Wifi Manager

Overview

The Wi-Fi Manager administers a device's Wi-Fi settings and network profiles for remembering and connecting to networks.

Note: The terms "enable" and "disable" in this CSP are equivalent to "turn on" and "turn off." Those terms in other CSPs refer to the feature's Usage setting, which is the ability of the device user to access the feature at all.

Main Functionality

• Enable Wi-Fi
• Disable Wi-Fi
• Set Wi-Fi to Never Sleep
• Set Wi-Fi to Never Sleep When Plugged In
• Set Wi-Fi to Always Sleep
• Use Network Notifications
• Do Not Use Network Notifications
• Enable Auto Country Selection
• Manually Select country
• Set the RF Band
• Enable Auto RF Band Selection
• Enable Fusion Advanced Logging
• Enable the Device to set the Clock off the AP (Access Point) Time
• Enable HF SR (Hyper Fast Secure Roam)
• Disable HF SR (Hyper Fast Secure Roam)
• Enable CCKM (Cisco Centralized Key Management)
• Disable CCKM (Cisco Centralized Key Management)
• Enable FT (Fast Transition)
• Disable FT (Fast Transition)
• Enable FTRIC (Fast Transition Resource Request)
• Disable FTRIC (Fast Transition Resource Request)
• Enable OKC (Opportunistic Key Caching)
• Disable OKC (Opportunistic Key Caching)
• Enable PMKID Caching
• Disable PMKID Caching
• Enable PreAuth
• Disable PreAuth
• Set Power Savings Mode to Always Active
• Set Power Savings Mode to WMM-PS
• Set Power Savings Mode to Null Data Power Save
• Set Power Savings Mode to PS-POLL
• Enable Advanced Logging
• Disable Advanced Logging
• Enable FIPS Compliance
• Disable FIPS Compliance
• Enable Restricted WLAN Settings UI
• Disable Restricted WLAN Settings UI
• Enable Radio Resource Measurement(802.?11K)
• Disable Radio Resource Measurement(802.?11K)
• Enable Management Frame Protection Mode(802.?11w)
• Disable Management Frame Protection Mode(802.?11w)
• Set the band preference
• Enable FTOverTheDS
• Disable FTOverTheDS
• Enable AggregatedFT
• Disable AggregatedFT
• Enable ScanAssist
• Disable ScanAssist
• Enable Coverage Hole Detection
• Disable Coverage Hole Detection
• Enable Sub-Net Roam
• Disable Sub-Net Roam
• Enable WANCountry
• Disable WANCountry
• Add a Wi-Fi Network
• Remove a Wi-Fi Network
• Connect to a Wi-Fi Network
• Disconnect from a Wi-Fi Network
• Enable an Existing Wi-Fi Network
• Disable an Existing Wi-Fi Network
• Disable all Existing Wi-Fi Networks
• Remove all Existing Wi-Fi Networks

Target OS

Specify the target OS of the device.

Parm Name: TargetOS

Wi-Fi Enable

Turn the Wi-Fi radio on or off.

Note: In order for settings to be applied, Wi-Fi must be turned on. If you do not specify WiFi Enable in the profile, you will get an error when attempting to apply certain settings if the device's Wi-Fi is not already turned on. For example, all of the Network Actions, which are described later in this document, will require that Wi-Fi is turned on. However, other settings, such as Sleep Policy and Network Notification, do not require Wi-Fi to be turned on.

As a best practice, it is recommended that this is turned on whenever setting another Wi-Fi parm that requires to be on, as it is not harmful to enable the Wi-Fi again if it is already on.

Note: In other CSPs, the terms "enable" and "disable" refer to whether or not the user will be allowed to turn the device on or off at all. However, in this CSP, "enable" and "disable" are equivalent to "turn on" and "turn off".

Parm Name: WiFiAction

Sleep Policy

Specifies the state of the Wi-Fi radio when the device suspends.

For Android devices, the device is suspended when the display turns off after idling for a certain amount of time. While the device is suspended, the device's software continues running in a lower power mode, meaning that the device itself is not turned off and software can run when the device is in this state. The amount of power consumption while in this state partially depends on what features are left on.

Parm Name: WifiSleepPolicy

Network Notification

Specifies whether or not to notify the user when an unknown, open network comes in range. If this setting is turned on, the user will be asked if they want to join the network, which could be useful for personal or dual use devices which might want to use a public Wi-Fi connection at some point. However, turning these notifications on is not recommended for devices that are supposed to be used only on a single corporate Wi-Fi network since it might be harmful to offer a user the opportunity to connect to a rogue, non-secure network.

Parm Name: NetworkNotification

Country Selection Auto/Manual

By leaving this option unchecked, the country may be determined by the router or access point setting. To manually select the country, you should select the checkbox. When doing this a country drop-down will appear.

Parm Name: UseRegulatory

Country

Sets the country to use for Wi-Fi regulatory setting.

When you choose 'AUTO' in the drop-down, 802.11d will be enabled. 802.11d is a mode where the device will listen for a country-specific beacon. It also will not transmit unless it can auto-detect the country, which can be beneficial because the device cannot transmit with a frequency that is inconsistent with the Wi-Fi infrastructure and is therefore less likely to violate country-specific regulations.

If a Wi-Fi infrastructure does not support, 802.11d, then the country that is used by this infrastructure will need to be selected so that the device can connect to it.

Shown if: The "Configure Country (Auto/Manual)" box is not checked

Parm Name: Country

RF Band

Specifies the 802.11 band(s) to use. The bands to use will usually be determined automatically through negotiation with the Wi-Fi infrastructure. However, in some cases, the Wi-Fi infrastructure may be shared amongst multiple uses, which may mean that it would be preferable to limit the devices to one band and leave the other bands for other purposes.

Parm Name: BandSelection

2.4GHz Channels

Enable the specified channels in the 2.4GHz band. In most cases, if the 2.4GHZ band is allowed to be used, then the channels in this band that should be used can be determined automatically through negotiation with the Wi-Fi infrastructure. However, it may be beneficial to control the channels manually because different channels or sets of channels might be used for different uses. It may be preferable to limit the devices to only use certain channels so that other channels are left for other purposes.

Parm value input rules:

• String containing a set of valid channels.
  • Not all channels are available in all every country. Please see the link below for more information:
    • https://en.wikipedia.org/wiki/List_of_WLAN_channels
• The minimum length is 0 characters and the maximum length is 64 characters.
• Comma separated and may contain a range specified with a dash '-'. Example: 1,7-10

Shown if: The RF Band that is selected is either 2.4GHz or Auto

Parm Name: 2.4GHzChannels

Requires:

• MX: 4.2+

5.0GHz Channels

Enable the specified channels in the 5.0GHz band. In most cases, if the 5.0GHZ band is allowed to be used, then the channels in this band that should be used can be determined automatically through negotiation with the Wi-Fi infrastructure. However, it may be beneficial to control the channels manually because different channels or sets of channels might be used for different uses. It may be preferable to limit the devices to only use certain channels so that other channels are left for other purposes.

Parm value input rules:

• String containing a set of valid channels.
  • Not all channels are available in all every country. Please see the link below for more information:
    • https://en.wikipedia.org/wiki/List_of_WLAN_channels
• The minimum length is 0 characters and the maximum length is 64 characters.
• Comma separated and may contain a range specified with a dash '-'. Example: 36-60

Shown if: The RF Band that is selected is either 5.0GHz or Auto

Parm Name: 5.0GHzChannels

Requires:

• MX: 4.2+

Specify Diagnostic Options

Specify whether Diagnostic Options will be used. When turned on, Fusion Advanced Logging can also be turned on. This option can be used to collect additional information for troubleshooting but can impact the performance of a device.

Note: In most cases, this option should not be used except under the direction of Zebra support staff.

Parm Name: UseDiagnosticOptions

Fusion Advanced Logging

Specify whether Fusion Advanced Logging will be used

Shown if: The "Specify Diagnostic Options" box is checked

Parm Name: FusionAdvancedLogging

Specify Advanced Options

Specify whether Advanced Options will be used. In most cases, these options should not be used except under the direction of Zebra support staff.

Parm Name: UseAdvancedOptions

Network Action

This is used to manage the Wi-Fi network profiles on the device. A given device can have zero or more Wi-Fi network profiles defined, which are used to specify the information that is needed for the device to connect to a single Wi-Fi network. These profiles can each be enabled or disabled. An enabled Wi-Fi network profile can be used to connect to a network and a disabled profile cannot be used to connect to a network. At any given time, the device can be connected to at most one network using a corresponding Wi-Fi network profile. The potential network connections are controlled by which profiles are defined and enabled on the device. It is also possible to force a connection to the network associated with a specific Wi-Fi network profile.

Parm Name: NetworkAction

SSID

This is the SSID name of the network, which is the primary mechanism used to identify a Wi-Fi network and is used to identify the Wi-Fi network profile to be acted on. Therefore, any Network Action that is used to affect a single profile need to specify the SSID to select the desired profile.

Parm value input rules:

• String with a minimum size of 1 character and a maximum size of 32 characters

Shown if: The Network Action is any option other than "Do Nothing", "Disable All Existing Networks", or "Remove All Existing Networks"

Parm Name: SSID

Requires:

• MX: 4.2+

Security Mode

This indicates that the network uses 802.1x Extensible Authentication Protocol (EAP) security. These networks use authentication to establish the entitlement of a device to join the network and then distribute necessary keys once this entitlement has been verified. Security information pertaining to the EAP type and authentication credentials to be used will need to be supplied to configure these networks.

Shown if: The Network Action is "Add a New Network"

Parm Name: NetworkAction

WPA Mode

When the selected Security Mode is "Personal" or "Enterprise", the WPA Mode must be specified to determine what sort of key will then be used.

Note: WEP is not supported with a Enterprise Security Mode. It is only supported using Personal Security Mode.

Shown if: The Network Action is "Add a New Network" *AND* the Security Mode is "Personal" or "Enterprise"

Parm Name: WPAMode

Authentication

This is the Authentication Mode used by the network. When a Security Mode of "Enterprise" is selected, an Authentication Mode will need to be specified to determine how authentication will be performed as part of the 802.1x EAP type used by the network.

Shown if: The Network Action is "Add a New Network" *AND* the Security Mode is "Enterprise"

Parm Name: Authentication

Identity

Identity is used only when Authentication is used, which also means that this is only used when the Security Mode is "Enterprise".

This parm is used by the device to specify to the Authentication Server the Identity that it wishes to authenticate as. The Identity is synonymous with "user name" in many cases. However, different Authentication Servers can be configured to require different types of Identity, such as email addresses, device unique ID, etc.

The Identity is used as a way of getting accepted by the Authentication Server so that you can receive the encryption key that is needed to operate on the network. Once you are authenticated, the Identity does not have any further meaning and is not used to identify the device on the network.

Specifying an empty (length of zero) value (or the absence of this parm from the XML) will cause the Identity will not be set.

Shown if: The Network Action is "Add a New Network" *AND* the Authentication is "PEAP-NONE"

Parm Name: Identity

Requires:

• MX: 4.2+

Anonymous Identity

When using an EAP type that has a secure tunnel over which authentication credentials can be delivered, it may be necessary to specify an Identity outside the tunnel as well as an Identity inside the tunnel. To protect the actual Identity from disclosure when sending it outside the tunnel, an Anonymous Identity can be sent outside the tunnel and the actual Identity, along with the password or other verifying credentials, can be sent inside the tunnel.

If no Anonymous Identity is specified, then the actual Identity will be sent outside the tunnel, if required. This may not be a problem since the password or other verifying credentials is only sent inside the tunnel, in modes that use a tunnel for secure credential delivery. So, using the actual Identity outside the tunnel would only risk disclosure of part of the information needed to authenticate. A separate Anonymous Identity can only be used if the Authentication Server is set up to support such use.

Specifying an empty (length of zero) value (or the absence of this parm from the XML) will cause the Anonymous Identity will not be set.

Parm value input rules:

• String with a minimum of 0 characters and a maximum of 64 characters

Shown if: The Network Action is "Add a New Network" *AND* the Security Mode is "Enterprise" *AND* the Authentication is not "EAP-TLS" or "LEAP"

Parm Name: AnonymousIdentity

Requires:

• MX: 4.2+

Protect Password

A Password is an authentication credential that is used to prove the authenticity of an Identity and therefore, is only used when the Security Mode is "Enterprise". All Authentication types require a Password except EAP-TLS, which uses a client certificate instead of a Password.

In most cases, it is important to protect a Password since, combined with the matching Identity, it can be used to authenticate and gain access to a network. Since the Password must be embedded within the XML, it is often desirable to encrypt the Password so that i cannot be extracted and exploited if the XML is intercepted. The ProtectPassword parm is used to indicate whether the Password will be specified in clear, unencrypted text or in encrypted form.

Shown if: The Network Action is "Add a New Network" *AND* the Security Mode is "Enterprise" *AND* the Authentication is not "EAP-TLS"

Parm Name: ProtectPassword

Requires:

• MX: 4.2+

Password

The password to be used to connect to the network. The parm name will change depending on the value of ProtectPassword.

Note: Currently, the parm value encryption process is not documented and the key that is needed to encrypt is not published. Therefore, an MDM cannot currently use an encrypted password since there is no way to store an encrypted, server-supplied password in an XML.

Parm value input rules:

• String with a minimum of 0 characters and a maximum of 64 characters

If Protect Password is false:

• Settable if: The Network Action is "Add a New Network" AND the Security Mode is "Enterprise" AND Authentication is not "EAP-TLS" AND Protect Password is false
• Parm name: PasswordClear

If Protect Password is true:

• Settable if: The Network Action is "Add a New Network" AND the Security Mode is "Enterprise" AND Authentication is not "EAP-TLS" AND Protect Password is true
• Parm name: PasswordEncrypted

Parm Name: PasswordClear, PasswordEncrypted

Requires:

• MX: 4.2+

Server Certificate Name

The name of the certificate alias that should be used to verify the server (Optional).

When Security Mode is "Enterprise", the device will not need to authenticate to an Authentication Server using the defined Authentication type. This will involve sending potentially sensitive authentication credentials to the Authentication Server. It is usually not recommended to do this unless the authenticity of the Authentication Server can be verified, for example, ensuring it is not a "man in the middle".

The device contacts and challenges the Authentication Server to assert and prove its Identity through the use of a server certificate. The device must be able to establish the validity of that certificate and must trust the chain of authority of the issuer of that certificate. This would all occur whether or not a Server Certificate Name is specified.

By default, a certificate asserted by an Authentication Server will be trusted if it can be verified to have been validly issued by any trusted certificate authority. If a Server Certificate Name is supplied, then the certificate asserted by an Authentication Server will be trusted only if it is verified to have been validly issued by that specific trusted certificate authority. This increases the security by preventing the use of certificates issued by authorities that are not trusted to issue certificates to authentication servers.

Specifying an empty (length of zero) value (or the absence of this parm from the XML) will cause the Optional Server Certificate to not be set.

Parm value input rules:

• String with a minimum of 0 characters and a maximum of 64 characters

Shown if: The Network Action is "Add a New Network" *AND* the Security Mode is "Enterprise" *AND* the Authentication is "EAP-TLS", "PEAP-MSCHAPV2", "EAP-TTLS-MSCHAP", "EAP-FAST-MSCHAPV2", "EAP-TTLS-PAP", "PEAP-GTC", "EAP-FAST-MSCHAPV2", "EAP-FAST-GTC", or "PEAP-NONE"

Parm Name: OptionalServerCertificate

Requires:

• MX: 4.2+

Mandatory Client Certificate Name

The name of the certificate alias that should be used to join the network (Mandatory). When Authenticating using EAP-TLS, a client certificate is used instead of a Password. Consequently, when Authentication is EAP-TLS, a client certificate must be specified and a Password must not be specified.

Parm value input rules:

• String with a minimum of 0 characters and a maximum of 64 characters

Shown if: The Network Action is "Add a New Network" and the Security Mode is "Enterprise" and the Authentication is "EAP-TLS"

Parm Name: MandatoryClientCertificate

Requires:

• MX: 4.2+

Optional Client Certificate Name

The name of the certificate alias that should be used to join the network (Optional). When Authenticating using EAP types other than EAP-TLS, which would not require a client certificate, a client is still allowed. If used, the client certificate will be used to authenticate the device to the authentication server as part of the establishment of the secure tunnel over which further authentication credentials will be delivered. This means that the client certificate do not need to be unique, even if the authentication credentials are. The use of a client certificate can introduce an additional level of protection by requiring a device to possess a valid client certificate as well as valid authentication credentials. The client certificate serves as a first pass filter.

Specifying an empty (length of zero) value (or the absence of this parm from the XML) will cause the Optional Server Certificate to not be set.

Parm value input rules:

• String with a minimum of 0 characters and a maximum of 64 characters

Shown if: The Network Action is "Add a New Network" and the Security Mode is "Enterprise" the Authentication is "PEAP-MSCHAPV2", "EAP-TTLS-MSCHAP", "EAP-TTLS-MSCHAPV2", "EAP-TTLS-PAP", "PEAP-GTC", "EAP-FAST-MSCHAPV2", "EAP-FAST-GTC", or "PEAP-NONE"

Parm Name: OptionalClientCertificate

Requires:

• MX: 4.2+

WPA Encryption Type

Type of encryption used by the network. The values that can be selected for Encryption Type will vary based on the selections made for Security Mode and WPA Mode. But a selection must always be made for Encryption Type whenever Security Mode is not "Open" (indicating no encryption).

Shown if: The Network Action is "Add a New Network" *AND* the Security Mode is "Personal" or "Enterprise" *AND* the WPA Mode is WPA

Parm Name: EncryptionWPA

WPA2 Encryption Type

Shown if: The Network Action is "Add a New Network" *AND* the Security Mode is "Personal" or "Enterprise" *AND* the WPA Mode is WPA2 or WPA/WPA2

Parm Name: EncryptionWPA2

WEP Encryption Type

Shown if: The Network Action is "Add a New Network" *AND* the Security Mode is "Personal" or "Enterprise" *AND* the WPA Mode is WEP

Parm Name: EncryptionWEP

Key Type

Specify the type of encryption key to be used by the network. This key is only specified when the Security Mode is "Personal" since the "Open" Security Mode does not use encryption and the "Enterprise" Security Mode distributes keys automatically following Authentication.

An encryption key can be specified using one of two methods:

• A hexadecimal value of the actual key
• A passphrase that can be used to generate a key using a pre-defined algorithm

The method that is used usually depends on the configuration of the Wi-Fi infrastructure that implements the network. This is because the key to be used must be known to both the Wi-Fi infrastructure and the client. Therefore, both must use a common method to specify that key.

Shown if: The Network Action is "Add a New Network" and the Security Mode is "Personal"

Parm Name: KeyType

Protect Key

This enables encryption of the Key.

A Key, or the Passphrase used to generate a Key, is generally considered sensitive information since possession of the key for a network grants access to that network. Since the Key or Passphrase must be embedded within the XML, it is often desirable to encrypt the Key or Passphrase so it cannot be extracted and exploited if the XML is intercepted. The WPA Mode and the Key Type, which were previously specified, will determine what type of Key or Passphrase will need to be used. The value selected for the ProtectKey parm will deterime whether the Key or Passphrase will be specified in clear, unencrypted text or encrypted form.

Shown if: The Network Action is "Add a New Network" and the Security Mode is "Personal"

Parm Name: KeyType

Requires:

• MX: 4.2+

Passphrase

This enables encryption of the Key.

When Key Type is Passphrase, then a Passphrase needs to be specified so it can be used to generate a Key. The type of Passphrase required will vary with the WPA Mode specified since it need to be either a WEP Passphrase or a WPA Passphrase.

Note: Currently, the parm value encryption process is not documented and the key that is needed to encrypt is not published. Therefore, an MDM cannot currently use encrypted Keys or Passphrases since there is no way to store an encrypted, server-supplied password in an XML.

If WEP is selected and Protect Key is false:

• Settable if: The Network Action is "Add a New Network" AND the Security Mode is "Personal" AND the Key Type is "Passphrase" AND the WPA Mode is "WEP" AND Protect Key is false
• Parm name: PassphraseWEPClear
• Parm value input rules:
  • String with a minimum of 4 characters and a maximum of 32 characters

If WEP is selected and Protect Key is true:

• Settable if: The Network Action is "Add a New Network" AND the Security Mode is "Personal" AND the Key Type is "Passphrase" AND the WPA Mode is "WEP" AND Protect Key is true
• Parm name: PassphraseWEPEncrypted
• Parm value input rules:
  • String with a minimum of 4 characters and a maximum of 32 characters
• Currently, this parm cannot be used effectively by an MDM.

If WEP is not selected and Protect Key is false:

• Settable if: The Network Action is "Add a New Network" AND the Security Mode is "Personal" AND the Key Type is "Passphrase" AND the WPA Mode is not "WEP" AND Protect Key is false
• Parm name: PassphraseWPAClear
• Parm value input rules:
  • String with a minimum of 8 characters and a maximum of 63 characters

If WEP is not selected and Protect Key is true:

• Settable if: The Network Action is "Add a New Network" AND the Security Mode is "Personal" AND the Key Type is "Passphrase" AND the WPA Mode is not "WEP" AND Protect Key is true
• Parm name: PassphraseWPAEncrypted
• Parm value input rules:
  • String with a minimum of 8 characters and a maximum of 63 characters
• Currently, this parm cannot be used effectively by an MDM.

Parm Name: PassphraseWEPClear, PassphraseWEPEncrypted, PassphraseWPAClear, PassphraseWPAEncrypted

Requires:

• MX: 4.2+

Hex Key

When Key Type is Hex Key, then a Key, which is expressed as a sequence of hexadecimal characters, needs to be specified. The type of Key required will vary based on the WPA Mode and Encryption Type specified, since it will need to be either a WEP 40 bit Key, a WEP 104 bit Key, or a 256 bit TKIP/AES-CCMP Key.

Note: Currently, the parm value encryption process is not documented and the key that is needed to encrypt is not published. Therefore, an MDM cannot currently use encrypted Keys or Passphrases since there is no way to store an encrypted, server-supplied password in an XML.

If WEP is not selected and Protect Key is false:

• Settable if: The Network Action is "Add a New Network" AND the Security Mode is "Personal" AND the Key Type is "Hex Key" AND the WPA Mode is not "WEP" AND Protect Key is false
• Parm name: HexKeyClear
• Description: Provide the hex key (64 hex chars) used by network
• Parm value input rules:
  • String with exactly 64 valid hexadecimal characters (e.g. 0-9, A-F) that collectively specify a 256 bit binary key value that can be used for either TKIP or AES-CCMP encryption.

If WEP is not selected and Protect Key is true:

• Settable if: The Network Action is "Add a New Network" AND the Security Mode is "Personal" AND the Key Type is "Hex Key" AND the WPA Mode is not "WEP" AND Protect Key is true
• Parm name: HexKeyEncrypted
• Description: Provide the hex key (64 hex chars) used by network
• Parm value input rules:
  • String with exactly 64 valid hexadecimal characters (e.g. 0-9, A-F) that collectively specify a 256 bit binary key value that can be used for either TKIP or AES-CCMP encryption.
• Currently, this parm cannot be used effectively by an MDM.

If WEP is selected, the encryption type is WEP-40, and Protect Key is false:

• Settable if: The Network Action is "Add a New Network" AND the Security Mode is "Personal" AND the Key Type is "Hex Key" AND the WPA Mode is "WEP" AND the Encryption Type is "WEP-40" AND Protect Key is false
• Parm name: HexKeyWep40Clear
• Description: Provide the shared secret WEP-40 key (10 hex chars) used by the network
• Parm value input rules:
  • String with exactly 10 valid hexadecimal characters (e.g. 0-9, A-F) that collectively specify a 40 bit binary key value that can be used for either WEP encryption.

If WEP is selected, the encryption type is WEP-40, and Protect Key is true:

• Settable if: The Network Action is "Add a New Network" AND the Security Mode is "Personal" AND the Key Type is "Hex Key" AND the WPA Mode is "WEP" AND the Encryption Type is "WEP-40" AND Protect Key is true
• Parm name: HexKeyWep40Encrypted
• Description: Provide the shared secret WEP-40 key (10 hex chars) used by the network
• Parm value input rules:
  • String with exactly 10 valid hexadecimal characters (e.g. 0-9, A-F) that collectively specify a 40 bit binary key value that can be used for either WEP encryption.
• Currently, this parm cannot be used effectively by an MDM.

If WEP is selected, the encryption type is WEP-104, and Protect Key is false:

• Settable if: The Network Action is "Add a New Network" AND the Security Mode is "Personal" AND the Key Type is "Hex Key" AND the WPA Mode is "WEP" AND the Encryption Type is "WEP-104" AND Protect Key is false
• Parm name: HexKeyWep104Clear
• Description: Provide the shared secret WEP-104 key (26 hex chars) used by the network
• Parm value input rules:
  • String with exactly 26 valid hexadecimal characters (e.g. 0-9, A-F) that collectively specify a 104 bit binary key value that can be used for either WEP encryption.

If WEP is selected, the encryption type is WEP-104, and Protect Key is true:

• Settable if: The Network Action is "Add a New Network" AND the Security Mode is "Personal" AND the Key Type is "Hex Key" AND the WPA Mode is "WEP" AND the Encryption Type is "WEP-104" AND Protect Key is true
• Parm name: HexKeyWep104Encrypted
• Description: Provide the shared secret WEP-104 key (26 hex chars) used by the network
• Parm value input rules:
  • String with exactly 26 valid hexadecimal characters (e.g. 0-9, A-F) that collectively specify a 104 bit binary key value that can be used for either WEP encryption.
• Currently, this parm cannot be used effectively by an MDM.

Parm Name: HexKeyWEPClear, HexKeyWEPEncrypted, HexKeyWPAClear, HexKeyWPAEncrypted

Requires:

• MX: 4.2+

WEP Key Index

Some Wi-Fi infrastructure that implements a network using WEP encryption may support multiple WEP keys and a WEP index to indicate which key to use at any given time.

Note: Android does not currently support multiple WEP keys per network. Therefore, only the first WEP key (wep[0]) is supported.

Shown if: The Network Action is "Add a New Network" *AND* the Security Mode is "Personal" *AND* the WPA Mode is "WEP"

Parm Name: WepKeyIndex

Use DHCP

When this parm is selected, DHCP will be used. When not selected, Static IP address is used.

Most modern networks use DHCP to automatically assign IP Addresses to devices when they join the network. If DHCP is used, then all requisite IP Address information will be obtained automatically and no additional information will need to be provided.

If DHCP cannot be used for a particular network, then all IP Address information that is needed to operate on that network will need to be specified. None of the following IP Address information parms can be left blank, but they may not all require meaningful values, depending on the network.

Shown if: The Network Action is "Add a New Network" *AND* the Security Mode is "Personal" *AND* the WPA Mode is "WEP"

Parm Name: UseDHCP

Requires:

• MX: 4.2+

Static IP Address

Provide the static IP address to be assigned to the device on this network.

When not using DHCP, a valid IP Address for the device to use on the network must be specified and that IP Address must not be assigned to any other device on the same network.

Parm value input rules:

• Must be a valid IPV4 address, example: 191.168.0.1

Shown if: The Network Action is "Add a New Network" *AND* the "Use DHCP" box is not checked

Parm Name: IpAddress

Requires:

• MX: 4.2+

Gateway 1 IP Address

Provide the IP address of the first gateway to the network.

When not using DHCP, a valid Gateway IP Address may or may not be required. If there is a Gateway that can route traffic out of the current network, then the IP Address of that Gateway should be specified if the device will need to send traffic outside that network. If the network is essentially self-contained, then it may not be important what value is specified for this parm.

Parm value input rules:

• Must be a valid IPV4 address, example: 191.168.0.1

Shown if: The Network Action is "Add a New Network" *AND* the "Use DHCP" box is not checked

Parm Name: IpGateway1

Requires:

• MX: 4.2+

Subnet Mask

Provide the subnet mask to be used on the network.

When not using DHCP, a subnet mask must be specified that is consistent with the network and is consistent with the IP Address assigned to the device for use on that network.

Parm value input rules:

• Must be a valid IPV4 subnet mask, example: 255.255.255.0

Shown if: The Network Action is "Add a New Network" *AND* the "Use DHCP" box is not checked

Parm Name: IpMask

Requires:

• MX: 4.2+

DNS Server 1 IP Address

Provide the IP address of the DNS server.

When not using DHCP, a valid DNS Server IP Address may or may not be required. If there is a DNS Server that can resolve network names to IP Addresses on the current network, then the IP Address of that server should be specified if the device will need to resolve names for that network. If name resolution is not required, then it may not be important what value is specified for this parm.

Parm value input rules IpDns1:

• Must be a valid IPV4 address, example: 191.168.0.1

Parm value input rules IpDns2:

• Must be a valid IPV4 address, example: 191.168.0.1
• If no alternate DNS Server is available or required, then it may not be important what value is specified for this parm.
• Specifying an empty (length of zero) value (or the absence of this parm from the XML) will cause the DNS Server 2 IP Address to not be set.

Shown if: The Network Action is "Add a New Network" *AND* the "Use DHCP" box is not checked

Parm Name: IpDns1, IpDns2

Requires:

• MX: 4.2+

Use Proxy

When selected, a Proxy is used for network connections. You can either manually configure the proxy settings or select the location of a PAC file for automatic configuration. A proxy is a an intermediary service that routes HTTP requests and responses between clients on a device and another network (typically the internet or an intranet). When there is a proxy between the Wi-Fi network and some outer network, then HTTP-based applications, such as a Web Browser, may need to negotiate with that proxy to access the services of that outer network.

Note: In MX 5.0, the parm data type changed from a Boolean to a value selected from the UseProxy list. Please check the list above.

Parm Name: UseProxy

Proxy Host Name

Provide the Host Name or IP Address of the computer on which the proxy is running. Host Name can be used only if the network provides suitable name resolution. Otherwise, an IP Address would need to be provided.

Since different Wi-Fi networks may have different proxies connecting them to different outer networks, proxy information, if needed, must be configured for each network.

Parm value input rules:

• String with a minimum of 1 characters and a maximum of 64 characters

Shown if: The Network Action is "Add a New Network" *AND* "Use Proxy" is set to manual.

Parm Name: ProxyHostName

Requires:

• MX: 4.2+

PAC File Url

Provide the Host Name or IP Address of the location of where the proxy PAC file is located. This can be used only if the network provides suitable name resolution. Otherwise, an IP Address would need to be provided.

Since different Wi-Fi networks may have different proxies connecting them to different outer networks, proxy information, if needed, must be configured for each network.

Parm value input rules:

• String with a minimum of 1 characters and a maximum of 64 characters

Shown if: The Network Action is "Add a New Network" *AND* "Use Proxy" is set to Proxy Auto-Config.

Parm Name: PROXYPAC

Requires:

• MX: 5.0+

Proxy Port

Provide the port number of the proxy server on the computer on which the proxy is running on which the proxy is listening.

Shown if: The Network Action is "Add a New Network" *AND* "Use Proxy" is set to manual.

Parm Name: ProxyPort

Requires:

• MX: 4.2+

Proxy Bypass

Once a proxy is configured for a given network, all HTTP traffic will generally be routed to the outer network via that proxy.

In some cases, it may be desirable to avoid routing selected Host Names or IP Addresses through the proxy. For example, you might want to access a local Web Server. This can be accomplished by listing the Host Names or IP Addresses for which the Proxy should be bypassed. To specify multiple Host Names or IP Addresses, separate them with commas.

Parm value input rules:

• String with a maximum of 256 characters

Shown if: The Network Action is "Add a New Network" *AND* "Use Proxy" is set to manual.

Parm Name: BypassProxy

Requires:

• MX: 4.2+

Advanced Options

DISCLAIMER: The advanced options shown below are only to be used under the guidance of Zebra Support personal. Do not attempt to use these features on your own, doing so may result in undesirable results.

Note: The following steps must be followed in order to use the Advanced Options under the WiFi feature:

• PMKID must be turned on in order to enable PreAuth (PreAuth =1 and PMKID =1)
• FT must be turned on in order to enable FTRIC (FT=1 and FTRIC =1)
• OKC must be turned off (OKC =0 and PMKID =1) in order to use PMKID caching

Important Note: The default "Fast Power Savings" value must be used for the "Power Save" parameter under the Advanced Options. Using the "Do Not Change" value will result in failure.

Auto Time Config

Note: This advanced option is only to be used under the guidance of Zebra Support personal. Do not attempt to use these features on your own, doing so may result in undesirable results.

Enable AutoTimeConfig feature. Updates device timestamp based on Zebra IE in 802.11 beacon. This is a Zebra specific feature.

Shown if: The "Specify Advanced Options" box is enabled.

Parm Name: AutoTimeConfig

Requires:

• MX: 4.2+

HFSR

Note: This advanced option is only to be used under the guidance of Zebra Support personal. Do not attempt to use these features on your own, doing so may result in undesirable results.

Hyper Fast Secure Roam (HFSR) is a Zebra's fast roam algorithm.

Shown if: The "Specify Advanced Options" box is enabled.

Parm Name: HFSR

Requires:

• MX: 4.2+

CKM

Note: This advanced option is only to be used under the guidance of Zebra Support personal. Do not attempt to use these features on your own, doing so may result in undesirable results.

This parm is to enable / disable CCX roam algorithm (CCKM).

Shown if: The "Specify Advanced Options" box is enabled.

Parm Name: CCKM

Requires:

• MX: 4.2+

Aggregated Fast TRansition

Note: This advanced option is only to be used under the guidance of Zebra Support personal. Do not attempt to use these features on your own, doing so may result in undesirable results.

This is to enable / disable Fast Transition roam algorithm (802.11r). Aggregated FT improves on IEEE 802.11r, Over-the-DS fast roaming. In conjunction with Zebra wireless LAN infrastructure, the device will achieve more reliable and consistent fast roaming.

Default: enabled.

Shown if: The "Specify Advanced Options" box is enabled.

Parm Name: FT

Requires:

• MX: 4.2+

FTRIC

Note: This advanced option is only to be used under the guidance of Zebra Support personal. Do not attempt to use these features on your own, doing so may result in undesirable results.

This is to enable / disable Fast Transition Resource Request (802.11r).

Shown if: The "Specify Advanced Options" box is enabled.

Parm Name: FTRIC

Requires:

• MX: 4.2+

OKC

Note: This advanced option is only to be used under the guidance of Zebra Support personal. Do not attempt to use these features on your own, doing so may result in undesirable results.

This is to enable / disable Opportunistic Key Caching (OKC).

Shown if: The "Specify Advanced Options" box is enabled.

Parm Name: OKC

Requires:

• MX: 4.2+

Pre-Auth

Note: This advanced option is only to be used under the guidance of Zebra Support personal. Do not attempt to use these features on your own, doing so may result in undesirable results.

This is to enable / disable 802.1x Pre-Authentication.

Shown if: The "Specify Advanced Options" box is enabled.

Parm Name: PreAuth

Requires:

• MX: 4.2+

Power Save Mode

Note: This advanced option is only to be used under the guidance of Zebra Support personal. Do not attempt to use these features on your own, doing so may result in undesirable results.

This option is to configure different Power Save Modes of Radio.

Shown if: The "Specify Advanced Options" box is enabled.

Parm Name: PowerSave

PMKID

Note: This advanced option is only to be used under the guidance of Zebra Support personal. Do not attempt to use these features on your own, doing so may result in undesirable results.

This is to enable / disable PMKID Caching. We need to disable OKC and enable PMKID for PMKID caching to work.

Shown if: The "Specify Advanced Options" box is enabled.

Parm Name: PMKID

Requires:

• MX: 4.2+

WLAN Power Save Mode

Note: This advanced option is only to be used under the guidance of Zebra Support personal. Do not attempt to use these features on your own, doing so may result in undesirable results.

This option is to configure different WLAN Power Save Modes of Radio.

Shown if: The "Specify Advanced Options" box is enabled.

Parm Name: WLANPowerSave

Advanced Logging

Note: This advanced option is only to be used under the guidance of Zebra Support personal. Do not attempt to use these features on your own, doing so may result in undesirable results.

Start or Stop advanced Wi-Fi logging.

Shown if: The "Specify Advanced Options" box is enabled.

Parm Name: AdvancedLogging

Requires:

• MX: 4.2+

FIPS

Note: This advanced option is only to be used under the guidance of Zebra Support personal. Do not attempt to use these features on your own, doing so may result in undesirable results.

Use this option to enable or disable FIPS data in motion supported in WLAN. WLAN FIPS 140-2, level 1 compliance.

Shown if: The "Specify Advanced Options" box is enabled.

Parm Name: FIPS

Requires:

• MX: 4.2+

Enable Restricted Settings UI

Note: This advanced option is only to be used under the guidance of Zebra Support personal. Do not attempt to use these features on your own, doing so may result in undesirable results.

When enabled the Wi-Fi settings will be in Read-Only mode.

Shown if: The "Specify Advanced Options" box is enabled.

Parm Name: PowerSave

Radio Resource Measurement(802.11K)

Note: This advanced option is only to be used under the guidance of Zebra Support personal. Do not attempt to use these features on your own, doing so may result in undesirable results.

Specify whether to enable Radio Resource Measurement.

Shown if: The "Specify Advanced Options" box is enabled.

Parm Name: 802.11K

Requires:

• MX: 4.3+

Management Frame Protection Mode(802.11w)

Note: This advanced option is only to be used under the guidance of Zebra Support personal. Do not attempt to use these features on your own, doing so may result in undesirable results.

Specify the Management Frame Protection Mode

Shown if: The "Specify Advanced Options" box is enabled.

Parm Name: 802.11w

Select your band preference

Note: This advanced option is only to be used under the guidance of Zebra Support personal. Do not attempt to use these features on your own, doing so may result in undesirable results.

Specify the band preference

Shown if: The "Specify Advanced Options" box is enabled.

Parm Name: BandPreference

FT Over The DS

Note: This advanced option is only to be used under the guidance of Zebra Support personal. Do not attempt to use these features on your own, doing so may result in undesirable results.

Specify whether to enable FTOverTheDS. FT Over-the-DS is a fast roam standard (802.11r Over-the-DS). It reduces the number frames exchanged when the device roams from one AP to another if the infrastructure also supports 802.11r Over-the-DS standard.

Default: enabled.

Shown if: The "Specify Advanced Options" box is enabled.

Parm Name: FTOverTheDS

Requires:

• MX: 4.3+

AggregatedFT

Note: This advanced option is only to be used under the guidance of Zebra Support personal. Do not attempt to use these features on your own, doing so may result in undesirable results.

Specify whether to enable AggregatedFT.

Shown if: The "Specify Advanced Options" box is enabled.

Parm Name: AggregatedFT

Requires:

• MX: 4.3+

ScanAssist

Note: This advanced option is only to be used under the guidance of Zebra Support personal. Do not attempt to use these features on your own, doing so may result in undesirable results.

Specify whether to enable ScanAssist. The device monitors neighbor access points and retrieves roaming related information from the Zebra wireless LAN infrastructure without doing scans. Using this Scan Assist feature, the device improves roaming.

Default: enabled.

Shown if: The "Specify Advanced Options" box is enabled.

Parm Name: ScanAssist

Requires:

• MX: 4.3+

Coverage Hole Detection

Note: This advanced option is only to be used under the guidance of Zebra Support personal. Do not attempt to use these features on your own, doing so may result in undesirable results.

Specify whether to enable coverage hole detection. When enabled, it will report gaps in signal coverage to the Zebra wireless LAN infrastructure. Network administrators can detect and mitigate coverage gaps present in the network for greater reliability.

Default: enabled.

Shown if: The "Specify Advanced Options" box is enabled.

Parm Name: CHD

Requires:

• MX: 4.3+

Subnet Roam

Note: This advanced option is only to be used under the guidance of Zebra Support personal. Do not attempt to use these features on your own, doing so may result in undesirable results.

Specify whether to enable subnet roaming.

Shown if: The "Specify Advanced Options" box is enabled.

Parm Name: SubNetRoam

Requires:

• MX: 4.4+

WAN Country

Note: This advanced option is only to be used under the guidance of Zebra Support personal. Do not attempt to use these features on your own, doing so may result in undesirable results.

Specify whether to enable WAN Country. WLAN regulatory gets country info from WAN Interface (GSM/CDMA base Station) and applies regulatory rules based On the Country Code received from WAN interface.

Supported only on WAN based devices: ex: TC75 Android KK.

Shown if: The "Specify Advanced Options" box is enabled.

Parm Name: WANCountry

Requires:

• MX: 4.3+

Examples

Managing Certificates Related to Wi-Fi Networks

Initialize the Android KeyStore

Note: This must be done for a new device before you can install certificates.

Without a password

<wap-provisioningdoc>
    <characteristic type="CertMgr" version="4.2" >
        <parm name="CertAction" value="4"/>
    </characteristic>
</wap-provisioningdoc>

With a password

<wap-provisioningdoc>
    <characteristic type="CertMgr" version="4.2" >
        <parm name="CertAction" value="4"/>
        <characteristic type="keystore-details">
            <parm name="KeystorePassword" value="password"/>
        </characteristic>
    </characteristic>
</wap-provisioningdoc>

Remove a Certificate

<wap-provisioningdoc>
    <characteristic type="CertMgr" version="4.2" >
        <parm name="CertAction" value="2"/>
        <characteristic type="cert-details">
            <parm name="CertAlias" value="certName1"/>
        </characteristic>
    </characteristic>
</wap-provisioningdoc>

Install a CA certificate (.PEM file)

<wap-provisioningdoc>
    <characteristic type="CertMgr" version="4.2" >
        <parm name="CertAction" value="1"/>
        <characteristic type="cert-details">
            <parm name="CertAlias" value="certName2"/>
            <parm name="CertType" value="5"/>
            <parm name="CertMethod" value="2"/>
            <parm name="CertFileCA" value="/path/to/cert.pem"/>
            <parm name="CertAdjustClock" value="false"/>
        </characteristic>
    </characteristic>
</wap-provisioningdoc>

Install a client certificate (.PEM file)

<wap-provisioningdoc>
    <characteristic type="CertMgr" version="4.2" >
        <parm name="CertAction" value="1"/>
        <characteristic type="cert-details">
            <parm name="CertAlias" value="certName2"/>
            <parm name="CertType" value="6"/>
            <parm name="CertMethod" value="2"/>
            <parm name="CertFileClient" value="/path/to/cert.pem"/>
            <parm name="CertAdjustClock" value="false"/>
        </characteristic>
    </characteristic>
</wap-provisioningdoc>

Install a client certificate and private key (.PFX file)

<wap-provisioningdoc>
    <characteristic type="CertMgr" version="4.2" >
        <parm name="CertAction" value="1"/>
        <characteristic type="cert-details">
            <parm name="CertAlias" value="certName2"/>
            <parm name="CertType" value="8"/>
            <parm name="CertMethod" value="2"/>
            <parm name="CertFileClient" value="/path/to/cert.pem"/>
            <parm name="CertAdjustClock" value="false"/>
            <parm name="PrivateKeyPassword" value="pass"/>
        </characteristic>
    </characteristic>
</wap-provisioningdoc>

Install a client certificate and private key (.P12 file)

<wap-provisioningdoc>
    <characteristic type="CertMgr" version="4.2" >
        <parm name="CertAction" value="1"/>
        <characteristic type="cert-details">
            <parm name="CertAlias" value="certName2"/>
            <parm name="CertType" value="9"/>
            <parm name="CertMethod" value="2"/>
            <parm name="CertFileClient" value="/path/to/cert.pem"/>
            <parm name="CertAdjustClock" value="false"/>
            <parm name="PrivateKeyPassword" value="pass"/>
        </characteristic>
    </characteristic>
</wap-provisioningdoc>

Install a client certificate and private key (.PKCS12 file)

<wap-provisioningdoc>
    <characteristic type="CertMgr" version="4.2" >
        <parm name="CertAction" value="1"/>
        <characteristic type="cert-details">
            <parm name="CertAlias" value="certName2"/>
            <parm name="CertType" value="9"/>
            <parm name="CertMethod" value="10"/>
            <parm name="CertFileClient" value="/path/to/cert.pem"/>
            <parm name="CertAdjustClock" value="false"/>
            <parm name="PrivateKeyPassword" value="pass"/>
        </characteristic>
    </characteristic>
</wap-provisioningdoc>

Country Selection

Selecting a Country

<wap-provisioningdoc>
    <characteristic type="Wi-Fi" version="4.4" >
        <parm name="UseRegulatory" value="1"/>
        <characteristic type="Regulatory">
            <parm name="Country" value="US"/>
        </characteristic>
        <parm name="UseDiagnosticOptions" value="0"/>
        <parm name="UseAdvancedOptions" value="0"/>
    </characteristic>
</wap-provisioningdoc>

Using the Auto Option

<wap-provisioningdoc>
    <characteristic type="Wi-Fi" version="4.4" >
        <parm name="UseRegulatory" value="1"/>
        <characteristic type="Regulatory">
            <parm name="Country" value="AUTO"/>
        </characteristic>
        <parm name="UseDiagnosticOptions" value="0"/>
        <parm name="UseAdvancedOptions" value="0"/>
    </characteristic>
</wap-provisioningdoc>

Band Selection

Set 2.4 GHz

<wap-provisioningdoc>
    <characteristic type="Wi-Fi" version="4.4" >
        <parm name="UseRegulatory" value="0"/>
        <characteristic type="Radio">
            <parm name="BandSelection" value="2.4GHz"/>
            <characteristic type="ChannelSelection">
                <parm name="2.4GHzChannels" value="1"/>
            </characteristic>
        </characteristic>
        <parm name="UseDiagnosticOptions" value="0"/>
        <parm name="UseAdvancedOptions" value="0"/>
    </characteristic>
</wap-provisioningdoc>

Set 5.0 GHz

<wap-provisioningdoc>
    <characteristic type="Wi-Fi" version="4.4" >
        <parm name="UseRegulatory" value="0"/>
        <characteristic type="Radio">
            <parm name="BandSelection" value="5.0GHz"/>
            <characteristic type="ChannelSelection">
                <parm name="5.0GHzChannels" value="36"/>
            </characteristic>
        </characteristic>
        <parm name="UseDiagnosticOptions" value="0"/>
        <parm name="UseAdvancedOptions" value="0"/>
    </characteristic>
</wap-provisioningdoc>

Set Auto (both 2.4 and 5.0 GHz)

<wap-provisioningdoc>
    <characteristic type="Wi-Fi" version="4.4" >
        <parm name="UseRegulatory" value="0"/>
        <characteristic type="Radio">
            <parm name="BandSelection" value="Auto"/>
            <characteristic type="ChannelSelection">
                <parm name="2.4GHzChannels" value="1"/>
                <parm name="5.0GHzChannels" value="36"/>
            </characteristic>
        </characteristic>
        <parm name="UseDiagnosticOptions" value="0"/>
        <parm name="UseAdvancedOptions" value="0"/>
    </characteristic>
</wap-provisioningdoc>

Add Wi-Fi Network

Adding an Open Network

<wap-provisioningdoc>
    <characteristic type="Wi-Fi" version="4.4" >
        <parm name="UseRegulatory" value="0"/>
        <parm name="UseDiagnosticOptions" value="0"/>
        <parm name="UseAdvancedOptions" value="0"/>
        <parm name="NetworkAction" value="Add"/>
        <characteristic type="network-profile">
            <parm name="SSID" value="Zebra"/>
            <parm name="SecurityMode" value="0"/>
            <parm name="UseDHCP" value="1"/>
            <parm name="UseProxy" value="0"/>
        </characteristic>
    </characteristic>
</wap-provisioningdoc>

Adding a Personal Network with WPA

<wap-provisioningdoc>
    <characteristic type="Wi-Fi" version="4.4" >
        <parm name="UseRegulatory" value="0"/>
        <parm name="UseDiagnosticOptions" value="0"/>
        <parm name="UseAdvancedOptions" value="0"/>
        <parm name="NetworkAction" value="Add"/>
        <characteristic type="network-profile">
            <parm name="SSID" value="Zebra"/>
            <parm name="SecurityMode" value="1"/>
            <parm name="WPAMode" value="1"/>
            <characteristic type="key-details">
                <parm name="KeyType" value="Passphrase"/>
                <parm name="ProtectKey" value="0"/>
                <parm name="PassphraseWPAClear" value="KsdU6X3u"/>
            </characteristic>
            <parm name="UseDHCP" value="1"/>
            <parm name="UseProxy" value="0"/>
        </characteristic>
    </characteristic>
</wap-provisioningdoc>

Adding a Personal Network with WPA and TKIP

<wap-provisioningdoc>
    <characteristic type="Wi-Fi" version="4.4" >
        <parm name="UseRegulatory" value="0"/>
        <parm name="UseDiagnosticOptions" value="0"/>
        <parm name="UseAdvancedOptions" value="0"/>
        <parm name="NetworkAction" value="Add"/>
        <characteristic type="network-profile">
            <parm name="SSID" value="Zebra"/>
            <parm name="SecurityMode" value="1"/>
            <parm name="WPAMode" value="1"/>
            <characteristic type="auth-details">
                <characteristic type="encryption-details">
                    <parm name="EncryptionWPA" value="1"/>
                </characteristic>
            </characteristic>
            <characteristic type="key-details">
                <parm name="KeyType" value="Passphrase"/>
                <parm name="ProtectKey" value="0"/>
                <parm name="PassphraseWPAClear" value="KsdU6X3u"/>
            </characteristic>
            <parm name="UseDHCP" value="1"/>
            <parm name="UseProxy" value="0"/>
        </characteristic>
    </characteristic>
</wap-provisioningdoc>

Adding a Personal Network with WPA2

<wap-provisioningdoc>
    <characteristic type="Wi-Fi" version="4.4" >
        <parm name="UseRegulatory" value="0"/>
        <parm name="UseDiagnosticOptions" value="0"/>
        <parm name="UseAdvancedOptions" value="0"/>
        <parm name="NetworkAction" value="Add"/>
        <characteristic type="network-profile">
            <parm name="SSID" value="Zebra"/>
            <parm name="SecurityMode" value="1"/>
            <parm name="WPAMode" value="2"/>
            <characteristic type="key-details">
                <parm name="KeyType" value="Passphrase"/>
                <parm name="ProtectKey" value="0"/>
                <parm name="PassphraseWPAClear" value="KsdU6X3u"/>
            </characteristic>
            <parm name="UseDHCP" value="1"/>
            <parm name="UseProxy" value="0"/>
        </characteristic>
    </characteristic>
</wap-provisioningdoc>

Adding a Personal Network with WPA/WPA2

<wap-provisioningdoc>
    <characteristic type="Wi-Fi" version="4.4" >
        <parm name="UseRegulatory" value="0"/>
        <parm name="UseDiagnosticOptions" value="0"/>
        <parm name="UseAdvancedOptions" value="0"/>
        <parm name="NetworkAction" value="Add"/>
        <characteristic type="network-profile">
            <parm name="SSID" value="Zebra"/>
            <parm name="SecurityMode" value="1"/>
            <parm name="WPAMode" value="3"/>
            <characteristic type="key-details">
                <parm name="KeyType" value="Passphrase"/>
                <parm name="ProtectKey" value="0"/>
                <parm name="PassphraseWPAClear" value="KsdU6X3u"/>
            </characteristic>
            <parm name="UseDHCP" value="1"/>
            <parm name="UseProxy" value="0"/>
        </characteristic>
    </characteristic>
</wap-provisioningdoc>

Adding a Personal Network with WEP

<wap-provisioningdoc>
    <characteristic type="Wi-Fi" version="4.4" >
        <parm name="UseRegulatory" value="0"/>
        <parm name="UseDiagnosticOptions" value="0"/>
        <parm name="UseAdvancedOptions" value="0"/>
        <parm name="NetworkAction" value="Add"/>
        <characteristic type="network-profile">
            <parm name="SSID" value="Zebra"/>
            <parm name="SecurityMode" value="1"/>
            <parm name="WPAMode" value="4"/>
            <characteristic type="auth-details">
                <characteristic type="encryption-details">
                    <parm name="EncryptionWEP" value="1"/>
                </characteristic>
            </characteristic>
            <characteristic type="key-details">
                <parm name="KeyType" value="Passphrase"/>
                <parm name="ProtectKey" value="0"/>
                <parm name="PassphraseWEPClear" value="KsdU6X3u"/>
                <parm name="WepKeyIndex" value="1"/>
            </characteristic>
            <parm name="UseDHCP" value="1"/>
            <parm name="UseProxy" value="0"/>
        </characteristic>
    </characteristic>
</wap-provisioningdoc>

Adding an Enterprise Network with WPA

<wap-provisioningdoc>
    <characteristic type="Wi-Fi" version="4.4" >
        <parm name="UseRegulatory" value="0"/>
        <parm name="UseDiagnosticOptions" value="0"/>
        <parm name="UseAdvancedOptions" value="0"/>
        <parm name="NetworkAction" value="Add"/>
        <characteristic type="network-profile">
            <parm name="SSID" value="Zebra"/>
            <parm name="SecurityMode" value="2"/>
            <parm name="WPAMode" value="1"/>
            <parm name="Authentication" value="1"/>
            <characteristic type="auth-details">
                <parm name="OptionalServerCertificate" value="serverCertName"/>
                <parm name="MandatoryClientCertificate" value="clientCertName"/>
            </characteristic>
            <parm name="UseDHCP" value="1"/>
            <parm name="UseProxy" value="0"/>
        </characteristic>
    </characteristic>
</wap-provisioningdoc>

Adding an Enterprise Network with WPA2

<wap-provisioningdoc>
    <characteristic type="Wi-Fi" version="4.4" >
        <parm name="UseRegulatory" value="0"/>
        <parm name="UseDiagnosticOptions" value="0"/>
        <parm name="UseAdvancedOptions" value="0"/>
        <parm name="NetworkAction" value="Add"/>
        <characteristic type="network-profile">
            <parm name="SSID" value="Zebra"/>
            <parm name="SecurityMode" value="2"/>
            <parm name="WPAMode" value="2"/>
            <parm name="Authentication" value="1"/>
            <characteristic type="auth-details">
                <parm name="OptionalServerCertificate" value="serverCertName"/>
                <parm name="MandatoryClientCertificate" value="clientCertName"/>
            </characteristic>
            <parm name="UseDHCP" value="1"/>
            <parm name="UseProxy" value="0"/>
        </characteristic>
    </characteristic>
</wap-provisioningdoc>

Adding an Enterprise Network with WPA/WPA2

<wap-provisioningdoc>
    <characteristic type="Wi-Fi" version="4.4" >
        <parm name="UseRegulatory" value="0"/>
        <parm name="UseDiagnosticOptions" value="0"/>
        <parm name="UseAdvancedOptions" value="0"/>
        <parm name="NetworkAction" value="Add"/>
        <characteristic type="network-profile">
            <parm name="SSID" value="Zebra"/>
            <parm name="SecurityMode" value="2"/>
            <parm name="WPAMode" value="3"/>
            <parm name="Authentication" value="1"/>
            <characteristic type="auth-details">
                <parm name="OptionalServerCertificate" value="serverCertName"/>
                <parm name="MandatoryClientCertificate" value="clientCertName"/>
            </characteristic>
            <parm name="UseDHCP" value="1"/>
            <parm name="UseProxy" value="0"/>
        </characteristic>
    </characteristic>
</wap-provisioningdoc>

Adding an Enterprise Network with WEP

<wap-provisioningdoc>
    <characteristic type="Wi-Fi" version="4.4" >
        <parm name="UseRegulatory" value="0"/>
        <parm name="UseDiagnosticOptions" value="0"/>
        <parm name="UseAdvancedOptions" value="0"/>
        <parm name="NetworkAction" value="Add"/>
        <characteristic type="network-profile">
            <parm name="SSID" value="Zebra"/>
            <parm name="SecurityMode" value="2"/>
            <parm name="WPAMode" value="4"/>
            <parm name="Authentication" value="1"/>
            <characteristic type="auth-details">
                <characteristic type="encryption-details">
                    <parm name="EncryptionWEP" value="1"/>
                </characteristic>
                <parm name="OptionalServerCertificate" value="serverCertName"/>
                <parm name="MandatoryClientCertificate" value="clientCertName"/>
            </characteristic>
            <parm name="UseDHCP" value="1"/>
            <parm name="UseProxy" value="0"/>
        </characteristic>
    </characteristic>
</wap-provisioningdoc>