Stage Programmer Wifi Options

JD
John Doe Platinum Contributor
Eisen Karl GmbH

Do i have an old version where only WEP and WPA are available?

Id like to configure devices with 802.1x but i cant find a version where this is availabe and neither an update on the playstore.

Is the Stage Programmer discontinued?

3 years ago
SOTI MobiControl
ANSWERS
RS
Rafael Schäfer Diamond Contributor
3 years ago

Hi John,

i don't use Stage programmer, so i can't say ayhting to that but do you really need to use it?
What i mean is you could create a Zero-Touch QR Code by yourself where this information (EAP) can be set in "EXTRA_PROVISIONING_WIFI_SECURITY_TYPE" using DPC extras.

You can use these directly then from the welcome screen (tapping x times on the background, so the QR scanner opens). The only problem is, that the information is NOT encrypted. So if someone scans it to a text file or so, they can see the password for wifi etc. in clear text.

JD
John Doe Platinum Contributor
3 years ago

Sounds interesting, but isnt a connection to "internet" also needed for that to work because the qr code function gets downloaded also first to be able to use that?

I will have a look at that.

Enrolling by stageprogrammer or afw#mobicontrol seems to me is the only way for this device i have in my hands at the moment, but i dont want to have all the security weeknesses and extra setup just to get these enrolled on multiple sites.

JD
John Doe Platinum Contributor
3 years ago

Can you send me a link to what the syntax of these barcodes looks like?

RS
Rafael Schäfer Diamond Contributor
3 years ago

Something like this (you have to change the wifi security type to EAP, maybe you need then additional DPC information or different ones regarding wif):

{
"android.app.extra.PROVISIONING_DEVICE_ADMIN_SIGNATURE_CHECKSUM":"hn8mSNJMPcovWbnnWrb-uMpWZjNlNp-jyV_2A-Whumc=",
"android.app.extra.PROVISIONING_DEVICE_ADMIN_COMPONENT_NAME":"net.soti.mobicontrol.androidwork/net.soti.mobicontrol.admin.DeviceAdminAdapter",
"android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION":"http://soti.net/apk/ae2",
"android.app.extra.PROVISIONING_WIFI_SSID":"Your_SSID", 
"android.app.extra.PROVISIONING_WIFI_SECURITY_TYPE":"WPA",
"android.app.extra.PROVISIONING_WIFI_PASSWORD":"Your_PW",
"android.app.extra.PROVISIONING_WIFI_PROXY_HOST":"0.0.0.0",
"android.app.extra.PROVISIONING_WIFI_PROXY_PORT":9999,
"android.app.extra.PROVISIONING_USE_MOBILE_DATA":true,
"android.app.extra.PROVISIONING_TIME_ZONE":"Europe/Amsterdam",
"android.app.extra.PROVISIONING_LOCALE":"de_DE",
"android.app.extra.PROVISIONING_SKIP_ENCRYPTION":true,
"android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE":{
    "enrollmentId":"Your_ID",
    "PROVISIONING_MODE":"FULLY_MANAGED_DEVICE"}
}

Maybe Provisioning_Mode and other options are not needed for you or have to be differentdifferent.

Look them up here: https://developer.android.com/reference/android/app/admin/DevicePolicyManager#EXTRA_PROVISIONING_WIFI_SECURITY_TYPE

This won't work for Zebra (maybe, i have only A8 TC51), they don'T have a Camera QR scanner installed by default. Use StageNow there instead.

JD
John Doe Platinum Contributor
3 years ago

Thanks found the needed parameters, do you just paste this in a qr code barcode generator?

RS
Rafael Schäfer Diamond Contributor
3 years ago

Should be possible.

I wrote a short program on our end to generate those barcodes but this is only for internal use here and only contains the parameters we needed in the past (with showing then the final QR Code and has the option to generate a pdf of if).

MD
Matt Dermody Diamond Contributor
3 years ago

Another common strategy we often see is having a staging network used that has lightweight security to get devices initially enrolled and then using SOTI to push down the production network configuration to the device.

JD
John Doe Platinum Contributor
3 years ago

That would be my solution if i dont find a way around it :)

MB

Hi,

on what Devices you try to send the Configuration?

Honeywell, Zebra, have there owen Staging Programm.

JD
John Doe Platinum Contributor
3 years ago

I know, its a device without any 3rd Party tools it seems for setting DO 

S
SAMOD@SOTI
2 years ago

Hello everyone,

Thank you for posting on SOTI Pulse.

As per your question John Doe, SOTI Stage Programmer is not a discontinued product.

From Managed Google Play Store, the last version was updated on August 27, 2019. Under SECURITY TYPE, I have the following option: NONE, WEP or WPA.

As mentioned in this post, you may use QR Code to enroll your devices. It offers more control and options over your devices. 

Here are some useful links to help you with your query:

SOTI Enrollment Honeywell Android Enterprise devices (From Honeywell - PDF file - You have 3 Methods to enroll your Honeywell devices: QR Code, Honeywell Provisioner and SOTI Stage Programmer)

Using StageNow to Enroll Your Device into SOTI as a Device Owner with a JSON File (From Zebra Technologies)

Android Soti MobiControl - Enterprise Provisioner (From Honeywell)
 

For the QR Code, you may use an online Bar Code generator of your choice. I use a similar format as the one posted in this chat: 


{
"android.app.extra.PROVISIONING_DEVICE_ADMIN_SIGNATURE_CHECKSUM":"hn8mSNJMPcovWbnnWrb-uMpWZjNlNp-jyV_2A-Whumc=",
"android.app.extra.PROVISIONING_DEVICE_ADMIN_COMPONENT_NAME":"net.soti.mobicontrol.androidwork/net.soti.mobicontrol.admin.DeviceAdminAdapter",
"android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION":"http://soti.net/apk/ae2",
"android.app.extra.PROVISIONING_WIFI_SSID":"Your_SSID", 
"android.app.extra.PROVISIONING_WIFI_SECURITY_TYPE":"WPA",
"android.app.extra.PROVISIONING_WIFI_PASSWORD":"Your_PW",
"android.app.extra.PROVISIONING_WIFI_PROXY_HOST":"0.0.0.0",
"android.app.extra.PROVISIONING_WIFI_PROXY_PORT":9999,
"android.app.extra.PROVISIONING_USE_MOBILE_DATA":true,
"android.app.extra.PROVISIONING_TIME_ZONE":"Europe/Amsterdam",
"android.app.extra.PROVISIONING_LOCALE":"de_DE",
"android.app.extra.PROVISIONING_SKIP_ENCRYPTION":true,
"android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE":{
    "enrollmentId":"Your_ID",
    "PROVISIONING_MODE":"FULLY_MANAGED_DEVICE"}
}

You can add/remove some part as per your requirements.

Thank you.

Technical Support | SOTI Inc. |1.905.624.9828 | support@soti.net | www.soti.net |

JD
John Doe Platinum Contributor
2 years ago

How should the file look like when using 802.1x PEAP MSCHAPV2.

Am i able to place the agent apk at "ftp://internalserver.lan/file.apk ?

Because the QR-Reader is already installed on my device so i wont need online connection for the download of the qr code functionality

MK
Martin K. Bronze Contributor
2 years ago

I think the download will only work with http or https

The QR Reader ist part of the images since Android 9, only on Android 7.x and 8.x it has to be downloaded first to be usable, so QR Staging had only a benefit if the device has already Internet over SIM card (or ethernet cradle) 

JD
John Doe Platinum Contributor
2 years ago

I am scanning the following Barcode:

{
"android.app.extra.PROVISIONING_DEVICE_ADMIN_SIGNATURE_CHECKSUM":"hn8mSNJMPcovWbnnWrb-uMpWZjNlNp-jyV_2A-Whumc=",
"android.app.extra.PROVISIONING_DEVICE_ADMIN_COMPONENT_NAME":"net.soti.mobicontrol.androidwork/net.soti.mobicontrol.admin.DeviceAdminAdapter",
"android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION":"http://soti.net/apk/ae2",
"android.app.extra.PROVISIONING_WIFI_SSID":"SSID", 
"android.app.extra.PROVISIONING_WIFI_SECURITY_TYPE":"WPA",
"android.app.extra.PROVISIONING_WIFI_PASSWORD":"Password",
"android.app.extra.PROVISIONING_WIFI_PROXY_HOST":"proxy.company.lan",
"android.app.extra.PROVISIONING_WIFI_PROXY_PORT":8080,
"android.app.extra.PROVISIONING_TIME_ZONE":"Europe/Amsterdam",
"android.app.extra.PROVISIONING_LOCALE":"de_DE",
"android.app.extra.PROVISIONING_SKIP_ENCRYPTION":true,
"android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE":{
    "enrollmentId":"https://server.company.lan/Enroll/ID",
    "PROVISIONING_MODE":"FULLY_MANAGED_DEVICE"}
}

The Device connects to wifi but does not use the proxy, i have tested fqdn and ip adress both do not work.

any idea?

S
SAMOD@SOTI
2 years ago

Hello John Doe,


Sorry for the delay.

As per this above template, if you are not using a Proxy, we could remove those lines.

Regarding the "ftp link", you may be able to use it, but please do some testing beforehand..

Thank you.

Technical Support | SOTI Inc. |1.905.624.9828 | support@soti.net | www.soti.net |

Similar Discussions