Adding a DPSK Service

Adding a DPSK service strengthens Wi-Fi security by giving each user a unique passphrase, simplifies access control, supports scalability, and enables better tracking while ensuring smooth onboarding and centralized management.

  • DPSK service configuration requires an associated Identity Group. You can select an existing Identity Group or add an Identity Group during the DPSK service configuration.
  • Users assigned the system-defined DPSK Manager administrator role can create and manage DPSK services but cannot create Identity Groups. Identity Groups must be created by a user with RBAC permissions for Wi-Fi Client Identity Management (such as a user assigned the Administrator or Prime Admin role).
Complete the following steps to add a DPSK service:
  1. Add the DPSK service to your tenant account. From the navigation bar, select Network Control > Service Catalog.
  2. Complete the Settings in the Add DPSK page .
    The Add DPSK page for selected service is displayed.
    Add DPSK
  3. Enter a name in the Service Name field.
  4. Select one of the following options from the Passphrase Format drop-down list:
    • Most Secured (default): Uses all printable ASCII characters.
    • Keyboard Friendly: Uses only letters and numbers.
    • Numbers Only: Uses only numeric characters.
    • Dictionary Words: Uses dictionary words to generate the passphrase.
  5. Enter the number of dictionary words in the Word Count field.
    The Word Count field is displayed only when Dictionary Words is selected as the passphrase format. The valid range is 3 to 6.
  6. Toggle the Numeric Suffix switch on or off.
    The Numeric Suffix option is displayed only when Dictionary Words is selected as the passphrase format.
    • Toggle the switch on to append a numeric suffix to the generated passphrase.
    • Toggle the switch off to generate a passphrase that contains only dictionary words.
  7. Enter the passphrase length in the Passphrase Length field.

    The Passphrase Length field is displayed only when Most Secured, Keyboard Friendly, or Numbers Only is selected as the passphrase format.

    The default value is 18. You can specify a value from 8 to 63 characters.

  8. Configure the Expiration setting by selecting one of the following options:
    • Never expires (default): Keeps the credentials valid indefinitely.
    • By date: Expires the credentials on a specified date.
    • After: Expires the credentials after a specified interval. Select Hours, Days, Weeks, Months, or Years.
  9. Configure Devices Allowed per Passphrase by selecting one of the following options:
    • Unlimited (default): Allows an unlimited number of devices to use the passphrase.
    • Limited to: Restricts the number of devices. Specify a value from 1 to 512.
  10. Select one or more Identity Groups from the drop-down, or click Add to create a new Identity Group. Refer to Adding an Identity Group for more information.
    Note: You can associate up to five identity groups with a single DPSK service.
    Note: For DPSK services created before an Identity Group became mandatory, the system automatically created and associated an Identity Group with the DPSK service. When devices connect, identities are automatically created within that group.
  11. (Optional) Toggle the Auto‑send DPSK info switch on to automatically send DPSK credentials to users by email or SMS whenever a DPSK service type is created, updated, or deleted. The toggle is disabled by default. When disabled, automatic notifications are not sent. Administrators can manually send or resend notifications.
    Note: Review the following notification behavior when a passphrase contains a saved email address or phone number:
    • Creation: Sends the newly generated DPSK details.
    • Update: Sends the updated passphrase only if the passphrase value changes.
    • Deletion: Sends a confirmation that the passphrase has been removed.
    Note: Review the following notification limitations:
    • The setting applies at the DPSK pool level, covering all passphrases in that pool.
    • If a DPSK pool is not bound to a WLAN, notifications are not sent, even when Auto-send DPSK info is enabled.
    • When creating multiple passphrases at once, automatic notifications are disabled.

      To notify users individually, import passphrases with per-passphrase contact details.

    • When deleting several passphrases that share the same contact, the system sends only one email and one SMS to prevent repeated alerts.
    • SMS messages are sent only when the passphrase contains a valid phone number.
    • Ensure that the SMS provider is configured in Administration > Settings.
  12. (Optional) Select the communication template used for automatic DPSK notifications from the Communication Template drop-down list. The following options are available:
    • Default Template: Sends the standard DPSK notification.
    • Default Template - Email with QR Code: Sends the DPSK notification with a QR code included in the email notification.
    1. Click Preview to view the selected communication template.
      The preview dialog box contains the following tabs:
      • Email: Displays the email notification format.
      • SMS: Displays the text message format.
  13. (Optional) Select an existing Adaptive Policy Set from the drop-down list or click Add to create an adaptive policy set. Refer to Creating an Adaptive Policy for more details.
  14. Click Add.