Which is the correct string to put in the json file to enroll the EF500 Blue Bird device using a soti agent present in a privat server?

NG
Nigro Giovanni
CALZEDONIA S.P.A.

Hi to all, we are testing a blue bird device and, starting from the moment that our MobiControl is on-premise, not cloud version, we are try to download the soti agent from a local server in our LAN (image that the LAN is a LAN of the Shop).

What we want to do seems impossible because the device still try to arrive to Internet to satisfy some OS Android needed but seems that the only possibility to install soti agent is only across the Internet connection... this bheaviour don't permet us to control the Agent version of Soti.
Some one can help us?

a year ago
SOTI MobiControl
ANSWERS

Hi i guess you don't use Google's Zero-Touch portal, so you can do it following way:

You can enroll your devices using QR-codes.
In such QR code you can point to a file on the network.
Just an example how such a QR could look like (hopefully i didn't miss something). The bold parts need to be changed by you.

{"android.app.extra.PROVISIONING_DEVICE_ADMIN_SIGNATURE_CHECKSUM":"hn8mSNJMPcovWbnnWrb-uMpWZjNlNp-jyV_2A-Whumc=",
"android.app.extra.PROVISIONING_DEVICE_ADMIN_COMPONENT_NAME":"net.soti.mobicontrol.androidwork/net.soti.mobicontrol.admin.DeviceAdminAdapter",
"android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION":"http://soti.net/apk/ae2",
"android.app.extra.PROVISIONING_WIFI_SSID":"WiFiSSID",
"android.app.extra.PROVISIONING_WIFI_HIDDEN":False,
"android.app.extra.PROVISIONING_WIFI_SECURITY_TYPE":"WPA",
"android.app.extra.PROVISIONING_WIFI_PASSWORD":"WifiPassword",
"android.app.extra.PROVISIONING_USE_MOBILE_DATA":False,
"android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE":{"enrollmentId":"ENROLLMENT_ID",
"PROVISIONING_MODE":"FULLY_MANAGED_DEVICE"}}

In latest Mobicontrol version you can create such QR-Code directly in the enrollment rules when you save your enrollment rule.

You can read it by tapping 10 times on the blue background on the welcome screen of the device.

NG
Nigro Giovanni
a year ago

Hi thanks for the fast reply. The problem persist.
Starting from your code that you shared, the only difference of mine is that i didn't insert the the command : "android.app.extra.PROVISIONING_WIFI_HIDDEN": false,
But, once add that command the behaviour still the same, the device download the agent only on internet.
Checking what happen in the network i see that the device try to contact many servers on internet, and what i suppose is that the Blue Bird device maybe need some special command to avoid this to download the agent as indicated in the command : android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION
Could be possible that exist other instruction to ad on my json to block the device to check info on internet? 
Because with honeywell device i don't have any problem of this.

Hi Nigro, you need to change the http://soti.net/apk/ae2 to your server path of the agent apk file

Could be possible that exist other instruction to ad on my json to block the device to check info on internet? 
Because with honeywell device i don't have any problem of this.

No that i know of.

NG
Nigro Giovanni
a year ago

yess the info of the path where download the soti apk is present but the device ignore the instrucion and still try the internet download but firewall don't permit the internet access.

I don't know if what is happen is caused by the Blue Bird device.

For sure the link works beacuse if i put the link to download the Soti apk in a browser it works.

P
PMMOD@SOTI
a year ago

Hello Nigro Giovanni,

Thank you for your post on SOTI Pulse. Rafael Schäfer and Raymond Chan, thank you for responding to the post your expertise and willingness to help are greatly appreciated!

Could you please confirm if you’ve had the opportunity to test Raymond’s suggested solutions and whether they have effectively resolved your issue?

If the proposed solution has resolved the problem, please consider marking this post as the solution. Additionally, feel free to reach out if you need further clarification or have any follow-up questions.

RC
Raymond Chan Diamond Contributor
a year ago

Hi Nigro,

If your primary target is to have control over which version of device agent to use for some particular devices, then you can either configure the JSON parameter to point to the relevant version of agent on Soti server on the internet(the simplest approach), or host the device agent in your own server.

For the latter case, as the agent file is to be downloaded from your lserver, you should also include the directory path AND filename (normally ending with file extension ".apk") of the device agent  for the argument of the field 

 "android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION"

Please note that all certified AE devices currently include codes to check Google GMS Service backends right after Wifi set-up during the enrollment process, your device cannot be confined to closed corporate network when using the QR-code approach to do agent download AND device enrollment.  Some MDM solutions do provide complicated workaround with different limitations, especially for Android 13 or later devices,  but I don't think Soti MobiControl currently have any when using QR-code to enrol.

If your devices really need to be enrolled AND deployed for day-to-day use in a closed corporate network, then device agent downoad/installation might need to be done via ADB port as described in the Soti Forum article  https://discussions.soti.net/articles/000001452.