A method of operating a device configured as an access point, the method comprising: provisioning the access point with a plurality of pre-shared keys (218, 222), at least some of said pre-shared keys (218, 220) received by calls made via a user interface; receiving a request for a connection to the access point from at least one client device (106, 108, 110, 112, 210), the request comprising a portion generated with a key (107, 109, 111, 113); determining whether the portion comprises information that matches information generated with a key from the plurality of pre-shared keys provisioned to the access point; when it is determined that the information of the portion matches the information generated with the key from the plurality of pre-shared keys (218, 220), allowing the connection; when it is determined that the information of the portion does not match the information generated with the key from the plurality of pre-shared keys (218, 220), disallowing the connection; and in response to a request (402, 404) to remove a selected pre-shared key from the plurality of pre-shared keys (218, 220): removing the selected pre-shared key from the plurality of pre-shared keys; determining (408, 410) which client devices use the selected pre-shared key; and removing respective data structures for said client devices, said data structures indicating the pre-shared key, and disconnecting said client devices. wherein, further in response to allowing (308, 718) the connection, a pair temporal key, PTK, is generated at the access point based on a first nonce provided from the access point to the at least one client device (106, 108, 110, 112, 210) and based on a second nonce provided to the access point from the at least one client device (106, 108, 110, 112, 210) and on the pre-shared key associated with the at least one client device (106, 108, 110, 112, 210), and is installed at the at least one client device (106, 108, 110, 112, 210); and wherein a group temporal key, GTK, is generated from the pre-shared key, and is multicast to all clients that belong to a same group as the at least one client (106, 108, 110, 112, 210), said client devices in the same group being associated with the same pre-shared key. receiving a request for a connection to the access point from at least one client device (106, 108, 110, 112, 210), the request comprising a portion generated with a key (107, 109, 111, 113); determining whether the portion comprises information that matches information generated with a key from the plurality of pre-shared keys provisioned to the access point; when it is determined that the information of the portion matches the information generated with the key from the plurality of pre-shared keys (218, 220), allowing the connection; when it is determined that the information of the portion does not match the information generated with the key from the plurality of pre-shared keys (218, 220), disallowing the connection; and removing the selected pre-shared key from the plurality of pre-shared keys; determining (408, 410) which client devices use the selected pre-shared key; and removing respective data structures for said client devices, said data structures indicating the pre-shared key, and disconnecting said client devices. wherein, further in response to allowing (308, 718) the connection, a pair temporal key, PTK, is generated at the access point based on a first nonce provided from the access point to the at least one client device (106, 108, 110, 112, 210) and based on a second nonce provided to the access point from the at least one client device (106, 108, 110, 112, 210) and on the pre-shared key associated with the at least one client device (106, 108, 110, 112, 210), and is installed at the at least one client device (106, 108, 110, 112, 210); and wherein a group temporal key, GTK, is generated from the pre-shared key, and is multicast to all clients that belong to a same group as the at least one client (106, 108, 110, 112, 210), said client devices in the same group being associated with the same pre-shared key.