A method is used to authenticate a wireless device for secure operation on a wireless local area network, the wireless local area network including a controller. The method to include broadcasting from the controller a configuration message based on the controller being physically switched to a configuration mode. The method to also include accepting at the controller a response from the wireless device, the response accepted based on receiving the response within a fixed time period following the broadcasting of the configuration message, the accepted response including information encrypted using the controller's public key. A user message is obtained, the user message entered by the user at the controller and maintained at the controller. The wireless device is authenticated based on whether the response including the encrypted information, when decrypted with a private key associated with the controller's public key, matches the user message.