How to manage Wi-Fi configurations?
Network security is one of the top IT concerns, and companies are working hard to ensure the Wi-Fi networks that mobile devices can access are identified and verified, for security reasons. In addition, the ability to connect automatically to a network and start working as soon as employees enter the premises is key to maintaining business productivity (especially when they have access to several locations and networks). And that’s exactly why with TinyMDM, you can choose to preconfigure favorite networks, disable Wi-Fi on some devices, forbid connections to unsecured networks, etc.
A. Preconfigure Wi-Fi networks
You can choose to configure Wi-Fi on fully managed devices as well as BYOD devices used for work. This allows Wi-Fi networks to be automatically configured on the devices, without the end-users having to know or type the password.
- Go to the Wi-Fi Networks tab
- Click on either Configure a new wifi network or Configure a new EAP wifi network
- Enter the information of the network: its name (ssid) & password. For EAP Wi-Fi, you will need more info, such as additional passwords or certificates
- All the Wi-Fi networks added will be listed in this tab. You will then be able to push them to the devices through the policies.
B. Push configured networks on devices
- Go on the Policies tab and edit the one you want to push your Wi-Fi networks in
- In the Wi-Fi configuration sub tab, you see multiple settings regarding the Wi-Fi as well as all the networks you have preconfigured.
- By ticking the box next to a network, you will push it on all the devices linked to the policy. It means that as soon as the devices will be near one of those selected networks, they will be connected to internet.
C. Restrict connections only to networks pushed by TinyMDM
To ensure that devices only connect to approved, pre-configured Wi-Fi networks, TinyMDM allows connections to be restricted to pushed networks only via the console. This feature provides enhanced security by preventing connections to unverified networks. To do this, follow the same steps as above:
- Go on the Policies tab and edit the one you want to push your Wi-Fi networks in
- In the Wi-Fi configuration sub tab, you see multiple settings regarding the Wi-Fi as well as all the networks you have preconfigured.
- Tick the Restrict Wi-Fi to TinyMDM networks box
By activating this option, you ensure that your users’ mobile devices can only connect to the Wi-Fi networks you have defined, preventing access to potentially insecure networks.
D. Forget a Wi-Fi network
TinyMDM offers a feature that lets you forget a Wi-Fi network when it is unchecked in the policy. To do this, simply check the Forget Wi-Fi network when unchecked box.
Warning: If the Forget Wi-Fi network when unchecked box is activated and, for whatever reason, the device cannot connect to another network, the device will have to be reset. Make sure you always have an alternative network available to avoid a situation where the device becomes inaccessible.
E. Disable Wi-Fi access on devices
1. Disable unsecured Wi-Fi
By ticking the box Disable unsecured Wi-Fi networks, end users won’t be able to connect to unsecured networks like public hotspots. Please note that this feature in only supported by devices running Android 9 and lower.
2. Disable all Wi-Fi
By ticking the box Disable Wi-Fi, you will deactivate Wi-Fi connection on all devices enrolled in this policy, with no possibility to turn it back on. To activate Wi-Fi again, you will need to share the admin code to the user.
F. Enable Wi-Fi from devices
In fully managed mode, the user has to go on the TinyMDM application of their device. In kiosk mode, this app is called Info. Note: in kiosk mode, you have to approve the app Info beforehand to be able to activate the internet connection.
Then, the user needs to click on Administration tab, then on Enable Wi-Fi and type in the Admin code, visible on the console, under Disable Wi-Fi. Mobile devices will temporary have access to Wi-Fi networks.