A town clerk’s office uses one Wi-Fi passphrase for every inspector…

Question

A town clerk’s office uses one Wi-Fi passphrase for every inspector laptop under WPA2/WPA3-Personal. Where does that design place the pre-shared key in AKM terms, and what operational risk follows at municipal scale?

Accepted Answer

The PSK is a shared Personal-mode secret; compromise or reuse across many devices exposes the whole SSID community of trust — One passphrase for the whole clerk’s office is like one brass key for every filing cabinet in city hall—lose it once and the neighborhood is open. That’s Personal-mode PSK AKM, and it scales badly when dozens of inspectors share the secret.

Answer

The PSK is a per-session RADIUS certificate that automatically rotates after each association

Answer

The PSK is only used to encrypt management frames and never participates in unicast key derivation

Answer

The PSK is an Enterprise AKM that binds each laptop to a unique Active Directory user object

A town clerk’s office uses one Wi-Fi passphrase for every inspector laptop under WPA2/WPA3-Personal. Where does that design place the pre-shared key in AKM terms, and what operational risk follows at municipal scale?

Short Explanation

Full Explanation