Password Policy not matching between Device and Server

D
Daniel
Hornbach Baumarkt AG

Hey Guys,

we want to set up a Pin-Code to unlock all of our Devices (Zebra TC20 + TC51). Here's the Serverside config:

As you can see, we only want a Pin without alphabetic characters. Unfortunately our Endpoints showing up this (wants min. one alphabetic character):

Also other options like pattern wants a password with numeric an alphabetic characters.

How can we set up only a PIN on our devices? Any suggestions? Why seems MC not allow any other options than password?

Thank you!

7 years ago
Android
ANSWERS
RC
Raymond Chan Diamond Contributor
7 years ago

Did you check the status of your profile with the PIN authen policy in your web-console to confirm that the profile has already been SUCCESSFULLY deployed to the device?  Also, did you check if there is/are other profile(s) with more secured "Password" authen. policy have been  deployed to the device?  

If none of the above two cases cause the problem,  the next possible cause can be related to settings (configured by Zebra ZX or default in Zebra firmware)  specific to Zebra devices.

D
Daniel
7 years ago

I've checked the Policies and also used an unconfigured Zebra device with the same feedback :-(

Any other suggestions?

RC
Raymond Chan Diamond Contributor
7 years ago

Have you tried changing the PIN/password length from 4 to 5 or 6, and see if the message prompt on the device gets changed accordingly after the new profile is confirmed to have been installed/deployed on the device?

D
Daniel
7 years ago (edited 7 years ago)

Yes still the same. It doesn't matter which Password Quality is set. The Device always want's an alphanumeric Password. :-(

When I disable the Password-Policy in MC and try it manually through the Android Menu I'm able to choose every Password Quality I want

RC
Raymond Chan Diamond Contributor
7 years ago (edited 7 years ago)

When you said the result is the same, did you mean you still get a warning message on the device, or the warning message still says the required minimum password length is still 4?

You probably missed the main point in my previous post.  Maybe I should elaborate my debug logic here. 

If you change the authentication policy to have minimum password length of 5, and the "Password Requirement" warning on the targeted device shows a message

"New password must be specified that meets the following criteria:

- Password must be at least 5 characters in length

- Password requires numeric and alphabetic characters"

then, the problem likely stems from Zebra firmware/device agent not being able to enforce the minimum password quality tp be "PIN" (but can enforce the NEW minimum PIN/password length to 5)

Otherwise,  the problem probably stems from the server codes incorrectly sending wrong policy configuration information to the device.

In the former case, if further test is done to confirm if Zebra firmware or its other mechanism (ZX setup, Settings, etc.)  override authentication policy from MDM, then you can probably fix the problem with Zebra tool/software accordingly.  Otherwise, you can report to Soti support team the symptom and your device model and agent & server versions.

D
Daniel
7 years ago

Thanks Raymond. If I change the password-policy from 4 to 5 characters the Device shows up correctly "Password must be at least 5 characters in length". So the only thing is the password-quality. Its not set correctly through Soti. I will check this with a few other Devices an Firmwares and then contact Zebra or Soti with that.

Thank you!

RC
Raymond Chan Diamond Contributor
7 years ago

Maybe you can change the password quality to pattern or alphabetic  to see if the desired quality is correctly deployed on the targeted device.  It's quite unusual that only the password quality gets incorrectly configured.  I suspect if Zebra firmware does not allow any password options except alphanumeric for devices managed by MDM/EMM software.