Category Filter

How to Set Up WiFi Network for Apple TV?

Using Hexnode you can configure a Wi-Fi profile and push it to an Apple TV. You can thus set up a corporate Wi-Fi network for the device, without prompting the user for the password.

To set up Wi-Fi from Hexnode MDM,

  1. Go to Policies from Hexnode MDM console.
  2. Select an existing policy or create a new one by clicking on New Policy.
  3. Select Apple TV and select Wi-Fi.
Wi-Fi Settings Description
Service Set Identifier Service Set Identifier (SSID) is the name of the Wi-Fi network.
Auto join Apple TVs will automatically connect to this Wi-Fi network if in the network’s service area. Enabled by default.
Hidden network Mark this network as a hidden network and let the device connect to the hidden network. Disabled by default.
Security type Select an encryption method to secure the wireless network. The available security types are None, WEP, WPA/WPA2, Any (Personal), WEP Enterprise, WPA/WPA2 Enterprise, Any(Enterprise)
(if Security Type is WEP, WPA/WPA2, Any (Personal))
Provide a password which is used to connect to the Wi-Fi network.

Apple TV WiFi

If the security type is WEP Enterprise, WPA/WPA2 Enterprise or Any (Enterprise), you can configure additional settings for your enterprise network. If you select None you will have no security type set up for your WiFi, leaving your device out in the open.

Configurations for WEP Enterprise, WPA/WPA2 Enterprise and Any (Enterprise) Network Security Types

Configure Protocols

Settings Description
Accepted EAP types Select the authentication framework for your enterprise network. The available options are TLS, LEAP, EAP-FAST, TTLS, PEAP and EAP-SIM. TTLS is enabled by default.
(Applicable only if EAP-FAST is selected)
Protected Access Credentials (PAC) can be used for WiFi network connections.
Provision PAC(If PAC is used) The server creates a PAC file for a specific user by authenticating by using the user’s password. The PAC file can be used to make a connection with the network.
Provision PAC Anonymously
(If PAC is provisioned)
PAC is provisioned without authenticating with the server.
Inner identity
(If TTLS is selected)
The available options are PAP (default), CHAP, MSCHAP and MSCHAPv2. PAP is the least secure one, which sends the password as a plain text. CHAP is secure than PAP. Instead of a plain text, a random number and the result of a hash function (which is performed on the password) is sent. MSCHAP is another variant of CHAP and is introduced by Microsoft. MSCHAP requires a mutual authentication and data are sent between the device and the server only after the device proves its identity to the server and the server proves its identity back to the device. MSCHAP v2 authentication is an updated version of MSCHAP that is similar to but incompatible with MSCHAP v1.

Configure Authentication

Settings Description
Username The account name of the user. Use %username% to fetch the data automatically from the MDM console.
Use per connection password The device will prompt for a password every time the user tries to connect to the network.
(If Per connection password is not used)
If a password is not required for every connection, then a one-time password can be provided here.
Identity Certificate If you are using a certificate to authenticate to the network, choose the certificate from the Identity Certificate pop-up menu.
Outer identity The username of the secure tunnel which transfers the authentication credentials.

Proxy Settings

A proxy server serves as an intermediary between the devices and the internet. It can hide the IP of the client system which enhances security. There are three options available, None, Manual and Automatic.
To skip setting up a proxy server, choose None. To set up a proxy, choose any of the other two options.

  1. None: If you don’t want to use a proxy server, then select this option.
  2. Manual: To set up proxy manually, provide the below details:
    • Server – The server name or IP address of the proxy server.
    • Port – Port number of the proxy server.
    • Authentication – Username to get authenticated with the proxy server.
    • Password – Password required to authenticate to the proxy server.
  3. Automatic: If you are using a proxy server but don’t prefer to set it up manually, just provide the proxy server URL and Hexnode MDM will configure the rest for you.

How to Push Wi-Fi Settings to Apple TV?

Well, it’s quite simple.

  1. Go to Policy Targets.
  2. Click on + Add Devices.
  3. Find and select the devices.

From the same tab, the policy can be associated with device groups, users or user groups instead of devices.
If you are on a page that lists the policies,

  1. Check a policy.
  2. From Manage, select Associate Targets.
  3. Select all devices that apply.