Create a Wi-Fi profile to connect devices to hidden, encrypted, or password-protected corporate networks. Wi-Fi profiles are useful for end users who travel to various office locations that have unique wireless networks or for automatically configuring devices to connect to the appropriate wireless network.

To configure a Wi-Fi payload:

  1. Navigate to Devices > Profiles > List View > Add and select Add Profile.

  2. Select Windows and then select Windows Phone.

  3. Configure the profile's General settings.

    These settings determine how the profile deploys and who receives it. For more information on General settings, see Add General Profile Settings.

  4. Select the Wi-Fi profile.
  5. Configure the General settings, including:

    Settings Descriptions
    Service Set Identifier Enter an identifier that is associated with the name (SSID) of the desired Wi-Fi network.
    Hidden Network Enable if the network is not open to broadcast.
    Auto-Join Enable to set the device to automatically join the network.
    Security Type Use the drop-down menu to select the security type (e.g., WPA2 Personal) for the Wi-Fi network.

    Use the drop-down menu to specify if data transmitted using the Wi-Fi connection is encrypted.

    Displays based on the Security Type.


    Enter the password required to join the Wi-Fi network.

    Select the Show Characters check box to disable hidden characters within the field.

    Displays based on the Security Type.

    Proxy Enable to configure proxy settings for the Wi-Fi connection.
    URL Enter the URL for the proxy.
    Port Enter the port for the proxy.

    Select the type of protocols to use:

    • Certificate
    • EAP-TTLS
    • PEAP-MsChapv2
    • Custom

    This section displays when the Security Type is set to WPA Enterprise or WPA2 Enterprise.

    Inner Identity

    Select the method of authentication through EAP-TTLS:

    • Username/Password
    • Certificate

    This section displays when the Protocols field is set to EAP-TTLS or PEAP-MsChapv2.

    Require Crypto Binding

    Enable to require cryptographic binding on both authentications.

    This limits man-in-the-middle attacks.

    Use Windows Log On Credentials

    Enable to use the Windows log on credentials are the username/password to authenticate.

    Displays when Username/Password is set as the Inner Identity.

    Identity Certificate

    Select an Identity Certificate, which you can configure using the Credentials payload. For more information, see Credentials

    Displays when Certificate is set as the Inner Identity.

    Trusted Certificates

    Select Add to add Trusted Certificates to the Wi-Fi profile.

    This section displays when the Security Type is set to WPA Enterprise or WPA2 Enterprise.

    Allow Trust Exceptions Enable to allow trust decisions to be made by the user through a dialog.
  6. Select Save & Publish to push the profile to devices.