A method of operating a device configured as an access point , the method comprising: provisioning the access point with a plurality of pre-shared keys , at least some of said pre-shared keys received by calls made via a user interface; receiving a request for a connection to the access point from at least one client device , the request comprising a portion generated with a key ; determining whether the portion comprises information that matches information generated with a key from the plurality of pre-shared keys provisioned to the access point; when it is determined that the information of the portion matches the information generated with the key from the plurality of pre-shared keys , allowing the connection; when it is determined that the information of the portion does not match the information generated with the key from the plurality of pre-shared keys , disallowing the connection; and in response to a request to remove a selected pre-shared key from the plurality of pre-shared keys : removing the selected pre-shared key from the plurality of pre-shared keys; determining which client devices use the selected pre-shared key; and removing respective data structures for said client devices, said data structures indicating the pre-shared key, and disconnecting said client devices. wherein, further in response to allowing the connection, a pair temporal key, PTK, is generated at the access point based on a first nonce provided from the access point to the at least one client device and based on a second nonce provided to the access point from the at least one client device and on the pre-shared key associated with the at least one client device , and is installed at the at least one client device ; and wherein a group temporal key, GTK, is generated from the pre-shared key, and is multicast to all clients that belong to a same group as the at least one client , said client devices in the same group being associated with the same pre-shared key. receiving a request for a connection to the access point from at least one client device , the request comprising a portion generated with a key ; determining whether the portion comprises information that matches information generated with a key from the plurality of pre-shared keys provisioned to the access point; when it is determined that the information of the portion matches the information generated with the key from the plurality of pre-shared keys , allowing the connection; when it is determined that the information of the portion does not match the information generated with the key from the plurality of pre-shared keys , disallowing the connection; and removing the selected pre-shared key from the plurality of pre-shared keys; determining which client devices use the selected pre-shared key; and removing respective data structures for said client devices, said data structures indicating the pre-shared key, and disconnecting said client devices. wherein, further in response to allowing the connection, a pair temporal key, PTK, is generated at the access point based on a first nonce provided from the access point to the at least one client device and based on a second nonce provided to the access point from the at least one client device and on the pre-shared key associated with the at least one client device , and is installed at the at least one client device ; and wherein a group temporal key, GTK, is generated from the pre-shared key, and is multicast to all clients that belong to a same group as the at least one client , said client devices in the same group being associated with the same pre-shared key. <EOS>