I've been experimenting with this just like you have and can't seem to get it working. It's clearly a lack of knowledge on my part combined with something I'm doing wrong but I'll try what you mentioned and see how it works. I appreciate the help. Thank you.
Original Message:
Sent: Sep 29, 2026 12:02 AM
From: DB86
Subject: MPSK Deployment to only certain clearpass guest forms
I walked that path in the lab on 6.11.1, and I got the Allow part wrong. The box Allow adds comes up ticked, so every device your operators register through a production form would get a key unless someone unticks it. There's no per-form option and no way to hide a copy from it, and the Deployment Mode isn't a saved setting. It's a one-shot that runs when you hit Save, and the page comes back on "Do not modify any configuration" every time.
What does work is building it by hand. Duplicate mac_create and mac_create_receipt for your MPSK folks. On the create copy, Edit Fields and insert mpsk_enable. It fills in as the "Use a unique Wi-Fi password for this device" checkbox, and an Initial Value of 1 ticks it. On the receipt copy insert mpsk_enable (set to static) and mpsk, since mpsk only shows when mpsk_enable is on the same form. Then edit your MPSK operators' profile, tick Override the application's forms and views, and pick the copies. It takes effect at their next login.
A device registered through the copy got its key in the method and length set on the MPSK page, and every original form came out field for field unchanged. Saving that page on Do not modify doesn't touch the forms. I only tested mac_create, but the wizard gives the mactrac pair the same fields, so it should carry over if your MPSK users self-register.
If Allow already ran somewhere, removing its four fields from a production form sticks until someone saves Allow or Always again. Picking a mode shows the exact changes before you save. Leave Remove alone, it strips the copies too.
------------------------------
Dustin Burns
@Worldcom Exchange, Inc.
www.wei.com
- - -
The comments I post here are my own, and not my employers
If my post was useful accept solution and/or give kudos
Personal Blog: www.networkfieldnotes.com
- - -
------------------------------
Original Message:
Sent: Sep 24, 2026 09:44 AM
From: LR-71240e
Subject: MPSK Deployment to only certain clearpass guest forms
Thanks for the reply, but it looks like when I did that The MPSK tool/wizard still wants to modify everything.
The message shown to me when I select "Allow unique device Wi-Fi passwords":
Device Wi-Fi password options will be shown when creating or editing a device.
Forms
mac_create: Add field mpsk_enable
mac_create: Add field sponsor_email
mac_create: Add field auto_send_smtp
mac_create: Add field smtp_email_field
mac_create_receipt: Add field mpsk_enable
mac_create_receipt: Add field mpsk
mac_edit: Add field mpsk_enable
mac_edit: Add field mpsk_refresh
mac_edit: Add field mpsk
mac_edit: Add field mpsk_has_key
mac_edit: Add field smtp_auto_send_field
mac_edit_receipt: Add field mpsk_enable
mac_edit_receipt: Add field mpsk
mactrac_create: Add field mpsk_enable
mactrac_create: Add field sponsor_email
mactrac_create: Add field auto_send_smtp
mactrac_create: Add field smtp_email_field
mactrac_edit: Add field mpsk_enable
mactrac_edit: Add field mpsk_refresh
mactrac_edit: Add field mpsk
mactrac_edit: Add field mpsk_has_key
mactrac_edit: Add field smtp_auto_send_field
mac_create_2: Add field mpsk_enable
mac_create_2: Add field sponsor_email
mac_create_2: Add field auto_send_smtp
mac_create_2: Add field smtp_email_field
mactrac_create_2: Add field mpsk_enable
mactrac_create_2: Add field sponsor_email
mactrac_create_2: Add field auto_send_smtp
mactrac_create_2: Add field smtp_email_field
mac_edit_receipt_2: Add field mpsk_enable
mac_edit_receipt_2: Add field mpsk
List Views
mac_list: Add field mpsk_enable
mactrac_list: Add field mpsk_enable
Device Wi-Fi passwords are sent via email receipts and valid SMTP server settings must be provided.
Original Message:
Sent: Sep 24, 2026 07:18 AM
From: DB-280928
Subject: MPSK Deployment to only certain clearpass guest forms
Not inside the wizard. It works on the built-in forms by name, so every page that uses mac_create, mac_edit, the mactrac pair or their receipts gets the MPSK fields.
The way around it is to copy your production forms first. The Customizing Forms page in the ClearPass Guest guide covers Duplicate, which makes a copy (mac_create_1 and so on) so different operator profiles can get different forms: https://arubanetworking.hpe.com/techdocs/ClearPass/6.11/Guest/Content/Configuration/CustomizingFormsAndViews.htm. Duplicate each form your MAC registration uses, receipts included, then point the operator profiles your production users log in with at the copies. Show Usage on each original should no longer list those profiles before you go further.
Then run the wizard. It changes the originals, and the copies your production operators see stay as they are. Take a config backup first and try it with one test operator before anyone else sees it.
------------------------------
Dustin Burns
@Worldcom Exchange, Inc.
www.wei.com
- - -
The comments I post here are my own, and not my employers
If my post was useful accept solution and/or give kudos
Personal Blog: www.networkfieldnotes.com
- - -
------------------------------