Hi Matt,

we can't install the app manually and grant it DA permission. If we install netmotion via SOTI we can't establish a VPN connection.

Thanks

Daniel

How are you attempting to install the app via SOTI? Using Managed Play or packaging an APK as a SOTI package? Does the app install without DA privileges or does it not install at all? 

Reason I ask is the DA permission is still available in Android O and as I understand it you should be able to activate a DA even when a device is managed under DO. Eventually that DA API is being deprecated and Netmotion will have to find another way, but I feel like you should at least be able to get this working in O on the TC77.

You may end up having to use Zebra's MX layer and the AppMgr CSP to actually perform the APK install rather than having the SOTI package perform the install  in order for the DA permission to be granted. 

Nevermind, I was able to get the detail I needed from your other post, you seem to have posted the same question twice..

https://discussions.soti.net/thread/install-apps-with-device-admin/

As I now understand it, you CAN install the Netmotion apk via SOTI package but you are frustrated that the DA permission isnt granted automatically. 

I would first confirm that you can manually navigate to the app's permissions in Settings to see if you can manually activate DA with the app while the device is managed in DO mode. If you can manually activate the DA permission then you may be able to set the same permission using the DevAdmin MX CSP from Zebra. If you're not familiar you can create StageNow generated MX XML configurations and deploy them via SOTI using the mxconfig script. I would envision having a SOTI Package that delivers and installs the netmotion APK along with a StageNow XML file that sets the netmotion activity name as Device Administrator. You could then include a Post-Install script to process the XML file so that the APK gets installed and then the DA gets activated. The one complication is you would need to know what the DA activity is within the app itself. 

http://techdocs.zebra.com/mx/devadmin/

Dumb question...... why do you need to grant NetMotion DA permissions? Is it a difference between Work Managed and Fully Managed? 

On my TC77's (Fully Managed), I have not needed to set this permission. I install from a Mobicontrol packaged and have a 2nd package to configure NetMotion that is dependent on NetMotion being installed.

Which version do you use?

Thanks

Daniel

I am still on 14.1.2 and do not have any issues installing NetMotion on a Zebra TC77. On that device, NetMotion uses a private certificate store for their certificates. The certs are installed by MobiControl's configuration via NetMotions API. This allows the device to create the VPN tunnel even after a reboot and before the user has unlocked the device. 

Question, what type of device lockdown are you using. If you are using an OS pin/password, then nothing will start until that has been entered. If you are only using the Lock screen, what I described works. 

@Daniel Haberer what problems are you seeing in 14.4? Which version? I am just about ready to start testing 14.4.1, so you comment about NetMotion working in 14.3 and not in 14.4 worries me. 

Thanks,

Jim