Facilities changed the guest PSK on lobby APs at city hall Friday e…

Question

Facilities changed the guest PSK on lobby APs at city hall Friday evening but did not notify reception. Monday morning many visitor devices fail authentication on the guest SSID while staff Enterprise SSIDs work. What happened?

Accepted Answer

The infrastructure passphrase changed, so clients still holding the old guest PSK fail authentication until profiles are updated. — New guest key on the APs, old key still saved on phones—mass Personal-mode failures. Update visitor profiles with the communicated passphrase. Staff Enterprise working is your clue the WLAN fabric is otherwise up.

Answer

Guest PSK changes automatically push to every visitor device without profile updates.

Answer

Enterprise SSIDs failing would be expected whenever a guest PSK rotates on a different SSID.

Answer

Authentication failures after a PSK change mean every AP lost its 5 GHz radio simultaneously.

Facilities changed the guest PSK on lobby APs at city hall Friday evening but did not notify reception. Monday morning many visitor devices fail authentication on the guest SSID while staff Enterprise SSIDs work. What happened?

Short Explanation

Full Explanation