically generate the passphrase.
    • User Role - Select a user role from the drop-down list to assign to a device connecting to the controller network using this DPSK. The assigned role determines the attributes and permissions applied, such as VLAN assignment, time restrictions, and other access policies.
    • VLAN ID - Enter a VLAN ID within the range 1 through 4094.
    • Group DPSK - Select Yes radio button to generate shared DPSK for a group of users or devices.

      Generate DPSKs

  4. Click Generate.
    The newly created DPSKs are displayed in the Dynamic DPSK page. There are three types of DPSKs:
    • Unbound DPSK (DPSK not binding to a specific device yet): Once an unbound DPSK is used by a device, it becomes a bound DPSK and releases one slot from the maximum limit of 5000.
    • Group DPSK (DPSK that can be shared between devices): A group DPSK never becomes bound; it always occupies one slot of the 5000 limit until deleted by the administrator.
    • Bound DPSK (DPSK bound to a specific device): An administrator can import bound DPSKs using a CSV file by specifying the MAC Address and create bound DPSKs regardless of the 25,000 limitation.

      Maximum DPSK per Zone

      Controller Version Max DPSK per Zone Max Unbound DPSK per Zone Max Group DPSK per Zone
      3.4.x 10000 256 X
      3.5.x 10000 256 64
      3.6.x 10000 Share 320 slots for Unbound and Group DPSKs
      5.1 25000 Share 500 slots for Unbound and Group DPSKs
      6.1.0 25000 Share 5,000 slots for Unbound and Group DPSKs
Parent topic: Dynamic PSK