Resource Definition to Add Wi-Fi Operations on iOS Devices

• operation
  • hiddenNetwork
  • autoJoin
  • encryptionType
  • hotspot 
  • domainName
  • serviceProviderRoamingEnabled
  • displayedOperatorName 
  • proxyType
  • roamingConsortiumOIs
  • password

  • clientConfiguration

    • username  
    • acceptEAPTypes 
    • userPassword 
    • oneTimePassword
    • payloadCertificateAnchorUUID
    • outerIdentity
    • TLSTrustedServerNames
    • TLSAllowTrustExceptions
    • TLSCertificateIsRequired
    • TTLSInnerAuthentication
    • EAPFASTUsePAC
    • EAPFASTProvisionPAC
    • EAPFASTProvisionPACAnonymously
    • EAPSIMNumberOfRANDs
  • payloadCertificateUUID
  • proxyServer
  • proxyPort
  • proxyUsername
  • proxyPassword
  • proxyPACURL
  • proxyPACFallbackAllowed
  • SSID
  • NAIRealmNames
  • MCCAndMNCs
• deviceIDs

deviceIDs

The Device ID. This field is not case sensitive. 

2be702beaaf4ad34fc9e7f8da2b6b808c453fa72b

The devices use information such as broadcast type and encryption type to differentiate a network besides SSID. It is assumed that all configured networks are either open or broadcast. To specify a hidden network, the value must be set to true . 

The network is auto-joined if the value is set to true. If false , the user has to tap the network name to join it. 

The possible values are as follows:

• WEP
• WPA
• Any
• None

WPA corresponds to WPA and WPA2 and applies to both encryption types.

Make sure that these values exactly match the capabilities of the network access point. If unsure about the encryption type, or would prefer that it apply to all encryption types, use the value Any .

The network is treated as a hotspot if the value is set to false.

The Domain Name used for the Wi-Fi Hotspot 2.0 negotiation. This field can be provided instead of the SSID_STR .

Provides permission to connect to roaming service providers if the value is set to true.

Displays the operator names.

The valid values are as follows:

• Manual
• Auto

This is an array of Roaming Consortium Organization Identifiers used for Wi-Fi Hotspot 2.0 negotiation. 

Array of string 

The password for the service. 

clientConfiguration

Specifies an enterprise profile for a given network via the "EAPClientConfiguration" key.  

clientConfiguration

payloadCertificateUUID 

proxyServer 

The proxy server's network address. 

proxyPort 

The proxy server's port. 

proxyUsername 

The username used to authenticate to the proxy server. 

proxyUser

proxyPassword 

The password used to authenticate to the proxy server.

proxyPACURL 

The URL of the PAC file that defines the proxy configuration. 

proxyPACFallbackAllowed

Prevents the device from connecting directly to the destination if the PAC file is unreachable if the value is set to false.

SSID 

SSID of the Wi-Fi network to be used.

NAIRealmNames 

This is the list of Network Access Identifier Realm names used for Wi-Fi Hotspot 2.0 negotiation.

This is the list of Mobile Country Code (MCC)/Mobile Network Code (MNC) pairs used for Wi-Fi Hotspot 2.0 negotiation. Each string must contain exactly six digits.

This property will not appear in the imported configuration unless the exact user name is known . Users can enter this information when they authenticate. 

The following EAP types are accepted:

• 13 = TLS
• 17 = LEAP
• 18 = EAP-SIM
• 21 = TTLS
• 23 = EAP-AKA
• 25 = PEAP
• 43 = EAP-FAST

Array of integers. 

13,17,18

The user password. If not provided, the user may be prompted during login. 

The user will be prompted for a password each time they connect to the network if the value is set to true.

Identifies the certificates to be trusted with the authentication. Each entry must contain the UUID of a certificate payload. Use this key to prevent the device from asking the user if the listed certificates are trusted.

Dynamic trust (the certificate dialogue) is disabled if this property is specified, unless TLSAllowTrustExceptions is also specified with the value true . 

strings 

The key is only relevant to TTLS, PEAP, and EAP-FAST.

This allows the user to hide his or her identity. The user's actual name appears only inside the encrypted tunnel. It can increase security because an attacker can't see the authenticating user's name in the clear. 

This is the list of server certificate common names that will be accepted. Use wildcards to specify the name, such as wpa.*.example.com. If a server presents a certificate that isn't in this list, it won't be trusted.

Used alone or in combination with TLSTrustedCertificates, the property allows someone to carefully craft which certificates to trust for the given network, and avoid dynamically trusted certificates.

Dynamic trust (the certificate dialogue) is disabled if this property is specified, unless TLSAllowTrustExceptions is also specified with the value true . 

Allows/disallows a dynamic trust decision by the user. The dynamic trust is the certificate dialogue that appears when a certificate isn't trusted. If the value is set to false , the authentication fails if the certificate isn't already trusted.

Allows two-factor authentication for EAP-TTLS, PEAP, or EAP-FAST if the value is set to true. If false , allows for zero-factor authentication for EAP-TLS.

The default is true for EAP-TLS, and false for other EAP types. 

This is the inner authentication used by the TTLS module.

The possible values are as follows:

• PAP
• CHAP
• MSCHAP
• MSCHAPv2

The device will use an existing PAC if it's present when the value is set to true. Else, the server must present its identity using a certificate.

Used only if EAPFASTUsePAC is true as it allows PAC provisioning.

Number of expected RANDs for EAPSIM.

The valid values are as follows:

• 2
• 3