Wifi settings

The Wifi policy allows you to create and send connection parameters to devices to enforce the use of the corporate wifi network.

The supported devices for the wifi profile are Windows Phone 8.1+, Windows Professional, Education, Enterprise, and Windows Holographic. Use Wifi settings to select the wifi profile type that you want to use and to configure wifi policy settings.

Table 1. Wifi profile type
Policy setting	Description	Supported profile
Service Set Identifier (SSID)	Specifies the SSID (unique wifi network name) of the wifi network.	Specific to the Open, WEP, WPAPSK/WPA2PSK, and WPA/WPA2 Enterprise wifi profile.
Connection type	Select from the options for the connection type such as Extended Service Set (ESS) or Independent Basic Service Sets (IBSS). Configure the following settings for the ESS connection type: Non broadcast: Data is transmitted directly from one computer to another single host over a virtual circuit or across a switched fabric. Connection mode: This setting supports the following connection modes: Auto: Automatically connects to the wifi network. Manual: The wifi network setting is pushed to the device, and then waits for the user to establish a connection to the wifi network. Force connect: The device automatically connects to the wifi network if the network is in range, but does not allow the user to connect to an alternative network. Note: The Auto and the Force connect connection modes require the MES 2.10+ agent. For the ESS connection type, you can use the Auto, Manual, or the Force connect connection mode. By default, the value is set to Auto. For the IBSS connection type, you must use the Manual connection mode. Auto switch: This setting determines the roaming behavior of an auto-connected network if a preferred network is in range. If this setting is enabled, the device attempts to connect to the preferred network if the preferred network is in range.	Specific to the Open, WEP, WPAPSK/WPA2PSK, and WPA/WPA2 Enterprise wifi profile.
Authentication type	Refers to the authentication type such as WPA or WPA2.	Specific to the WPAPSK/WPA2PSK and WPA/WPA2 Enterprise wifi profile.
Encryption	Supports two types of encryption methods: TKIP (Temporal Key Integrity Protocol) AES (Advanced Encryption Standard)	Specific to the WPAPSK/WPA2PSK and WPA/WPA2 Enterprise wifi profile.
EAP authentication type	Supports two types of Extensible Authentication Protocol (EAP): EAP TLS PEAP-MSCHAPv2	Specific to the WPA/WPA2 Enterprise wifi profile.
Validate server during connection	Includes the validation of the server during a wifi connection. Trusted root CA: Select a trusted root certificate for validation. Disable user prompt for server validation: If selected, a user is not prompted for server validation. Server names: Enter semicolon-separated server names. Different username: Select this option if the user name is different for the server connection.	Specific to the WPA/WPA2 Enterprise wifi profile.
Identity certificate	Select the identity certificate to authenticate the wifi profile login for a user. Note: You must use the Company Hub 1.70 and later certificate for Windows Phones.	Specific to the WPA/WPA2 Enterprise wifi profile.
Shared key type	Supports two types of entries for the shared key: Passphrase Network	Specific to the WPAPSK/WPA2PSK wifi profile.
Shared key	The key of 5 or 13 ANSI characters, or 10+ or 26 hexadecimal characters.	Specific to the WEP wifi profile.
Use proxy	Proxy server address: Enter a value without a protocol such as 10.10.10.10+ or proxy.url.com. Proxy server port	Specific to the Open, WEP, WPAPSK/WPA2PSK, and WPA/WPA2 Enterprise wifi profile.