Deploying WIFI profiles with pre-shared secret to Android devices using ConfigMgr

Today I have spend some time creating and deploying WIFI profiles to Android devices and would like to share my experiences. To get started with Android and WiFi profiles I used this TechNet article https://technet.microsoft.com/en-us/library/dn705842.aspx is almost correct, but there a few bugs in the XML example (as I see it, authentication and encryption).

To get me all the way I combined the knowledge from the article with information from MSDN https://technet.microsoft.com/en-us/library/dn705842.aspx and finally this super nice Android PSK Generator community tool – http://johnathonb.com/2015/05/intune-android-pre-shared-key-generator/ 

The Android XML configuration is really easy,just add the WiFI information into the Configurator and click Create file.

 

image

Create the Android WiFi profile in ConfigMgr.

  1. In the ConfigMgr Console, in the Assets and Compliance workspace, navigate to Compliance Settings, Configuration Items.
  2. From the ribbon, click Create Configuration Item. On the General page, configure these settings and click Next.
    1. In Name type: MyWIFI
    2. Specify the type of configuration item: Mobile device
  3. On the Mobile Device Settings page, enable Configure additional settings that are not in the default settings group and click Next.
  4. On the Additional Settings page, click Add and click Create Setting.
  5. Configure the Create Setting dialog with these settings and click OK
    1. Name: MyWiFi
    2. Setting Type: OMA URI
    3. Data Type: String
    4. OME-URI: ./Vendor/MSFT/WiFi/Profile/MyWiFi/Settings
      image
  6. Back in the Browse Settings dialog, select MyWifi (your newly created setting) from the list and click Configure Setting.
  7. In the Create Rule dialog, paste the XML code from the Android PSK Generator tool and click OK.

    image

  8. Click Close, and Next. On the Supported Platforms page, uncheck all platforms except Android and Click.
  9. Finish the wizard and you CI is ready to be deployed.

Deploy the Android Wifi profile

Configuration Items has to be added to a configuration baseline in order to be deployed.

  1. Still In the ConfigMgr Console, navigate to Compliance Settings, Configuration Baselines.
  2. From the ribbon, click Create Baseline Item.
  3. In Name type: MyWiFi click Add, Configuration Items and select your MyWiFi configuration item.
  4. Click Add and OK twice to finish the baseline.
  5. Select the baseline and click Deploy on the ribbon.
  6. Make sure you enable Remediate noncompliance rules when supported, select a USER collection and click OK.

Your Android devices will automatically receive the new network configuration next time they receive a policy update.

image

About the Author:

Kent Agerlund

Microsoft Regional Director, Enterprise Mobility MVP. Microsoft Certified Trainer and Principal consultant. I have been working with Enterprise client management since 1992. Co-founder of System Center User Group Denmark in 2009.

Certified MCITP: Enterprise Administrator, MCSA+Messaing, and much more.

Member of: Microsoft Denmark System Center Partner Expert Team The Danish Technet Influencers program System Center Influencers Program.

2 Comments

  1. James October 23, 2015 at 0:51 - Reply

    Kent, If I use Jorgen’s process at

    http://ccmexec.com/2015/03/creating-and-deploying-a-custom-ios-policy-using-intune/#comment-20325

    Then use your process to import the XML file, do you think I could send iOS Wi-Fi profiles out via SCCM/Intune? Jorgen states what he does works with Intune, never does he say with SCCM/Intune.

  2. Fatshark's Personal Blog February 17, 2016 at 15:10 - Reply

    Deploying WIFI profiles with pre-shared secret to Android devices using Intune

    Today I have spend some time creating and deploying WIFI profiles to Android devices and would like to share my experiences. To get started with Android and WiFi profiles I used this TechNet article https://technet.microsoft.com/en-us/library/dn705842.…

Leave A Comment