Cambium ePSK
How to Manage Hundreds of Personal PSKs
Cambium ePSK gives every user a unique pre-shared key on the same SSID (up to 2,000 per SSID on cnMaestro), so no one shares a password. Managing them by hand doesn't scale. Cloud4Wi automates the full lifecycle on top of Cambium — pre-activating a resident's key for move-in day, assigning each a private VLAN/PAN, letting residents self-serve their key, and auto-deactivating it at move-out.
— ABOUT CAMBIUM EPSK
What is Cambium ePSK
ePSK gives each user a unique pre-shared key under WPA2-Personal security — so no one else knows your passphrase, making the connection more secure. The experience mimics the familiar way people connect to WiFi, but it's simpler, smarter, and more secure than one PSK shared among all users.
Cambium cnMaestro makes it easy to configure SSIDs that support multiple PSKs on the same network — up to 2,000 ePSKs on a single SSID. An ePSK can be created without being tied to a specific device's MAC address, so it works across a user's devices, and keys can be created manually from the cnMaestro interface.
— HOW IT WORKS
How to automate the Cambium ePSK lifecycle with Cloud4Wi
1
2
3
4
How do you create and pre-activate an ePSK for a new resident?
A lease manager pre-configures a future resident's WiFi service, and Cloud4Wi automatically activates the ePSK on a defined date — for example, the move-in day. No need to time the key creation manually.
How do you give each resident their own private network (VLAN/PAN)?
Cloud4Wi handles the networking configuration automatically, creating a personal area network (PAN) for each resident — without manually managing hundreds or thousands of VLANs.
How do residents view or change their ePSK without IT support?
Residents get access to a self-service portal where they can see and change their key at any time, with no IT ticket required — reducing support load on property and IT teams.
How do you block an ePSK at move-out?
The key automatically deactivates on a scheduled future date, such as the move-out day. If the resident's move-out date changes, the property manager simply adjusts the termination date.
— FAQ
Frequently asked questions
Everything you need to know about how Cloud4Wi and Cambium Networks work seamlessly
Cambium ePSK (Personal Pre-Shared Key) gives each user a unique key on the same SSID under WPA2-Personal security. Unlike one shared password, no resident knows another's passphrase, so access is private and secure. The connection experience stays familiar, but it's far more secure and manageable than a single shared PSK.
Cambium cnMaestro supports configuring multiple ePSKs on the same SSID — up to 2,000 per SSID — so a single network can serve many residents with individual keys. That capacity suits multifamily and campus deployments, though managing that many keys manually is exactly where automation becomes essential.
Each resident's key must be created and activated on move-in, assigned a dedicated VLAN for a private network, rotated if a security issue arises, and blocked at move-out. Doing this manually from the cnMaestro interface is fine for a few dozen keys, but doesn't scale across constant resident turnover.
Cloud4Wi runs on top of Cambium ePSK and automates the whole lifecycle: pre-activating a resident's key for move-in day, assigning each resident a private VLAN, providing a self-service portal to change the key, and auto-deactivating it at move-out. Property managers can adjust dates anytime, removing manual VLAN and key work.
Yes. Residents access a self-service portal where they can view and change their ePSK at any time, with no IT ticket required. This reduces the support burden on property and IT teams while giving residents instant control over their own WiFi credentials whenever they need it.
No. Cloud4Wi is hardware-independent and runs over the top of your existing Cambium network — no rip-and-replace and no firmware lock-in. It relies on Cambium's native ePSK capability in cnMaestro and adds the automation, resident self-service, and lifecycle management layer on top, so you keep your existing investment.
Ready to reimagine your WiFi?
Spin up your 30-day free trial in minutes, or book time with our team
of WiFi experts to scope an enterprise rollout.
- SOC 2 certified
- No credit card required
- GDPR & global compliance
- No rip-and-replace
© 2026 CLOUD4WI. ALL RIGHTS RESERVED.