Shared authentication

Shared Key Authentication (SKA) is a process by which a computer can gain access to a wireless network that uses the Wired Equivalent Privacy (WEP) protocol. With SKA, a computer equipped with a wireless modem can fully access any WEP network and exchange encrypted or unencrypted data.

Use the following guidelines to set up shared authentication:

Table 47.   Wi-Fi shared authentication field descriptions




Enter the name to use to reference this configuration in Ivanti EPMM.

Network Name (SSID)

Enter the name (i.e., service set identifier) of the Wi-Fi network these settings apply to. This field is case sensitive.



Enter additional text to clarify the purpose of this group of Wi-Fi settings.

Hidden Network

Select this option if the SSID is not broadcast.


Select Shared.

Data Encryption

Select the data encryption method associated with the selected authentication type. The selection affects which of the following fields are displayed. For Shared authentication, the following encryption options are available:




Network Key

WEP encryption

Enter the network key necessary for accessing this network. The network key should be 5 or 13 ASCII characters or 10 or 26 hexadecimal digits.


Key Index

WEP encryption

If using multiple network keys, select a number indicating the memory position of the correct encryption key.

Confirm Network Key

Re-enter the network key to confirm.


User Name

WEP Enterprise encryption

Specify the variable to use as the user name when establishing the Wi-Fi connection. See Supported variables for Wi-Fi authentication.


WEP Enterprise encryption

Specify the variable to use and any necessary custom formatting for the Wi-Fi password. The default variable selected is $PASSWORD$.

Enter additional variables or text in the text box adjacent to the Password field. Entries in this text box are kept hidden and will not be visible to any Ivanti EPMM administrator.

Note the following:

If you specify $PASSWORD$, also enable Save User Password under Settings > System Settings > Users & Devices > Registration.

All variables and text up to the last valid variable will be visible. Anything after the last valid variable will not be visible. The valid variable may appear in either of the password fields.

See Supported variables for Wi-Fi authentication.

Apply to Certificates

WEP Enterprise encryption

Configure this field with the CA certificate needed to validate the Identity Certificate presented by the Wi-Fi Access Point. It is not the CA certificate needed to validate the Identity Certificate sent to the device in the Wi-Fi config.

Trusted Certificate Names

WEP Enterprise encryption.

If you did not specify trusted certificates in the Apply to Certificates list, then enter the names of the authentication servers to be trusted. You can specify a particular server, such as or a partial name such as *

Allow Trust Exceptions

WEP Enterprise encryption.

Select this option to let users decide to trust a server when the chain of trust can’t be established. To avoid these prompts, and to permit connections only to trusted services, turn off this option and upload all necessary certificates.

Use Per-connection Password

WEP Enterprise encryption.

Select this option to prompt the user to enter a password each time the device connects to the Wi-Fi network.

EAP Type

Select the authentication protocol used:




You must select only one protocol.

If you select EAP-FAST, then you also need to specify the Protected Access Credential (PAC).

If you select TLS, then you must specify an Identity Certificate.

If you select TTLS, then you must also specify the Inner Identity Authentication Protocol. You may optionally specify an Outer Identity, which on Android devices is propagated to the Anonymous Identity field in the Android system Wi-Fi settings.


Connects To

Select Internet or Work.

Apple Settings

These features are not supported on Android devices.

Android Settings

See Wi-Fi network priority for Android devices.

Windows Settings

These settings apply only to Windows devices.