NWA50AX NWA50AX_7.00(ABYW.2)C0 SSID pass key not visible

aks · October 11

In the past (I thought) it was possible to read the SSID passkey (pre-shared key) under the security list/profile, but with V7.00P2 this is now just stars:

I have not enable the extra encryption in the config settings:

However, I notice the config files also now encrypt the SSID passleys, however, this was not the case for the 6.xx firmwares.

So my question is, how do I view in readable format the passkeys for the SSID configs, as I don't have another easy way to maintain them? (yes, I could write them in another file/paper/etc, but that's not ideal.

Zyxel_Judy · October 16

Hi @aks ,

In recent firmware versions, we have made the Pre-Shared Key (PSK) hidden to enhance security. This reduces the security issues. For your protection and the overall security of the network, the PSK is intentionally hidden, and there is no option to display it in the GUI.

Regarding the Sensitive Data Protection feature, it can be enabled, allowing you to enter a Private Encryption Key. When this feature is activated, user passwords in the configuration file are encrypted using a custom key, further enhancing security. However, this feature is unrelated to the visibility of the PSK.

Zyxel_Judy · October 16

Hi @aks ,

In recent firmware versions, we have made the Pre-Shared Key (PSK) hidden to enhance security. This reduces the security issues. For your protection and the overall security of the network, the PSK is intentionally hidden, and there is no option to display it in the GUI.

Regarding the Sensitive Data Protection feature, it can be enabled, allowing you to enter a Private Encryption Key. When this feature is activated, user passwords in the configuration file are encrypted using a custom key, further enhancing security. However, this feature is unrelated to the visibility of the PSK.

aks · October 17

As the system admin, I would expect to be able to view this in the GUI, like most other equipment I'm using, not to mention the access I must already have if I've logged in to the admin console, so this behaviour seems unnecessary.

Sure I can see why encrypting the config files makes sense.

Please consider allowing admins to enable viewing of the WiFi passwords, and accepting the associated risk.

Zyxel_Judy · October 18

Hi @aks ,

Thank you for your feedback. We understand your concern regarding the visibility of the PSK in the GUI for system administrators. We will carefully evaluate this feature.