"unlock credential store"

R,
Ross , Hathaway
Peak-Ryzex plc (UK)

I have enrolled some devices using Android Enterprise today and i am seeing Pending Actions box as below.

Unlock credential store

Supply a password to unlock credential store and install certificates used for VPN & Wi-Fi configuration

I am not using any certificates on these devices so not sure why this is coming up the only difference i can see currently is the agent version.

6 years ago
Android
ANSWERS
LN

Same issue for me today, it didn't before, seems like an AE agent update that triggered the problem.

This is problematic and should be addressed asap.

Hi Ross, 

Can you provide a bit more information about the MC versions this is occurring on and the devices as well, such as Manufacturer, OS version, MC agent version etc?

Thank you, 

R,
Ross , Hathaway
6 years ago

SOTI version 13.4

Zebra TC56 Nougat build number is 01-01-49.00-NG-U14-STD

Agent Version problem is 13.60.1662

Devices enrolled previously with agent version 13.60.1567 there is no issue

LN
Laurent, NACHBAUER Bronze Contributor
6 years ago (edited 6 years ago)

Just in case...

Same device, multiple patches from 07 up to 14, tried on multiple servers and the issue is... intermittent.

Sometimes a pin code is asked, sometimes not, that is, trying over and over again with the same device, removed from mobicontrol, factory reset, enrolled again with NFC.

The pin code message pops up at the time mobicontrol launches for the first time after enrollment, even before opening the agent window itself, so before even trying to connect to the MC server.

SS
Support Staff Account Platinum Contributor
6 years ago (edited 6 years ago)

Thank you guys for the information and update, good to know it's intermittent in your case.   That may be helpful information.  There are some great new features released in the in AE Agent Version 13.60.1662 and I have reached out to internal stakeholders to find out more about the expected behavior of these new features. 

We are working with Ross's technician to reproduce the issue.   

As the afw#mobicontrol downloads directly from the playstore, a developers ticket may be required to quickly make any required changes if this is occurring with many of our users.  

What MC console version are each of you using? 

I will provided an undated response soon, but please let me know if the issue stops.

LN

I first noticed it on the normal device turnover from a big retail customer, running MC 13.4.0.5203

It just started happening while no other changes were made on the server side.

Then working on another customer installed with MC 14.2.2, using the same device (which is my test device), same issue.

Honestly, about the intermittent part, it's mostly something like pin code won't be asked 1/5th of the time, more like an exception or a glitch.

To my undestanding this cannot be server dependent, the device doesn't even have knowledge of the server yet when the message opens, it's almost certainly an agent issue. As we are using NFC, agent is always the latest from play store, so this points to an agent update triggering it.

Maybe some interaction with the agent and the device MX framework itself

LN

Any update ?

R,
Ross , Hathaway
6 years ago

The only update I have been given was try using the # enrollment rather than QR code

RB
Richard Brown
6 years ago

We have a workaround to get us past this issue whereby we add the security and then remove it again afterwards. This is a manual workaround and by no means a fix, however it is enough for the device to not prompt for the credentials security anymore. Hopefully a fix will be provided soon, guessing in a new agent version to therefore only ask for credential store security if the console asks for it, not on all new enrolled devices

R,
Ross , Hathaway
6 years ago

Yes this is what i have put in place when i discovered the issue to get past it

LN

Yes, I did the same for the time being, by no means a fix, but a workaround for now.

Try this to resolve your issue.

  1. Apply PIN as notification states
  2. Reboot the device
  3. Enter PIN to unlock device
  4. Remove PIN and set to No Lock
  5. Reboot the device
  6. PIN does not appear and notification does not re-appear
R,
Ross , Hathaway
6 years ago

Is there any update on this issue obviously this workaround gets round the problem would really like it resolved.

Thanks

JJ
Jim J Bronze Contributor
6 years ago

This is an issue on the Zebra TC77 using AE as well. Same agent as others have listed.

JB

Hi Support,

Same issue here,

Is there already a solution for this?

Thank you.

Hi Ross and Jordy,

Does anyone have an active Support case number they can provide me so that I can follow to see if there was a developers ticket created?  Some users have closed their cases, possibly because they have a work around and I need  an Active case to request a resolution to the issue. 

Feel free to private message me a case number so I can ensure a developers ticket was created with this issue and a permanent fix is provided.

Regards, 

TE
Travis Epperson
6 years ago

I have the same issue from time to time on Zebra TC70X.  I have the compounded problem that after removing the PIN it is STILL required on reboot and I have not way of getting rid of it.  My work around is just factory wiping it until it does not ask for a pin.

No open case yet.  Will open one soon (already have two open for other issues).

YW

Still having this same issue. Datalogic memor 10. Latest version of AE agent...

JD
John Doe Platinum Contributor
5 years ago (edited 5 years ago)

Try the following on a fresh / factory reset Device:

Push a NoLock Zebra MX / DeviceConfig / Config File and Reboot your Device, then Push a Lock Zebra MX / DeviceConfig.

This should get you a Device with a Lock-Pin without Secure startup enabled (only tested on honeywell).

Then install Certificates you need and push a NoLock Zebra MX / DeviceConfig again to remove the pin completly.