Enterprise Wifi Configuration for iOS Devices

Scalefusion's WiFi configuration feature helps you create a WiFi network that can then be pushed to the devices so that the WiFi network is automatically configured on them. On iOS devices, IT admins can also deploy Certificate-based Enterprise Wi-Fi configurations to enable employees to quickly plug in and work when they enter enterprise networks.

In this guide, we will see how to create WiFi configurations (Simple and certificate-based) on Scalefusion Dashboard and then apply them to iOS Device Profiles.

Before You Begin

1. iOS Device Profile should be created

Wifi Configuration

Creating a Wi-Fi Configuration

1. On the Scalefusion Dashboard, navigate to Device Profile & Policies > Global Settings > Wifi Settings. This screen displays all the Wi-Fi networks that you have created till now. Click on CREATE NEW > Enterprise For iOS to create a new Wi-Fi configuration.
2. The Wifi Configuration window is displayed with the following fields,
   1. Configuration Name: Enter a name for this configuration, to refer to it across Dashboard.
   2. SSID: Enter the SSID broadcast name for the Wifi.
   3. Hidden Network: Enable this if the network is hidden.
   4. Proxy Setup: Proxy is used to give access to a few websites to the user connected to a Wi-Fi network. There are two types of proxy: Manual and Automatic 
      If you do not want to set a Proxy, keep it to None, which is selected by default
      1. Manual: For manual proxy settings, enter the following values :
         - Server
         - Port
         - User Name and Password
      2. Automatic: For the Automatic proxy setting, enter the URL where the pac file is hosted. Pac file has all the proxy settings, which is set by the admin.
         
   5. These proxy settings get applied to devices connected to the same Wi-Fi configuration.
      If proxy values are invalid/not working on the device then the system admin needs to fix it. The Proxy setting values that are sent from the dashboard to the device can be checked on the device by going to System Settings > Wifi > Connected Wifi > Proxy settings.
      Internet will be lost on the device if the invalid proxy is set on it, and the device will receive no further pushes until settings are corrected on both dashboard as well as device.
   6. Security Type: Select a Security Type from Dynamic WEP, WPA/WPA2 Enterprise, WPA2 Enterprise (iOS8 & later), Any
   7. Select WiFi authentication methods. Scalefusion supports Enterprise Wifi for iOS in two modes, viz LEAP and PEAP. Select the checkboxes to choose them.
      1. LEAP - After selecting, give Username and Password for connection to Wireless Network
      2. PEAP - After selecting, give the Username and Password for connection to the Wireless Network. In addition, Certificates can be associated with PEAP mode. This is explained in the next section.
3. Once you have entered the relevant details, click on SUBMIT to save the configuration. The configuration will start appearing in the list of Wifi configurations.

Certificate-based Enterprise Wifi Profile

On iOS devices, certificates can be associated with Enterprise Wifi configurations. As a result, all the devices where this Wifi has been published as well as Wifi being pushed on new Profiles, it will be sent with the Certificate payload.

The certificate option is there for PEAP mode. To create a certificate-based Enterprise Wifi Configuration

1. Follow the same steps as above (#a to #f)
2. In the Wifi Configuration window, once you select the PEAPcheckbox, there will be an option (drop-down) to select Certificates (Identity and Trust) that are previously uploaded through Certificate Management.
   To learn about uploading Certificates on Scalefusion Dashboard, please click here.

   
   
   
3. Select certificates that need to be associated with the Wi-Fi configuration, along with Outer Identity, TLS Minimum Version, and TLS Maximum Version and click Submit

The Enterprise Wifi Configuration will be created, and certificate(s) will be associated with it.

Additional Actions

You can perform the following actions once Wifi Configuration is created:

• Publish: Click on the Publish button and select iOS Device Profiles and Devices to directly push the configuration on them.
• Edit: This opens the 'Update Configuration' window where you can edit the existing Configuration
• Delete: Deletes the Wifi Configuration

Global Settings

There are also some Global Settings through which you can give access to device-user to use the Wi-Fi connections and switch to other available Wi-Fi

To apply Global settings, click the Apply button after making selections.

Applying WiFi Configuration on iOS Device Profile

Now that Wifi configuration is created, it can be applied to the iOS Device Profile(s) and hence get configured on the devices on which the device profile is applied. Follow the steps below,

1. Navigate to Device Management > Device Profiles section.
2. Launch the Device Profile Wizard by clicking on CREATE NEW PROFILE or select an iOS Device Profile and Edit it from the action panel.
3. Navigate to Restrictions click on NETWORK SETTINGS on the left panel and select the Wifi configuration that you have created.
   
4. Click UPDATE PROFILE to save the changes to the device profile.

The Wi-Fi configurations will be applied to the devices on which this Device Profile is applied. If a certificate is associated with the selected Wifi configuration, then it will also get applied to the devices.