iOS

and

macOS

:

Wi-Fi

profile settings

This setting specifies whether the

Wi-Fi

profile on a

macOS

device is applied to the user account or the device.

Possible values:

User
Device

This setting is valid only for

macOS

.

This setting specifies whether devices can randomize their MAC addresses when they join the

Wi-Fi

network. This setting applies only to devices that are running

iOS

and

iPadOS

14 and later.

This setting specifies a configuration for the

Wi-Fi

network.

Hotspot configurations apply only to

iOS

,

iPadOS

, and

macOS

devices. If you select one of the hotspot options, do not use the same

Wi-Fi

profile to configure settings for other device types.

Possible values:

The default value is "Standard."

This setting specifies the friendly name of the hotspot operator.

This setting is valid only if the "Network type" setting is set to "Hotspot 2.0."

This setting specifies the domain name of the hotspot operator.

This setting is valid only if the "Network type" setting is set to "Hotspot 2.0."

The "SSID" setting is not required when you use this setting.

This setting specifies the organization identifiers of roaming consortiums and service providers that are accessible through the hotspot.

This setting is valid only if the "Network type" setting is set to "Hotspot 2.0."

This setting specifies the NAI realm names that can authenticate a device.

This setting is valid only if the "Network type" setting is set to "Hotspot 2.0."

This setting specifies the MCC/MNC combinations that identify mobile network operators. Each value must contain exactly six digits.

This setting is valid only if the "Network type" setting is set to "Hotspot 2.0."

This setting specifies whether a device can connect to roaming partners for the hotspot.

This setting is valid only if the "Network type" setting is set to "Hotspot 2.0."

This setting specifies the type of security that the

Wi-Fi

network uses.

If the "Network type" setting is set to "Hotspot 2.0," this setting is set to "

WPA2-Enterprise

."

Possible values:

The default value is "None."

This setting specifies the WEP key for the

Wi-Fi

network. The WEP key must be 10 or 26 hexadecimal characters (0-9, A-F) or 5 or 13 alphanumeric characters (0-9, A-Z).

Examples of hexadecimal key values are ABCDEF0123 or ABCDEF0123456789ABCDEF0123. Examples of alphanumeric key values are abCD5 or abCDefGHijKL1.

This setting is valid only if the "Security type" setting is set to "WEP personal."

This setting specifies the preshared key for the

Wi-Fi

network.

This setting is valid only if the "Security type" setting is set to "

WPA-Personal

," "

WPA2-Personal

" or "WPA3-Personal."

This setting specifies the EAP methods that the

Wi-Fi

network supports. You can select multiple EAP methods.

This setting is valid only if the "Security type" setting is set to "WEP enterprise," "

WPA-Enterprise

," "

WPA2-Enterprise

" or "WPA3-Enterprise."

Possible selections:

This setting specifies the inner authentication method for use with TTLS.

This setting is valid only if the "Authentication protocol" setting is set to "TTLS."

Possible values:

The default value is "MS-CHAPv2."

This setting specifies whether the EAP-FAST method uses a Protected Access Credential.

This setting is valid only if the "Authentication protocol" setting is set to "EAP-FAST."

This setting specifies whether the EAP-FAST method allows PAC provisioning.

This setting is valid only if the "Authentication protocol" setting is set to "EAP-FAST" and the "Use PAC" setting is selected.

This setting specifies whether the EAP-FAST method allows anonymous PAC provisioning.

This setting is valid only if the "Authentication protocol" setting is set to "EAP-FAST," the "Use PAC" setting is selected, and the "Provision PAC" setting is selected.

This setting specifies the outer identity for a user that is sent in clear text. You can specify an anonymous username to hide the user's real identity (for example, anonymous). The encrypted tunnel is used to send the real username to authenticate with the

Wi-Fi

network. If the outer identity includes the realm name to route the request, it must be the user's actual realm (for example, anonymous@example.com).

This setting is valid only if the "Authentication protocol" setting is set to "TTLS," "PEAP," or "EAP-FAST."

This setting specifies whether the

Wi-Fi

profile includes the password for authentication.

This setting is valid only if the "Security type" setting is set to "WEP enterprise," "

WPA-Enterprise

," "

WPA2-Enterprise

" or "WPA3-Enterprise."

This setting specifies the password that a device uses to authenticate with the

Wi-Fi

network.

This setting is valid only if the "Use password included in

Wi-Fi

profile" setting is selected.

This setting specifies the username that a device uses to authenticate with the

Wi-Fi

network. If the profile is for multiple users, you can specify the %UserName% variable.

This setting is valid only if the "Security type" setting is set to "WEP enterprise," "

WPA-Enterprise

," "

WPA2-Enterprise

" or "WPA3-Enterprise."

This setting specifies the type of authentication that a device uses to connect to the

Wi-Fi

network.

This setting is valid only if the "Security type" setting is set to "WEP enterprise," "

WPA-Enterprise

," "

WPA2-Enterprise

" or "WPA3-Enterprise."

Possible values:

The default value is "None."

This setting specifies the type of linking for the client certificate associated with the

Wi-Fi

profile.

This setting is valid only if the "Authentication type" setting is set to "Shared certificate."

Possible values:

The default value is "Single reference."

This setting specifies the shared certificate profile with the client certificate that a device uses to authenticate with the

Wi-Fi

network.

This setting is valid only if the "Type of certificate linking" setting is set to "Single reference."

This setting specifies the name of the client certificate that a device uses to authenticate with the

Wi-Fi

network.

This setting is valid only if the "Type of certificate linking" setting is set to "Variable injection."

This setting specifies the associated SCEP profile that a device uses to obtain a client certificate to authenticate with the

Wi-Fi

network.

This setting is valid only if the "Authentication type" setting is set to "SCEP."

This setting specifies the associated user credential profile that a device uses to obtain a client certificate to authenticate with the

Wi-Fi

network.

This setting is valid only if the "Authentication type" setting is set to "User credential."

This setting specifies the common names in the certificate that the authentication server sends to the device (for example, *.example.com).

This setting is valid only if the "Security type" setting is set to "WEP enterprise," "

WPA-Enterprise

," "

WPA2-Enterprise

" or "WPA3-Enterprise."

This setting specifies whether devices can bypass captive networks.