Hey everyone, we’re currently rolling out Android Enterprise device owner enrollment using the 6-tap QR method, and we’ve run into a challenge when the deployment environment uses WPA2-Enterprise Wi-Fi.
During enrollment, the device tries to connect to the corporate Wi-Fi network, but authentication fails because the Root CA certificate required for WPA2-Enterprise isn’t yet installed on the device. In the normal Android Wi-Fi setup UI, users get a prompt to trust the certificate, but in the 6-tap provisioning screen there’s no such prompt.
Because of this, the device can’t establish internet connectivity during provisioning.
We were wondering if it’s possible to embed the CA certificate directly inside the Android Enterprise enrollment QR code JSON payload so the device can authenticate to Wi-Fi immediately.
Has anyone tried something similar? Also curious if adding the certificate might make the QR code too large to scan reliably.