A customer has a requirement to enroll Android tablets with no Carrier connectivity. Additionally, they do not want use an open WiFi with a simple pre-shared password for the enrollment. Is there a solution to help the customer?

The correct answer is to use a QR code based provisioning method that can pass Wi-Fi EAP credentials, including certificates. Android Enterprise QR code enrollment supports embedding Wi-Fi network configurations, including enterprise-grade EAP (Extensible Authentication Protocol) settings and certificates, directly into the QR code. This allows devices to connect to secure Wi-Fi networks automatically during initial setup without manual intervention or relying on open networks. Providing SD cards with certificates is not a standard or scalable Android Enterprise enrollment method. Telling the customer to upload Wi-Fi certificates to the Zero-Touch portal for automatic delivery is incorrect; the Zero-Touch portal primarily handles device assignment and EMM configuration, not direct Wi-Fi certificate delivery for initial network access. Finally, telling the customer they must use an open Wi-Fi is incorrect and insecure, as QR code enrollment offers a secure alternative.