Microsoft Security | Intune | Microsoft Intune Android
Managing Android devices using Microsoft Intune
How to fix Android Wifi profile giving -2016281112 (Remediation failed) Error Code: 0x87d1fde8 error
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(252.8, 92%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDA%3C/text%3E%3C/svg%3E)
Dale Alderton
0
Reputation points
I have deployed a Wifi profile to all our personally owned Android devices. It includes a trusted root, issuing and SCEP user certificate - the whole certificate chain. The vast majority of devices receive the Wifi profile and connect to the Wifi network correctly. However, there are a handful of devices that show the -2016281112 (Remediation failed) Error Code: 0x87d1fde8 error. The user cannot connect to the wifi network. I cannot find any useful problem solving process to resolve this error in the documentation.
I know the profile works because we have over a thousand other devices working correctly. So, what needs to be done on these few problem devices? The device in question is a Samsung Galaxy S24 on Android 15. The device is compliant and the certificates show being successfully deployed.
What is the best way of fixing this?
Microsoft Security | Intune | Microsoft Intune Android
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 90%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPM%3C/text%3E%3C/svg%3E)
Pauline Mbabu 1,710 Reputation points Microsoft Employee2025-11-24T20:23:18.77+00:00 Hello @Dale Alderton ,
Here are some Troubleshooting steps you can do if you are still experiencing this issue.
To resolve error 2016281112 (0x87d1fde8) on Samsung Galaxy S24 devices running Android 15, IT teams should first verify device compliance and confirm that the SCEP certificate and Wi-Fi profile settings are correct in Intune. Next, force an Intune sync from both the Company Portal app and the Intune Admin Center, then remove and reassign the Wi-Fi profile to refresh policies. On the device, clear credentials and reset network settings to eliminate corrupted keystore entries and ensure the full certificate chain (root and intermediate) is trusted for Wi-Fi. Update the Company Portal app, Intune MDM agent, and device firmware to the latest versions, then test manual Wi-Fi connection using the deployed certificate to confirm functionality. If issues persist, remove the device from Intune, perform a factory reset, and re-enroll to clear stale policies. For scale, consider automating profile removal and sync actions with a PowerShell remediation script and provide a user-facing troubleshooting guide for self-service.
Sign in to comment
Sign in to answer