ADD_WIFI_AP fails with EAP-TLS on iMin devices: empty domain field causes enterprise Wi-Fi rejection

Android

If your iMin device fails to connect to an enterprise Wi-Fi network configured with EAP-TLS authentication, the issue may be a missing or empty domain field in your Wi-Fi configuration payload. This article explains how to diagnose and fix the problem.

Before you begin

This issue affects iMin Swift 1 Pro and iMin RoC1 devices running Android 13. You'll need access to your Wi-Fi configuration payload (JSON format) and the Esper Console.

Step 1: Verify the error in your Esper Agent logs

Check your device's Esper Agent logs for the following error message:

"Enterprise network configuration is missing either a Root CA or a domain name."

If you see this error, your Wi-Fi payload is missing a required domain field or the domain field is set to an empty string.

Step 2: Check your Wi-Fi payload for an empty domain field

Locate the Wi-Fi configuration payload used in your ADD_WIFI_AP command. Look for the "domain" field in the EAP-TLS network block. If it appears like this:

"domain": ""

This is the cause of the failure. iMin devices on Android 13 require either a valid domain name or a Root CA certificate to validate enterprise Wi-Fi connections.

Step 3: Add the domain name to your payload

Update your Wi-Fi configuration to include the fully qualified domain name (FQDN) of your RADIUS or authentication server:

"domain": "radius.yourcompany.com"

Replace radius.yourcompany.com with the actual FQDN of your authentication server.

Alternatively, if you cannot specify a domain, ensure a valid Root CA certificate is associated with the Wi-Fi profile so Android can validate the server certificate without a domain name.

Step 4: Reissue the command

Re-issue the ADD_WIFI_AP command to your affected iMin devices with the corrected payload.

Step 5: Verify the fix

In the Esper Console, confirm that the ADD_WIFI_AP command status shows Success and that your device connects to the target SSID. Check the Esper Agent logs to verify the error no longer appears.

Still need help?

If you've added a valid domain to your payload and the error persists, or if you need assistance collecting logs from your device, contact Esper Support. include your Wi-Fi payload JSON and a copy of the Esper Agent logs from the affected device.