Hi Daniel, 

The Authentication password in DB is crypted so we can't find it in DB.

Do you have anyway to make devices to be online?

e.g to return the device to the original wifi network or insert 4G SIM

We can run script or revoke the profile from mobicontrol webconsole.

Kind Regards, Technical Support | SOTI Inc. |1.905.624.9828 | support@soti.net | www.soti.net |

We did manage to get the device on to a local network, so in this case it has probaby been solved.

I do wonder what the reason is for making this pin number/password unavailable through the web console. It seems like it is probably causing more trouble than what the benefit it is providing. What we'll probably end up doing is keeping a copy of those passwords/pins somewhere else in plaintext anyway, because this keeps happening again and again.

I don't agree. All admins should know this password (it's the same for wifi passwords stored in the configs etc. all are encrypted as far as i know). So if you don't remember a relevant admin password there's something on your side to do.

The encryption for security reasons maes sense if someone is able to get access to the db. And even you don't know the password, you are able to setup a new password in the profile and all online devices get it, all others have to be getting online or reinstalled.

Absolutely disagree. This password is not protecting the nuclear codes, it is preventing the user from configuring WiFi on the device, and yes it prevents the user from opening YouTube and play Tetris (and perhaps a few other things). Personally, this has caused me more hassle than any benefit it may give the device owner.

For your devices, maybe.

But that can very different for other setups! Don't look only on yours.

And the user can for example lookup Wifi passwords which can be critical (depending on the used Wifi). And access the whole file system of the device etc. etc. 

Yes I'm aware of the presence of other systems. What I'm criticising is the fact that this is designed with the highest security measures in mind, when as you stated not all systems will need that. So make it configurable and then those that require this level of security have access to that, but don't create more trouble for other users.