Deploying WIFI profiles with pre-shared secret to Android devices using ConfigMgr

Today I have spend some time creating and deploying WIFI profiles to Android devices and would like to share my experiences. To get started with Android and WiFi profiles I used this TechNet article https://technet.microsoft.com/en-us/library/dn705842.aspx is almost correct, but there a few bugs in the XML example (as I see it, authentication and encryption).

To get me all the way I combined the knowledge from the article with information from MSDN https://technet.microsoft.com/en-us/library/dn705842.aspx and finally this super nice Android PSK Generator community tool – http://johnathonb.com/2015/05/intune-android-pre-shared-key-generator/ 

The Android XML configuration is really easy,just add the WiFI information into the Configurator and click Create file.

 

image

Create the Android WiFi profile in ConfigMgr.

  1. In the ConfigMgr Console, in the Assets and Compliance workspace, navigate to Compliance Settings, Configuration Items.
  2. From the ribbon, click Create Configuration Item. On the General page, configure these settings and click Next.
    1. In Name type: MyWIFI
    2. Specify the type of configuration item: Mobile device
  3. On the Mobile Device Settings page, enable Configure additional settings that are not in the default settings group and click Next.
  4. On the Additional Settings page, click Add and click Create Setting.
  5. Configure the Create Setting dialog with these settings and click OK
    1. Name: MyWiFi
    2. Setting Type: OMA URI
    3. Data Type: String
    4. OME-URI: ./Vendor/MSFT/WiFi/Profile/MyWiFi/Settings
      image
  6. Back in the Browse Settings dialog, select MyWifi (your newly created setting) from the list and click Configure Setting.
  7. In the Create Rule dialog, paste the XML code from the Android PSK Generator tool and click OK.

    image

  8. Click Close, and Next. On the Supported Platforms page, uncheck all platforms except Android and Click.
  9. Finish the wizard and you CI is ready to be deployed.

Deploy the Android Wifi profile

Configuration Items has to be added to a configuration baseline in order to be deployed.

  1. Still In the ConfigMgr Console, navigate to Compliance Settings, Configuration Baselines.
  2. From the ribbon, click Create Baseline Item.
  3. In Name type: MyWiFi click Add, Configuration Items and select your MyWiFi configuration item.
  4. Click Add and OK twice to finish the baseline.
  5. Select the baseline and click Deploy on the ribbon.
  6. Make sure you enable Remediate noncompliance rules when supported, select a USER collection and click OK.

Your Android devices will automatically receive the new network configuration next time they receive a policy update.

image


Comments (2):

  1. James says:

    Kent, If I use Jorgen’s process at

    http://ccmexec.com/2015/03/creating-and-deploying-a-custom-ios-policy-using-intune/#comment-20325

    Then use your process to import the XML file, do you think I could send iOS Wi-Fi profiles out via SCCM/Intune? Jorgen states what he does works with Intune, never does he say with SCCM/Intune.

  2. Deploying WIFI profiles with pre-shared secret to Android devices using Intune

    Today I have spend some time creating and deploying WIFI profiles to Android devices and would like to share my experiences. To get started with Android and WiFi profiles I used this TechNet article https://technet.microsoft.com/en-us/library/dn705842.…

Leave a Reply