Setting on the General tab

Network

Service set identifier (SSID)

The name of the Wi-Fi network that includes the access point (SSID).

Connect automatically

Defines whether iOS MDM devices are automatically connected to the Wi-Fi network.

If you disable automatic connection to an existing Wi-Fi network in the policy settings, you will not be able to enable automatic connection to this network again. This is due to an issue known to Apple.

Hidden network

Defines whether the Wi-Fi network is hidden in the list of available networks on the iOS MDM device.

If the network is hidden, to connect to the network the user needs to manually enter the service set identifier (SSID) specified in the settings of the Wi-Fi router on the mobile device.

Protection

Network protection type

The type of Wi-Fi network security (open network or secure network protected with the WEP, WPA, WPA2, or WPA3 protocol).

On devices running iOS 15 or earlier, selecting WPA, WPA2, or WPA3 is identical and lets you connect to any network protected by using WPA.

• Open network. User authentication is not required.
• WEP. The network is protected by using Wireless Encryption Protocol (WEP).

WEP protection is available on devices running iOS 5 or later.

• WPA/WPA2. The network is protected by using the WPA (Wi-Fi Protected Access) or WPA2 protocol.
• Personal network (any). The network is protected by using the WEP, WPA, or WPA2 encryption protocol, depending on the type of Wi-Fi router. An encryption key unique to each user is used for authentication.
• WEP (corporate network). The network is protected by using the WEP protocol, with the use of a dynamic key.
• WPA/WPA2 (corporate network). The network is protected by using the WPA or WPA2 encryption protocol, with the use of the 802.1X protocol.
• Corporate network (any). The network is protected by using the WEP, WPA, or WPA2 protocol, depending on the type of Wi-Fi router. Authentication is performed by using a single encryption key shared by all users.

EAP protocol

EAP protocol

If you have selected any of the corporate network options, in the EAP protocol section you can select the types of EAPs (Extensible Authentication Protocol) for user identification on the Wi-Fi network. The following types are available:

• TLS
• TTLS

  For this type, select the TTLS authentication protocol:

  • PAP
  • EAP
  • CHAP
  • MSCHAP
  • MSCHAPv2
• LEAP
• PEAP
• EAP-FAST

  For this type, configure the following check boxes:

  • Use Protected Access Credential (PAC)
  • Allow automatic delivery of PAC to devices
  • Use PAC anonymously
• EAP-SIM
• EAP-AKA

Authentication

Password

The password of the account for authentication on the Wi-Fi network.

User name

The account name for user authentication upon connection to the Wi-Fi network.

User ID

The user ID displayed during data transmission upon authentication, instead of the user's real name.

The user ID is designed to make the authentication process more secure, since the user name is not displayed openly, but rather transmitted via an encrypted TLS tunnel.

Prompt for password at each connection

Select this check box if you want the user to enter the password manually upon every connection to the Wi-Fi network.

Settings on the Additional tab

Use proxy server

Select this check box to configure the settings for connecting to the Wi-Fi network via a proxy server.

This check box is cleared by default.

Setting type

• Automatic. If you want to configure the connection automatically. This value is selected by default.
• Manual. If you want to configure the connection manually.

If the Automatic type is selected

PAC file URL

The URL of the proxy PAC file.

If the Manual type is selected

Proxy server address

The IP address or DNS name of the proxy server.

Proxy server port

The port number of the proxy server.

By default, the value is 8080.

User name

The user name for the connection to the proxy server.

Password

The password for the connection to the proxy server.