Working with Oreo without PIN / Pattern

Working with Oreo without PIN / Pattern

Hey Guy's,

 

we're actually working with Zebra Devices on Android Nougat (7.1.2) very successfull. All new Devices and also the old one's had to be upgraded to Oreo in the future in Case of security Updates etc. 

 

Unfortunately we're not using a PIN or Pattern so far and on Android Nougat it works great. But when I join an Oreo Device, it has to be set up with a Device PIN or Pattern to work correctly. In our specific Case no Certificate for Wifi e.g. can be pushed to device. Also other stuff like mxconfig Things wont work until we set up a PIN on the Device.

 

Is there any Chance to get Oreo running without the need of a PIN on the Device?

 

many thanks

 

PS: Were using MobiControl 13.4.0.5074, Agent Version 14.0.0.1579 in DoA Mode, Zebra TC20 & TC51 / TC52 Devices

11 Answers

Order By:   Standard | Newest | Votes
Matt Dermody | posted this 14 November 2019

I am running hundreds of Android Oreo Zebra devices managed under AEDO and have seen some nuanced issues with certificates installing without a lock screen set, but I have not seen those issues with MX configurations applying. Assuming you're using AEDO for the devices, do you have the Zebra specific AE plugin installed as well?

  • 0
  • 0
Scott | posted this 14 November 2019

To confirm Matt's answer, you currently will have to install the certificates using MX.  We have certificate infrastructure set up for MobiControl to request AD certificates and assign them to devices on enrollment but it doesn't work on Oreo.  SOTI says the Zebra Oreo devices do/can not support installation of certificates via MobiControl mechanisms.  SOTI claims Zebra has changed something in 8 and they are apparently working with Zebra to find a resolution.  I'm trying to work my Zebra contacts to get more information.

  • 3
  • 0
Daniel | posted this 15 November 2019

Hi Scott, That's excatly our Problem!

 

Thank you. Hopefully they'll find a solution :-(

 

 

  • 1
  • 0
Rafael | posted this 15 November 2019

Where is the exact problem? 

We are using it without Pin/Pattern too, because the devices are protected by the Kiosk Mode and it works well on Android 7 and 8.

 

New Device:

1. Scanning Stagenow Bypass

2. Scanning Stagenow Profile Barcodes

3. Ready

 

Android 7 to 8 device:

1. Applying zip to device

2. Running update

(3. !Factoryreset!) i'm not sure now but i think its needed because of work profile

4. Scanning Stagenow Bypass

5. Scanning Stagenow Profile Barcodes

6. Ready

 

BUT you need different Profiles in Mobicontrol!! Android Plus for Android 7 devices and Android Enterprise for Android 8 Devices.

Tipp: To use Android 8 and 7 in same folders in Mobicontrol, set filter criteria in profiles to specify it by OS Version.

  • 0
  • 0
Scott | posted this 15 November 2019

The original post was referring specifically to installing device certificates to Zebra devices without assigning a PIN.  Normally/Historically possible with Zebra but now not on Oreo, at least via MobiControl without MX intervention.

  • 0
  • 0
Ravikant Mishra | posted this 25 November 2019

Even we had same situation. Good news that SOTI got the fix and they are due to release new agent. Happy days :) :)

  • 0
  • 0
Daniel | posted this 25 November 2019

Hey Ravikant,

good to hear that ;-)

Do you have any further Information in which Version this fix will be implemented? We tried it with Version 14.1.1.1003 today but no success. After I set the Pin with MobiControl the Certificate gets installed immidiately...

  • 0
  • 0
Ravikant Mishra | posted this 25 November 2019

I assume it would be next Agent Release but not got the information on agent version yet. Once it's released will update the thread.

  • 1
  • 0
MartinsKl | posted this 02 January 2020

To meet our security standards we are putting pin code, installing certificate (AD user for each device) and then removing pin code when wifi is set up. We are good for the time while certificate is still valid. Other applications which uses certificates wont work as they will ask to set up pin code each time they try to access keystore.

  • 0
  • 0
MartinsKl | posted this 08 January 2020

Soti agent 14.1.3 arrived with this issue finally fixed. Big thank you to them.

  • 0
  • 0
Daniel | posted this 08 January 2020

Works as expected now. Good Job. 

 

Many Thanks 

  • 0
  • 0

Give us your feedback
Give us your feedback
Feedback