Facilities proposes one shared PSK for all yard tablets because roaming is simple. What security tradeoff must leadership accept?

Using a single shared Pre-Shared Key (PSK) across all yard tablets simplifies roaming by allowing devices to authenticate seamlessly without needing individual credentials. However, this convenience introduces a significant security tradeoff: the PSK acts as a global shared secret. If this key is compromised—whether through external attack, insider sharing, or accidental disclosure—all devices using that PSK become vulnerable simultaneously. An attacker with the PSK can impersonate any device, decrypt traffic, or gain unauthorized network access, undermining the entire WLAN's security. The incorrect ideas include assuming each tablet receives a unique enterprise certificate, which is false because a shared PSK does not provide individual certificates or identities; it is a single password shared by all. Another misconception is equating a shared PSK with WPA3-Enterprise 192-bit mode, which is incorrect because WPA3-Enterprise uses 802.1X authentication and stronger cryptographic methods, whereas a shared PSK is a simpler, less secure approach. Finally, believing that a shared PSK prevents eavesdropping even if the passphrase leaks is wrong; once the PSK is known, attackers can decrypt traffic and intercept data. The key operational caveat is that while a shared PSK eases management and roaming, it significantly weakens security posture and is unsuitable for sensitive municipal environments where device compromise risk is high. To verify understanding, consider if one tablet’s PSK is exposed: can an attacker access other tablets’ communications? Yes, because the PSK is common to all devices, confirming the shared secret’s vulnerability.