For devices that do not support 802.1X authentication, which MPSK approach automatically provides unique pre-shared keys for devices?

For devices that do not support 802.1X authentication, which MPSK approach automatically provides unique pre-shared keys for devices?

• A. Have the installers generate keys with ClearPass Self Service Registration.
• B. Have the MPSK gateway derive the unique-shared keys based on the MAC OUI.
• C. Use MPSK Local to automatically provide unique pre-shared keys for devices.
• D. MPSK Local will allow the cameras to share a key and the scanners to share a different key.

Answer: (C)

When devices can’t use 802.1X, you still want each device to have its own credential rather than sharing one key. MPSK Local handles this by automatically generating and provisioning a unique pre-shared key for every device on the local controller. This means each device authenticates with its own secret, without needing an external server or manual input, which improves security and simplifies setup. The other options rely on external systems, predictable derivation from vendor identifiers, or describe group-level keys rather than per-device uniqueness, so they don’t provide the same automatic per-device PSK provisioning that MPSK Local offers.

When devices can’t use 802.1X, you still want each device to have its own credential rather than sharing one key. MPSK Local handles this by automatically generating and provisioning a unique pre-shared key for every device on the local controller. This means each device authenticates with its own secret, without needing an external server or manual input, which improves security and simplifies setup.

The other options rely on external systems, predictable derivation from vendor identifiers, or describe group-level keys rather than per-device uniqueness, so they don’t provide the same automatic per-device PSK provisioning that MPSK Local offers.