Private Pre-Shared Key: Simplified Authentication

Organizations that are planning wireless LAN’s to support corporate devices, BYOD, guest access, may be struggling to find the balance between flexibility and security. Though using IEEE 802.1X is the most secure approach to Wi-Fi authentication, this method is typically only implemented for devices managed by IT. For BYOD, contractors, or guests, the IT staff may not have the access, time, or knowledge to provision certain devices.

1. Configure Private PSK on Guest SSID to the below.

2. Specify the PSK User groups
   1. You will have to create them based on daily/weekly/monthly rotation
   2. See below for details

Note: you have to use the profile attribute as your guest user profile in this instance, it is 2.

1. Hit Save and view your Local PPSK User groups.

1. If you Browse to Configuration> Authentication> Local Users you will see all the pre-generated user keys.

2. Create a user account with guest user account and password rights.
   1. Goto Home> administrators > administrators
   2. Create new
   3. Give a username/email and password
   4. Assign to the User Manager Operator group.

3. Configure email service on Hive manager.
   1. Goto Home>Hivemanager Services> check the Email Service settings
   2. Specifiy the smtp server as 127.0.0.1
   3. Specify a from email address
   4. Click update.

4. Log in as the User who will be distributing the guest credentials
   1. Login to the myhive.aerohive.com portal as the new account
   2. Click create
   3. Enter details and you will have your user specific guest account details, which you can send to them.