An administrator can use this API to activate the SSID-based Wi-Fi network blacklist and whitelist policies. The SSID-based Wi-Fi network whitelist and blacklist policies are not applied until activated using this API.

NOTE 1: From Knox 3.9 onwards, the following rules will apply:

Allowlist - Only the SSIDs in the allowlist are allowed and all others are blocked. The blocklist doesn't have any effect.
Blocklist - Only the SSIDs in the blocklist are blocked and all others are allowed. Blocklist only takes effect if the allowlist is empty.

NOTE 2: From Knox 3.9 onwards, the networks previously configured using addBlockedNetwork(String) will also be included in block list.

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 
 try {
     boolean success = edm.getWifiPolicy().addBlockedNetwork("Other Company Wi-Fi");
     if (success) {
         Log.d(TAG, "Adding blocked network succeeded");
     } else {
         Log.d(TAG, "Adding blocked network failed");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 try {
     List<String> blackList = new ArrayList<String>();
     blackList.add("Starbucks3462");
     blackList.add("Android8480");
     boolean success = edm.getWifiPolicy().addWifiSsidsToBlackList(blackList);
     if (success) {
         Log.d(TAG, "Addition to blacklist succeeded");
         edm.getWifiPolicy().activateWifiSsidsRestriction(true);
     } else {
         Log.d(TAG, "Addition to blacklist failed");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 try {
     boolean defaultBlackList = true;
     List<String> whiteList = new ArrayList<String>();
     whiteList.add("Starbucks3462");
     whiteList.add("Android8480");
     boolean success = edm.getWifiPolicy().addWifiSsidToWhiteList(whiteList,
             defaultBlackList);
     if (success) {
         Log.d(TAG, "Addition to list is a Success");
         edm.getWifiPolicy().activateWifiSsidRestriction(true);
     } else {
         Log.d(TAG, "Addition to either whitelist or default blacklist is a Failure");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 try {
     List<String> whiteList = new ArrayList<String>();
     whiteList.add("Starbucks3462");
     whiteList.add("Android8480");
     boolean success = edm.getWifiPolicy().addWifiSsidsToWhiteList(whiteList);
     if (success) {
         Log.d(TAG, "Addition to whitelist succeeded");
         edm.getWifiPolicy().activateWifiSsidsRestriction(true);
     } else {
         Log.d(TAG, "Addition to whitelist failed");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

An open Wi-Fi hotspot is a Wi-Fi connection with no security constraints that allows any Wi-Fi-capable device to connect.

When disabled, the user cannot start an open Wi-Fi hotpot. When enabled back, the user is allowed to start an open Wi-Fi hotspot.

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 try {
     boolean success = edm.getWifiPolicy().clearWifiSsidsFromBlackList();
     if (success) {
         Log.d(TAG, "Clearing blacklist succeeded");
     } else {
         Log.d(TAG, "Clearing blacklist failed");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 try {
     boolean success = edm.getWifiPolicy().clearWifiSsidBlackList();
     if (success) {
         Log.d(TAG, "Clearing blacklist and whitelist is a Success");
     } else {
         Log.d(TAG, "Clearing blacklist or whitelist is a Failure");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 try {
     boolean success = edm.getWifiPolicy().clearWifiSsidsFromWhiteList();
     if (success) {
         Log.d(TAG, "Clearing whitelist succeeded");
     } else {
         Log.d(TAG, "Clearing whitelist failed");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 try {
     boolean allowUserProfiles = edm.getWifiPolicy().getAllowUserProfiles(false);
     if (allowUserProfiles == true) {
         Log.d(TAG, "Allowed to add Wi-Fi network settings");
     } else {
         Log.d(TAG, "Not allowed to add Wi-Fi network settings");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 try {
     boolean allowUserProfiles = kcm.getWifiPolicy().getAllowUserProfiles(false);
     if (allowUserProfiles == true) {
         Log.d(TAG, "Allowed to add Wi-Fi network settings");
     } else {
         Log.d(TAG, "Not allowed to add Wi-Fi network settings");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 
 try {
     List<String> blockedNetworks = edm.getWifiPolicy().getBlockedNetworks();
     for (String ssid : blockedNetworks) {
         Log.d(TAG, "blocked network: " + ssid);
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

1) OPEN
2) WEP
3) WPA
4) SAE
5) LEAP, PWD
6) FAST, PEAP
7) TLS, TTLS, SIM, AKA, AKA'

NOTE: From Knox 3.9 onwards, the security types will be grouped in the following security levels:

1) OPEN
2) WEP, WPA, SAE
3) LEAP, PWD, FAST, PEAP, TLS, TTLS, SIM, AKA, AKA'

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 
 try {
     WifiConfiguration config = edm.getWifiPolicy().getWifiApSetting();
     if (config != null) {
         Log.d(TAG, "SSID : " + wc.SSID + " Security Type : " + wc.allowedKeyManagement);
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 // Sample Output
 // SSID : Android7346 Security Type : OPEN
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 try {
     WifiAdminProfile wifiProfile = edm.getWifiPolicy().getWifiProfile("Company Wi-Fi");
     if (wifiProfile != null) {
         Log.d(TAG,
                 "Wi-Fi ssid = " + wifiProfile.ssid + " security = " + wifiProfile.security);
     } else {
         Log.d(TAG, "Getting Wi-fi profile failed");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

An administrator can use this API to retrieve the list of all blacklisted Wi-Fi network SSIDs. The device cannot connect to Wi-Fi networks with matching SSIDs.

NOTE: From Knox 3.9 onwards, the following rules will apply:

Allowlist - Only the SSIDs in the allowlist are allowed and all others are blocked. The blocklist doesn't have any effect.
Blocklist - Only the SSIDs in the blocklist are blocked and all others are allowed. Blocklist only takes effect if the allowlist is empty.

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 List<WifiControlInfo> wifiList = edm.getWifiPolicy().getWifiSsidsFromBlackLists();
 
 for (List controlInfo : wifiList) {
     Log.d(TAG, "Administrator : " + controlInfo.adminPackageName + " Entries : "
             + controlInfo.entries);
 }
 
 

An administrators can use this API to retrieve a list of whitelisted Wi-Fi network SSIDs. Wi-Fi networks with a matching SSID are excepted from the blacklist, and the device can connect to these networks.

NOTE: From Knox 3.9 onwards, the following rules will apply:

Allowlist - Only the SSIDs in the allowlist are allowed and all others are blocked. The blocklist doesn't have any effect.
Blocklist - Only the SSIDs in the blocklist are blocked and all others are allowed. Blocklist only takes effect if the allowlist is empty.

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 List<WifiControlInfo> wifiList = edm.getWifiPolicy().getWifiSsidsFromWhiteLists();
 
 for (List controlInfo : wifiList) {
     Log.d(TAG, "Administrator : " + controlInfo.adminPackageName + " Entries : "
             + controlInfo.entries);
 }
 
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 
 try {
     boolean allowOpenWifi = edm.getWifiPolicy().isOpenWifiApAllowed();
     if (allowOpenWifi) {
         Log.d(TAG, "Open Wifi AP is allowed settings");
     } else {
         Log.d(TAG, "Open Wifi AP not allowed settings");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 
 try {
     boolean allowUserModify = edm.getWifiPolicy().isWifiApSettingUserModificationAllowed();
     if (allowUserModify) {
         Log.d(TAG, "Allowed to modify Wi-Fi AP settings");
     } else {
         Log.d(TAG, "Not allowed to modify Wi-Fi AP settings");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

An administrator can use this API to check whether the SSID-based Wi-Fi network blacklist and whitelist policy is activated for an administrator. The SSID-based Wi-Fi network whitelist and blacklist policies are not applied unless activated using activateWifiSsidRestriction(boolean).

NOTE 1: From Knox 3.9 onwards, the following rules will apply:

Allowlist - Only the SSIDs in the allowlist are allowed and all others are blocked. The blocklist doesn't have any effect.
Blocklist - Only the SSIDs in the blocklist are blocked and all others are allowed. Blocklist only takes effect if the allowlist is empty.

NOTE 2: From Knox 3.9 onwards, the networks previously configured using addBlockedNetwork(String) will also be included in block list.

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 WifiPolicy wifiPolicy = edm.getWifiPolicy();
 try {
     List<String> networks = wifiPolicy.getNetworkSSIDList();
     if (networks.contains("Company Wi-Fi")) {
         boolean success = wifiPolicy.removeNetworkConfiguration("Company Wi-Fi");
         if (success) {
             Log.d(TAG, "Removing configuration succeeded");
         } else {
             Log.d(TAG, "Removing configuration failed");
         }
     } else {
         Log.d(TAG, "Wi-Fi network does not exist");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 try {
     List<String> blackList = new ArrayList<String>();
     blackList.add("Starbucks3462");
     blackList.add("Android8480");
     boolean success = edm.getWifiPolicy().removeWifiSsidsFromBlackList(blackList);
     if (success) {
         Log.d(TAG, "Removal from blacklist succeeded");
     } else {
         Log.d(TAG, "Removal from blacklist failed");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 try {
     List<String> whiteList = new ArrayList<String>();
     whiteList.add("Starbucks3462");
     whiteList.add("Android8480");
     boolean success = edm.getWifiPolicy().removeWifiSsidsFromWhiteList(whiteList);
     if (success) {
         Log.d(TAG, "Removal from whitelist succeeded");
     } else {
         Log.d(TAG, "Removal from whitelist failed");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

NOTE: Since MDM 5.4.1, only Android users (Owner/Guest user) administrator can call this API. For container, API will return false.

1) OPEN
2) WEP
3) WPA
4) SAE
5) LEAP, PWD
6) FAST, PEAP
7) TLS, TTLS, SIM, AKA, AKA'

NOTE: From Knox 3.9 onwards, the security types will be grouped in the following security levels:

1) OPEN
2) WEP, WPA, SAE
3) LEAP, PWD, FAST, PEAP, TLS, TTLS, SIM, AKA, AKA'

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 
 try {
     boolean success = edm.getWifiPolicy().setWifiApSetting("Android123",
             WifiPolicy.SECURITY_TYPE_OPEN, null);
     if (success) {
         Log.d(TAG, "Configuring network is a success");
     } else {
         Log.d(TAG, "Configuring network is a failure");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 try {
     WifiAdminProfile wifiProfile = new WifiAdminProfile();
     wifiProfile.ssid = "Company Wi-Fi";
 
     // Example for Open security level
     wifiProfile.security = "NONE";
 
     // Configuration for WEP security level
     wifiProfile.security = "WEP";
     wifiProfile.wepKeyId = 1;
     wifiProfile.wepKey1 = "abdce";
 
     // Example for WPA/WPA2-PSK security level
     wifiProfile.security = "PSK";
     wifiProfile.psk = "test1234";
 
     // Example for EAP-PEAP security level
     wifiProfile.security = "EAP-PEAP";
     wifiProfile.phase2 = "MSCHAPV2";
     wifiProfile.userIdentity = "user@company.com";
     wifiProfile.password = "sample_password";
 
     // Create the network
     boolean success = edm.getWifiPolicy().setWifiProfile(wifiProfile);
     if (success) {
         Log.d(TAG, "Setting Wi-Fi profile succeeded");
     } else {
         Log.d(TAG, "Setting Wi-Fi profile failed");
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 WifiPolicy wifiPolicy = edm.getWifiPolicy();
 try {
     boolean allowWifiStateChange = true;
     wifiPolicy.setWifiStateChangeAllowed(allowWifiStateChange);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }