Hi JayDee,

I am quite sure, that Android Enterprise enrollment always needs a direct non-proxy connection to Google servers.

(look here for example: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2001/Android_Platform/GUID-80E36005-09EE-42B7-B318-D2B60BE2F482.html)

When enrolling ZEBRA devices you have got another possibility:
Enroll the devices with ZEBRA's StageNow tool. Download APK and INI file from local server and proceed enrolling without ever connecting to Google (unless you would like to bind a Managed GooglePlay account to the device).

But for your Samsung devices I do not see another solution than opening your firewall to Google. :(

Hi JayDee,

Thank you for posting in SOTI Central.

Look into using the below format as a baseline and observe if you experience the same issue. MobiControl does support the installation and operation of the AE Agent within offline environments.

android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_NAME=net.soti.mobicontrol.androidwork android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION=INTERNAL.FQDN android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED=false android.app.extra.PROVISIONING_RESET_PROTECTION_PARAMETERS=true android.app.extra.PROVISIONING_SKIP_ENCRYPTION=false

Also make sure you're using the MobiControl Stage Programmer App with the NFCProvisioning.txt file amended with the above (found via: \Android\data\net.soti.mobicontrol.programmer\files\nfcprovisioning.txt). This is an important step for this to work. Therefore, you'll also need a master device to perform this.

If this resolves the issue, please mark this post as resolved. Or if you need further assistance or require clarification, feel free to reach out.

Regards,

Hi Simon,

we tested several things and made the same experience.

Samsung Galaxy Tab:
If we use the SoTi Stage Programmer App, we hadn´t any chance to use it without Internet connection.
Also the proxy configuration isn´t working (ignored) in this App for Samsung and needs a connection to Samsung License activation servers :(

Zebra:
I´ll test it with Zebra (TC77, TC75x,...) after upgrading the firmware to Android 10, because the actual firmware seems to need internet access to download the QR App.
StageNow could be an alternative. But we need to test it.

I don´t want to create a new "Staging" Wifi (Wifi Overhead) with Internet access because of SoTi/Samsung Android.

I´ll write made experience in this conversation :)

Thanks for your answer!

JayDee

Hi JCMOD,

we copied your parameters

android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_NAME=net.soti.mobicontrol.androidwork android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION=INTERNAL.FQDN android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED=false android.app.extra.PROVISIONING_RESET_PROTECTION_PARAMETERS=true android.app.extra.PROVISIONING_SKIP_ENCRYPTION=false

and exchange the "INTERNAL.FQDN" to "http://SERVERIP:PORT/FOLDER/" into the nfcprovisioning.txt file.

We made our settings in the Stage Programm App and started the NFC transfer.

NFC was starting on the Zebra TC77, connecting to the WiFi, but also ignoring the settings and tries to connect to google directly.

We found some entries where "http\://" instead of "http://"was used. Which would be the correct one?
Do we need to add the full APK-file into the INTERAL.FQDN link?

The Samsung Galaxy Tab A hasn´t NFC. :(

Thanks for your support!

JayDee

Hi JayDee,

You should include the file name in the parameter e.g.

   android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION=https\://Myserve
r.com/Agents/GoogleMobiControl1440_1028.apk

You can also include the enrollment ID e.g.

  android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE=enrollmentId\=ABCDED12

Also, despite the file name of the configuration file having  the prefix "nfc",  all configurations defined in the file are also applicable to enrollment using QR-code.

Hi everyone,

What's the scenario for A+ enrollment? 

Device is Zebra Mc36 run on OS 4 or 5 if i am not mistaken, clearly not eligible for QR scan enrollment.

The client only have local network on the warehouse.

Thanks & regards,

Randy Saputra 

Hi JCMOD@SOTI,

This offline provisioning method worked with an Android 8.1 device (LGE  LM-Q610.FGN), but it did not with an Android 10 device (Sonimtech XP8800). It got stuck on the screen "Getting ready for work".

The QRCode was created with these parameters:

{
"android.app.extra.PROVISIONING_DEVICE_ADMIN_SIGNATURE_CHECKSUM":"hn8mSNJMPcovWbnnWrb-uMpWZjNlNp-jyV_2A-Whumc=",
"android.app.extra.PROVISIONING_DEVICE_ADMIN_COMPONENT_NAME":"net.soti.mobicontrol.androidwork/net.soti.mobicontrol.admin.DeviceAdminAdapter",
"android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION":"http://<INTERNAL_SERVER_IP>/GoogleMobiControl1501_1051.apk",
"android.app.extra.PROVISIONING_SKIP_ENCRYPTION":true,
"android.app.extra.PROVISIONING_LOCALE":"pt_BR",
"android.app.extra.PROVISIONING_WIFI_SSID":"<INTERNAL_SSID>",
"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED":false,
"android.app.extra.PROVISIONING_WIFI_IDENTITY":"<INTERNAL_USER_ID>",
"android.app.extra.PROVISIONING_WIFI_PASSWORD":"<INTERNAL_USER_ID_PASSWORD>",
"android.app.extra.PROVISIONING_WIFI_SECURITY_TYPE":"EAP",
"android.app.extra.PROVISIONING_WIFI_EAP_METHOD":"PEAP",
"android.app.extra.PROVISIONING_SKIP_USER_CONSENT":true,
"android.app.extra.PROVISIONING_TIME_ZONE":"America/Sao_Paulo"
}

Thanks in advance.

Based on the format of the parameters shown in your screenshot,  I doubt whether you are using Mobicontrol Stage Programmer app (https://play.google.com/store/apps/details?id=net.soti.mobicontrol.programmer) on an Android provisioning device to do your AE device enrollment with QR/NFC.

Do not confuse the above with SOTI MobiControl Stage Barcode Generator" Windows Utility as documented at

    https://soti.net/mc/help/v14.1/en/mcstage/start/barcode_generator.html

and  downloadable at

    https://docs.soti.net/soti-mobicontrol/downloads/

The QR code generated with the latter likely won't work on Android-Enterprise device enrollment.