---
title: Setup a UPSK SSID
slug: setup-a-upsk-ssid
docTags: 
createdAt: 2024-05-24T07:37:59.439Z
---

## Prerequisites

Complete the following before you create a PSK SSO SSID. Each step has its own page with detailed instructions.

- **Configure a Service Area.** Define the sites, buildings, and floors where you need Nile connectivity. See [Setup Service Areas](https://docs.nilesecure.com/setup-service-areas).
- **Configure DHCP.** Choose Nile DHCP or an external DHCP server, and define the subnets your users will use. See [Setup DHCP](https://docs.nilesecure.com/setup-dhcp).
- **Configure Segments.** Create a segment for this SSID and select a RADIUS server for each site in the segment. See [Setup Segments](https://docs.nilesecure.com/setup-segments).

### Configuration Steps

1. Log in to the Nile Portal.
2. In the left navigation, select Network Setup > Wireless, click the '+' sign, and choose the Type as Personal.
3. Configure the following:
   - **Name:** Enter the SSID name.
   - **Security:** Select WPA2. The Unique Passphrase option is available only when WPA2 is selected.
     - **Unique Passphrase:** Select the Unique Passphrase checkbox to assign a unique passphrase per user or device for the SSID.
     - **Passkey:** Enter the pre-shared key (dummy).
   - Optionally, select the **SSO** checkbox to let employees sign in through your identity provider (IdP) and generate a passphrase for their own devices.
   - Optionally, select the **Hide SSID** checkbox if you wish to hide the SSID.
   - **Segments:** Select the appropriate segment for this SSID and save your changes.
     - You can select more than one segment for a single UPSK SSID (for example, separate segments for cameras and printers). The segment a device lands in depends on the passphrase it uses.

### Generate Unique Passphrases

- **Headless devices (devices that cannot use 802.1X):** In the Nile Portal, register the device's MAC address. Nile can generate a unique passphrase, or you can enter your own. You can also bulk upload a CSV file of MAC addresses and passphrases, or use the Nile API.
- **Employee-owned devices:** When SSO and a UPSK SSID are enabled, Nile generates a self-registration portal link. Employees sign in through your IdP, generate a unique passphrase for their device, and connect to the SSID.
- **Lost device or exposed passphrase:** Delete the user or device, or update the passphrase, in the Nile Portal.