Wi-Fi Protected Setup (WPS) is
a network security standard to create a secure wireless home network.
It aims at simplifying the enrollment of WiFi devices in a WiFi network (via a PIN, a button, ...).
I have a standalone AP which does not provide this functionality
- for practical reasons (the AP is placed in possibly difficult to access places)
- for security reasons (WPS is somehow broken (the PIN method is, and it is required by the standard to be in place, even if there is a button)).
After reading about the protocol, I have the impression that this is just a way to initially provide the connecting device the WPA2 shared key in a simpler way.
Specifically - that APs (the ones who support WPS) do not keep track of the devices enrolled via WPS because these clients are (after the WPS exchange) simply devices which hold a correct WPA2 key, similar to the ones who have been enrolled "manually" by typing in the key.
In other words, is WPS only a "WPA2 key provisioning" solution?
Am I correct with this understanding?
If yes - why aren't there (or at least I could not find any) implementations of a "standalone WPS server", a software which would have knowledge of the WPA2 key and implementing the WPS protocol, to provide WPS-only devices (or lazy users) the capacity to enroll a device via WPS? (by launching the program, going though the WPS exchnage and thus providing the device the WPA2 key which would then be used to associate with the real AP)