New issue
Advanced search Search tips

Issue 837732 link

Starred by 2 users

Issue metadata

Status: Available
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 1
Type: Bug



Sign in to add a comment

Lock network configuration change for online Demo Mode

Project Member Reported by agawronska@chromium.org, Apr 27 2018

Issue description

If network is configured by the user during online Demo Mode setup, the configuration should be locked. The only way to change it is power-washing and setting up the device again.

This restriction does not apply to the device that was transitioned from offline to online mode. Therefore is probably cannot be configured by policy only.
 
Labels: -M-68 M-69
Cc: atwilson@chromium.org michae...@chromium.org
Owner: agawronska@chromium.org
Update: We want to implement a policy for that.

Network configuration control will be implemented as a new Device Policy. We will add lockNetworkConfigUsedForEnrollment. The configuration will not be passed in a policy, instead the network chosen during OOBE/online enrollment of the device will be locked. 
Different demo mode configurations will need different values of  the policy:
Online -  lockNetworkConfigUsedForEnrollment: true
Offline - lockNetworkConfigUsedForEnrollment: false
Derelict - lockNetworkConfigUsedForEnrollment: true

We will need to load different policy blobs for Offline and Derelict mode during offline setup.

Labels: -M-69 M-70
Status: Assigned (was: Untriaged)
This bug has an owner, thus, it's been triaged. Changing status to "assigned".
Blocking: 812037 812040
Status: Started (was: Assigned)
Labels: -M-70 M-71
Status: Assigned (was: Started)
As spoken offline, there is some more product side specification needed for this feature. Let's sync after M70 branch work is done.

Some questions:
1. Should we only lock Wi-Fi network or other interfaces too?
2. What if multiple networks are connected during enrollment?
3. How to interact with existing policies? Eg. Should we allow enrollment network and networks listed by policy? 
Blocking: -812037 -812040
Labels: -M-71 M-72
Owner: ----
Status: Available (was: Assigned)

Sign in to add a comment