Wi-Fi

This policy centrally distributes Wi-Fi network definitions to Android Enterprise devices.

The Wi-Fi policy allows Wi-Fi networks to be centrally set up on Android Enterprise devices without requiring users to enter credentials themselves. Multiple Wi-Fi configurations can be added to a single policy at once.

Tethering is not controlled by this policy but by the Tethering settings option of the Device connectivity → configuration.

Network Definition #

• Wi-Fi configuration name – internal name for identification in Relution.
• The network’s SSID – network name in plain text. Alternatively Hex representation of the network’s SSID, required for SSIDs that cannot be encoded in UTF-8. At least one of the two fields is mandatory. If both are filled in, they must match.
• This network is hidden – enable if the network does not broadcast its SSID.
• Join network automatically – connects the device automatically once the network is in range.

Security Type #

• Security type: None / Open, WEP PSK, WPA/WPA2/WPA3 PSK, WEP 802.1x, WPA/WPA2/WPA3 EAP.
• Passphrase: required for PSK-based security types.

EAP Authentication (WEP 802.1x, WPA/WPA2/WPA3 EAP) #

• Accept EAP types: PEAP, TLS, TTLS, SIM, AKA or PWD, plus Identity (required field). For PWD, additionally Password.
• For PEAP and TTLS, additionally Anonymous identity, Password and Phase 2 Authentication: PAP or MSCHAPv2.
• For TLS, PEAP and TTLS: Client certificate type or certificate template (see Certificate Management →) and TLS maximum version.
• Server certificate validation: Trusted CA certificates, Domain Suffix Match (required field, Android rejects an empty list as insecure), Subject Alternative Name (SAN) match and optionally Certificate subject name substring of trusted RADIUS services.
• Enable Opportunistic Key Caching for fast roaming

MAC Address Randomization #

MAC Address randomization mode (Hardware/Automatic, default: Automatic) – only sent to devices running Android 13 or later.

Proxy #

In the Proxy settings section, Proxy type defines the kind of proxy: None, Manual or Automatic configuration (PAC).

• With Manual: Host and Port for HTTP Proxy, HTTPS Proxy, FTP Proxy and/or SOCKS Proxy, with at least one proxy required, plus Bypass proxy for (list of addresses that are not routed through the proxy).
• With Automatic configuration: PAC URL.

A proxy that applies regardless of the connected network is defined via the Global proxy → configuration.

Support #

• Managed devices (Device Owner)
• COPE work profile (Personal Profile Enabled)
• Not available for a pure work profile (BYOD/Profile Owner)