Device profiles ensure proper use of devices, protection of sensitive data, and workplace functionality. Profiles serve many different purposes, from letting you enforce corporate rules and procedures to tailoring and preparing Glass devices for how they are used.

The individual settings you configure are called payloads. Consider configuring only one payload per profile, which means you have multiple profiles for the different settings you want to push to devices. For example, you can create a profile to integrate with your email server and another to connect devices to your workplace Wi-Fi network.

The way profiles are deployed for Google Glass depends on the edition. The chart below explains the differences:

Deploying Profiles with First Edition Google Glass

For Google Glass, if you use certificate-based Wi-Fi, ensure that Screen Lock is set up and enabled before enrollment or certificate installation fails. Screen Lock is a device passcode on Google Glass devices. Steps to configure screen lock are as follows:

• Recovery code needs to be configured. This is achieved by running the following adb command (in this example, 12345 is the recovery code).
  • $ adb shell am broadcast -a com.google.glass.action.STORE_RECOVERY_CODE --el RECOVERY_CODE 12345
• Navigate to Settings > Device Options > Screen Lock to configure this option.

Deploying Profiles with Second Edition Google Glass

Google Glass EE2 uses Android Work Managed Device mode functionality. In the steps for creating a profile for Google Glass, select Android platform. For Google Glass EE15 and lower and other smart glasses, use Android (Legacy) platform.

Create Wi-Fi Profile

Configuring a Wi-Fi profile lets devices connect to corporate networks.

1. Navigate to Resources > Profiles & Baselines > Profiles > Add > Add Profile > .

2. Select Android (Legacy) > or > Android ( Second Edition Google Glass Only).

3. Configure the General profile settings as appropriate.

4. Select the Wi-Fi payload and configure the Wi-Fi settings.

   Setting	Description
   Service Set Identifier	Provide the name of the network the device connects to.
   Hidden Network	Indicate if the Wi-Fi network is hidden.
   Set as Active Network	Indicate if the device connects to the network with no end-user interaction.
   Security Type	Specify the access protocol used and whether certificates are required.

Depending on the selected security type, the displayed fields will change. If None, WEP,or WPA/WPA 2) are selected; the Password field will display.If WPA/WPA 2 Enterprise is selected, the Protocols and Authentication fields display.

-   **Protocols**
    -   Use Two Factor Authentication
    -   SFA Type
-   **Authentication**
    -   Identity
    -   Anonymous Identity
    -   Username
    -   Password
    -   Identity Certificate
    -   Root Certificate

| |Password|Provide the required credentials for the device to connect to the network. The password field displays when WEP, WPA/WPA 2, Any (Personal), WPA/WPA2 Enterprise are selected from the Security Type field.|

5. Select the Credentials payload and configure certificate setup that will be used to authenticate.

   Settings	Description
   Credential Source	Upload a certificate from your local machine or define a Defined Certificate Authority, or upload a User Certificate. - If you choose to Upload a certificate, complete the following:

   -   **Credential Name** – Enter the name of the credential or select on the information symbol to view acceptable lookup values like \{EmailDomain\} and \{DeviceModel\} to find the credential file to use.
   -   **Certificate** – **Upload** the new certificate or lookup values.
   

   • If you choose to use a Defined Certificate Authority, complete the following:
     • Certificate Authority for the Defined Certificate Authority – Select the external or internal CA issuing encryption keys for the PKI.
     • Certificate Template for the Defined Certificate Authority – Select the predefined template for the CA to use when requesting a certificate.
   • If you choose upload a User Certificate, select either S/MIME Certificate or S/MIME Encryption Certificate. |

6. Select Save & Publish.