VMware AirWatch FAQs

Testing

VMware Advanced Remote Management (ARM)

Samsung VMware Advanced Remote Management

Knox Knox Samsung Knox Samsung Samsung Samsung

Knox

2.9

libremotedesktop_client.so

3.0 3.2

libknox_remotedesktopclient.so

3.2.1

Android 9.0

libknox_remotedesktopclient.so

Android 9.0

libknox_remotedesktopclient.knox.samsung.so

Other Languages: English VMware Advanced Remote Management (ARM) Requires a Specific Knox Library for use with Samsung Devices

FCA-189202

Workspace ONE UEM 1902

VMware Identity Manager Workspace ONE UEM Hub URL

vIDM Workspace ONE UEM Console

VMware Identity Manager [ID ] > [] > [AirWatch] Workspace ONE UEM VMware Identity Manager VMware Identity Manager Workspace ONE UEM

AirWatch API URL

SaaS AirWatch API URL as[].awmdm.com.

Workspace ONE UEM [] > [] > [] > [] > [ URL] AirWatch API URL

Other Languages: English

FCA-189202: Error message displayed when attempting to add Hub Services URL

AAPP-6682

VPP sToken Apple Business Manager sToken

Unable to save the sToken.Please re-try.

[]

Apple

AppleCare Apple Other Languages: English AAPP-6682: Uploading a new sToken for Apple Business Manager or VPP fails on initial save

This campaign kit includes several tools that are pre-designed, pre-written, or pre-planned to make it extremely simple for your company to promote adoption of Workspace ONE Intelligent Hub to your employees.

To get started, first download and review the Workspace ONE End User Adoption Kit Overview. This will walk you through exactly how to get started, a sample 2-month campaign, who to work with, and tips and tricks to help ensure a successful rollout.

Communication Assets:

Intelligent Hub Adoption Email Series

Intelligent Hub Adoption Email Header Templates

Education Assets:

Intelligent Hub Adoption Employee FAQ

WhatisWorkspaceONE.com End User Website

Promotion Assets:

Intelligent Hub Poster (VMware Branded)

Intelligent Hub Poster (Template for Branding)

Support Assets:

Intelligent Hub Mobile Enrollment Guide

Check out the other Adoption Kit paths to even further customize your enrollment campaign.

Workspace ONE App Adoption

Productivity Apps Adoption

BYOD Adoption

Horizon Adoption

If you would like a training on the kit and an introduction to the assets and how to best use them, please send an email to [email protected] to schedule.

Other Languages:

Symptoms

Devices in Work Managed mode, using Android 7 or older, may present an Allow installation from this source? (Hub) prompt when attempting to install internal apps. This prompt is displayed when the device allows installation from Unknown Sources. If the prompt is dismissed or hidden, the application will not be installed. If AirWatch Launcher is used on the device, the prompt may be blocked, resulting in failure to install the application.

The Unknown Sources setting is not enabled by default. The purpose of enabling this setting in Work Managed mode is to allow apps to be installed through side-loading or from 3rdparty sources. As such, it is more secure for this setting to be disabled. Even without this setting enabled, VMware Workspace ONE can install internal apps silently.

To prevent this prompt, it is recommended to administratively disable the Unknown Sources setting on Work Managed devices on Android 7 and older by using an Android Restrictions profile. To achieve this, the profile should have the Allow Non-Market App Installation restriction unchecked (default state). If no Restrictions profile is pushed, the setting will be disabled on devices by default, but users will have the ability to enable it manually.

By default, AirWatch Launcher will automatically block and/or hide this prompt unless the Google Play Store is whitelisted in the Launcher profile. If you are using AirWatch Launcher and need Unknown Sources to be enabled, whitelisting Google Play Store would allow the prompt to be shown and accepted by the user.

Customer Impact

If the prompt is dismissed or blocked in some way, the internal app will not be installed. AirWatch Launcher will block this prompt unless configured to whitelist Play Store.

Workaround

Use the Allow Non-Market App Installation restriction in a disabled state to administratively disable the Unknown Sources setting on these devices.

Support Contact Information

To receive support, either submit a ticket via the My Workspace ONE portal or call your local support line.

Best Regards,

The VMware Workspace ONE TeamOther Languages:

Android 7.0 (Work Managed) Hub - ? AirWatch Launcher

(Work Managed) VMware Workspace ONE

Android 7.0 (Work Managed) Android [] ()

AirWatch Launcher Google Play Launcher AirWatch Launcher Google Play

AirWatch Launcher Play

[]

My Workspace ONE

VMware Workspace ONE Other Languages: English Devices Using Android 7.0 (Nougat) and Older in Work Managed Mode are Prompting for Additional Installation

Version Identified

All versions of VMware Advanced Remote Management (ARM)

Symptoms

Select Samsung devices are only available in View Only mode in VMware Advanced Remote Management without the option of attaining full control of the device.

Fix Version

Without a specific Knox library, full control is not possible on the device. The file name for current KNOX versions are shown below. In order to meet the Samsung Knox Library requirement, Samsung must release a firmware upgrade. Samsung is aware of the issue and the need for firmware upgrades for select devices; please report any models missing these libraries to Samsung.

KNOX Version

Library Name

2.9

libremotedesktop_client.so

3.0 - 3.2

libknox_remotedesktopclient.so

3.2.1 and above

Up to Android 9.0

libknox_remotedesktopclient.so

Android 9.0 and above

libknox_remotedesktopclient.knox.samsung.so

Other Languages:

Identifier

FCA-189202

Version Identified

Workspace ONE UEM Console 1902

Symptoms

If you have previously configured VMware Identity Manager with another Workspace ONE UEM tenant or Organization Group, the following error message may appear when attempting to configure the Hub Services URL:

Save Failed. vIDM tenant is already configured with different Workspace ONE

UEM Console instance or Organization Group.

Workaround

To resolve this issue, navigate to Identity & Access Management > Setup > AirWatch in VMware Identity Manager to manually update your VMware Identity Manager configuration with the Workspace ONE UEM Console configuration. For more information on configuring the Workspace ONE UEM Console in VMware Identity Manager, please refer to our documentation guide here.

To locate your AirWatch API URL, please perform the following:

SaaS: Your API URL will follow the following format:as[number].awmdm.com.

On-Premises:Navigate to Settings > System > Advanced > Site URLs in the Workspace ONE UEM Console to locate your AirWatch API URL.

Fix Version

Our product team has been engaged and is actively working to resolve the issue.

Other Languages:

Identifier

AAPP-6682

Symptoms

When uploading a new sToken, whether from a VPP account or migrating to Apple Business Manager, the initial save will fail with the following error:

Unable to save the sToken. Please re-try.

This has not been seen to occur on renewals or subsequent saves after the initial save attempt.

Workaround

Once the initial save fails, click Save to try again and the save should be successful.

Fix Version

We have informed Apple of the issue and this article will be updated once we confirm a resolution.

If you have Apple Care Support, you may wish to reach out directly to Apple to learn more details around the status of this issue.

Other Languages:

VMware Workspace ONE SaaS VMware Identity Manager Transport Layer Security (TLS) 1.0/1.1 TLS 1.0/1.1 2018 10 19 SaaS VMware Identity Manager 2018 12 1 TLS 1.0/1.1 TLS 1.2

SaaS Workspace ONE UEM

VMware Workspace ONE

2018 12 1 TLS 1.0/1.1 SaaS VMware Identity Manager TLS SaaS VMware Identity Manager /

TLS 1.2

Android 4.3

Firefox 25

Internet Explorer8 10 (Windows 7 )

Internet Explorer10 (Windows Phone 8.0)

Safari 6.0.4 OS X 10.8.4

My Workspace ONE

VMware Workspace ONE Other Languages: English End of General Support for VMware Identity Manager TLS 1.0 and 1.1 (Production)

Identifier

ENRL-913

Version Identified

Workspace ONE UEM 18.11.0.9

Symptoms

When enrolling an iOS device using Workspace ONE Intelligent Hub, end-users may see the following error message after entering their email address:

"We're having trouble loading this page. Please contact your admin to work through

this error."

This issue only occurs if the Workspace ONE UEM Console has Auto-Discovery configured and Identity Manager is set as the Source of Authentication for Workspace ONE Intelligent Hub.

Workaround

Devices which have been affected are still able to enroll using the Device Services URL and Group ID.

The Device Services URL can be found in the Workspace ONE UEM Console underGroups & Settings > All Settings > System > Advanced > Site URLs.

Note: (Device Services URL (use the URL without /DeviceServices)

The Group ID can be found in the Workspace ONE UEM Console under Groups & Settings > Groups > Organization Groups Details or by hovering over the Organization Name.

Fix Version

This has been resolved in Workspace ONE UEM Console 18.11.0.11+.

Other Languages:

Overview

As part of VMwares promise to provide best-in-class security to our customers, VMware Workspace ONE is discontinuing support for Transport Layer Security (TLS) versions 1.0 and1.1 in the vIDM hosted (SAAS) preview environments on October 19, 2018. From this date onwards, only TLS 1.2 will be supported in preview environments.

Note: This is not the Workspace ONE UEM Console (SaaS) environments.

We understand that security is important to our customers, and we are committed to transparency about changes that could affect your use of the service.Our teams do not anticipate any downtime associated with this deployment of this change.

Note:The EOGS notification forProduction environments has been posted here.

Customer Impact

As of October 19, 2018 the vIDM hosted (SAAS) preview environments will remove support for TLS 1.0 and 1.1. If you encounter issues connecting to the vIDM hosted (SAAS) preview environments due to TLS version, please upgrade your clients. This may require updates to certain client-server and browser-server combinations.

The followingare some clients that are known and unable to use TLS 1.2.

Android 4.3 and earlierversions

Firefox 25 and below

Internet Explorer8-10 on Windows 7 and earlierversions

Internet Explorer10 on Win Phone 8.0

Safari 6.0.4/OS X10.8.4 and earlier versions

Support Contact Information

To receive support, either submit a ticket via the My Workspace ONE portal or call your local support line.

Best Regards,

The VMware Workspace ONE Team

Other Languages:

Standard Maintenance Windows

During the standard VMware Workspace ONE maintenance windows, Cloud Operations teams are deploying critical Windows server patches in accordance with Microsoft best practices. During the 4 hour window customers can expect, on average, 30 minutes of downtime. The following list outlines the expected behaviors that may be experienced during this downtime:

Any device side configuration (Content, Application, or Device Profile) on the device prior to the maintenance window will continue to stay and function as designed

Email will continue to sync as normal

VMware Browser will continue to work as normal using existing configuration

AirWatch Inbox / VMware Boxer will continue to work as normal

Content Locker will allow users to view content that has already been downloaded to the device (Security policies allowing) but will be unable to download new content

No compliance or administrator triggered updates to device configuration (Content, Application or Device Profile) will be possible

Any pendingcompliance or administrator triggered updates will be processed once services are online

All incoming device data queued during this time and will be processed once services are online

All SaaS hosted websites will be unavailable to end-users and administrators

Administrator users will be unable to login to the VMware Workspace ONE Console

End-Users will be unable to enroll new devices

End-Users will be unable to access the App Catalog to install applications

End-Users will be unable to access the Self Service portal

Note: VMware Workspace ONE SaaS environments are designed to be highly available to minimize the chances of an environment experiencing such downtime

Outside of periods of system downtime, SaaS environments will perform with sub-optimal performance.This can manifest itself in application latency and intermittent time outs for end-users and administrators. The following list outlines the expected behaviors that may be experienced during the sub-optimal performance of a maintenance window:

Any device side configuration (Content, Application, or Device Profile) on the device prior to the maintenance window will continue to stay and function as designed

Email will continue to sync as normal

VMware Browser will continue to work as normal

AirWatch Inbox / VMware Boxer will continue to work as normal

Content Locker will allow users to view content that has already been downloaded to the device (Security policies allowing) but users may experience intermittent time outs and general slowness while downloading new content

Any compliance or administrator triggered updates to device configuration (Content, Application or Device Profile) may be processed slower than usual

All SaaS hosted websites will be available but end-users and administrators may experience latency and intermittent time outs

Administrators will be able to login to the VMware Workspace ONE Console

End-Users will be able to enroll new devices

End-Users will be able to access the App Catalog to install applications

End-Users will be able to access the Self Service portal, any commands initiated by the end user may be processed slower than usual

VMware Workspace ONE recommends customers avoid planning roll outs during planned maintenance windows to avoid unexpected disruptions.

In the rare case that customers experience any disruption in service with client hosted VMware Workspace ONE integration modules such as VMware Workspace ONE Cloud Connector (ACC), VMware Tunnel, Mobile Access Gateway (MAG), Secure Email Gateway (SEG), VMware Workspace ONE recommends restarting the service as a troubleshooting measure. If issues persist, engage VMware Workspace ONE Support for further assistance.

To avoid any disruption in service, VMware Workspace ONE recommends customers whitelist all necessary VMware Workspace ONE SaaS IP Ranges that can be found here.

Note:Standard VMware Workspace ONE maintenance windows, may also be used for basic infrastructure maintenance activities (e.g. system reboots, etc.). Additional details will be provided in case customers need to be awarespecific details regarding such maintenance.

Support Contact Information

To receive support, either submit a ticket via the My Workspace ONE portal or call your local support line.

Best Regards,

The VMware Workspace ONE Team

Overview

On October 17, 2019, VMware will no longer support the Standalone Content Gateway (additional details here ), and in turn VMware will not support hosting internal applications on internal networks with connections facilitated by the Content Gateway (when an Internal App is added as link).

Customer Impact

If you are using a repository on your internal network to distribute internal applications, the Windows version of the Content Gateway was able to facilitate the connection for the device to get the application from this repository when theWorkspace ONE UEM consoleinitiates app deployment.

The Windows Content Gateway will not be supported after October 17th, 2019. This means customers who are hosting internal applications on an internal network and leveraging the Content Gateway to retrieve that application will need to consider one of the alternative strategies listed below.

Alternative Strategies

Host and distribute applications from cloud storage

If you are using cloud storage to host an internal application, Workspace ONE UEM facilitates the connection for the device to get the application package from the cloud storage system when the deployment is initiated. Workspace ONE UEM currently does not support cloud storage system links that require authentication.

Download and distribute with Workspace ONE UEM

Select to have Workspace ONE UEM retrieve the package file from a link and store it rather than distributing the link directly to end-users. This functionality is particularly useful for customers who use Workspace ONE UEM for continuous integration between systems to distribute applications. Go to the API help in the console to find the API value.

Support Contact Information

To receive support, either submit a ticket via the My Workspace ONE portal or call your local support line.

Best Regards,

The VMware Workspace ONE TeamOther Languages:

AirWatch Launcher Workspace ONE UEM MDM Android AirWatch Launcher 3.2

[] XML XML

[]

[] []

XML []

XML

True False

[] PayloadUUID

[]

characteristic type

Android characteristic type="com.airwatch.android.androidwork.launcher"

Android (Legacy) characteristic type="com.airwatch.android.kiosk.settings"

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"><parm name="UsageAccess" value="True"/></characteristic>

Launcher 10

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"> <parm name="FloatingTimeoutValue" value="15"/></characteristic>

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"> <parm name="FixSettingsPosition" value="True"/></characteristic>

Launcher OS OEM

Launcher

(action)

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"> <parm name="CustomSettings" value="{"CustomSettings": [ {"name": "Location Settings","action": "android.settings.LOCATION_SOURCE_SETTINGS"} ]}"/>

</characteristic>

(pName) (cName)

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"> <parm name="CustomSettings" value="{"CustomSettings": [ {"name": "Manage Applications Settings","pName": "com.android.settings","cName": "android.settings.MANAGE_APPLICATIONS_SETTINGS"} ]}"/></characteristic>

Android Settings

Launcher

Google

<characteristic type="com.airwatch.android.kiosk.settings" uuid="eadfebd8-7f4c-4837-b9dd-dfcf31bd84e6"> <parm name="AllowAutoBranding" value="true" /></characteristic>

16

<characteristic type="com.airwatch.android.kiosk.settings" uuid="eadfebd8-7f4c-4837-b9dd-dfcf31bd84e6"> <parm name="AllowBranding" value=" {"titleColor":"#FC002E","titleTextColor": "#F377F7","accentColor":"#36E712","highlightColor":"#4E993E","statusBarColor":"#FC002E"}"/></characteristic>

Launcher

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"> <parm name="CustomActivities" value="{"CustomActivities": [ {"pName": "com.example.demoapplication","cName": "com.example.demoapplication.MainActivity"}, {"pName": "com.example.demoapplication","cName": "com.example.demoapplication.Main2Activity"} ]}"/></characteristic>

[]

Launcher [] [][]

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"> <parm name="RemoveWelcomeScreen" value="True"/></characteristic>

Launcher /

OEM API Launcher AirWatch SDK API

AgentLauncherOEM

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"> <parm name="ClearAppData" value="True"/></characteristic>

Launcher Launcher Launcher Launcher

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"> <parm name="InActivityLock" value="True"/></characteristic>

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"> <parm name="InActivityLock" value="True"/> <parm name="InActivityTimeout" value="10"/></characteristic>

/

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"> <parm name="CacheProfile" value="True"/></characteristic>

Launcher WebView

AirWatch Launcher WebView Browser Web WebView

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"> <parm name="AllowBuiltInBrowser" value="True"/></characteristic>

Launcher

AirWatch Launcher Launcher

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"> <parm name="AllowNotificationPermission" value="True"/></characteristic>

canLaunchNativeSettings

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"> <parm name="AllowNotificationPermission" value="True"/> <parm name="ForceTabletNotificationPermission" value="True"/></characteristic>

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"> <parm name="AllowNotificationPermission" value="True"/> <parm name="CanLaunchNativeSettings" value="True"/></characteristic>

Launcher

Launcher Launcher + + +

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec">

<parm name="CustomShortcuts" value="{"CustomShortcuts":

[{"name":" Manage Applications Settings","pName":"com.android.settings","cName":

"com.android.settings.Settings$DateTimeSettingsActivity"},

{"name": "Locale Settings","pName":

"com.android.settings","cName": "com.android.settings.Settings$LocalePickerActivity"}]}"/>

</characteristic>

Wi-FiBluetooth Launcher Launcher CustomSettings

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"> <parm name="CanLaunchNativeSettings" value="True"/></characteristic>

forceLaunch canLaunchNativeSettings forceLaunch CustomSettings

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"> <parm name="CustomShortcuts" value="{"CustomShortcuts": [ {"name": "Manage Applications Settings","forceLaunch": "true","pName": "com.android.settings","cName": "com.android.settings.Settings$DateTimeSettingsActivity"}, {"name": "Locale Settings","pName": "com.android.settings","cName": "com.android.settings.Settings$LocalePickerActivity"} ]}"/></characteristic>

XML Manage Applications SettingsLocale Settings Launcher forceLaunch Manage Applications

Launcher forceLaunch canLaunchNativeSettings

OS Launcher

Launcher [] PDFExcel API OEM AirWatch

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"> <parm name="AllowClearAppDefaults" value="True"/></characteristic>

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"> <parm name="CannotClearAppDefaults" value="True"/></characteristic>

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"> <parm name="CannotClearDefaults" value="True"/></characteristic>

AirWatch Launcher AirWatch Launcher

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"> <parm name="BootupLauncher" value="com.sonyericsson.initialbootsetup, com.sonyericsson.setupwizard, com.honeywell.systemtools.autoinstall/></characteristic>

/

<characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"><parm name="AllowStatusBar" value="True"/></characteristic>

AirWatch Launcher

AirWatch Launcher 3.3

AirWatch Launcher 4.0

AirWatch Launcher 4.1

AirWatch Launcher 4.2

Other Languages: English Custom Profile Support in AirWatch Launcher 3.2

The VMware Workspace ONE team is excited to announce that a new update of VMware Workspace ONE Intelligence February 13th, 2019 release is publicly available.

What's New

Tech Preview - CVE Data Correlated with Windows OS Updates and KBs

Common vulnerability and exposures (CVE) are a list of entries for publicly known cyber security vulnerabilities, which can be leveraged by Workspace ONE Intelligence.

Search reports and dashboards for CVE data. Return a list of devices that are vulnerable to a critical CVE when users do not have the corresponding KB/patch installed or when the KB/patchfailed to install.

Tech Preview - CVE Widget Templates

There are now four new Widget templates available under the OS Update template category related to CVE in the Add Widget section of My Dashboard

Number of CVEs associated with your windows devices

Devices Vulnerable to High CVEs (Common Vulnerability Scoring System) score >8

Top 10 CVEs by Impacted Devices

Patches (KBs) with High Common Vulnerability Scoring System Scores

Tech Preview - CVE Reports Templates

There are now two new report templates available under the OS Updates template category related to CVE in the Add Reports section of the console.

All Devices associated with a CVE

Devices associated with a high CVE severity rating based on a CVSS (Common Vulnerability Scoring System) score > 8

Resolved Issues

For information about resolved issues, see the VMware Workspace ONE Intelligence Release Notes available in VMware Docs.

Customer Impact

Take advantage of these updates available with Workspace ONE UEM Console. Navigate to Hub > Intelligence and follow the opt-in process to get started.

Compatibility, Installation, and Upgrade

On-Premises Customer Prerequisite

Download and install the Workspace ONE Intelligence Connector. These actions enable the Intelligence Opt-in within the Workspace ONE UEM Console. Navigate to Hub > Intelligence to access the Intelligence console and technical preview features.

Documentation

The Workspace ONE Intelligence documentation is available here.

System Health Status

You can subscribe to the Workspace ONE Intelligence system health status here.

Support Contact Information

To receive support, either submit a ticket via the My Workspace ONE portal or call your local support line.

Best Regards,

The VMware Workspace ONE TeamOther Languages:

VMware Workspace ONE VMware Workspace ONE Intelligence 2019/02/13

- Windows OS CVE

Common Vulnerabilities and Exposures (CVE) Workspace ONE Intelligence

CVE CVE / CVE

- CVE

[] [OS ] CVE 4

CVE ( Windows CVE )

High CVE (CVSS > 8)

(Common Vulnerability Scoring System () 8 CVE )

10 CVE

CVSS

- CVE

[] [OS ] CVE 2

CVE

High CVE (CVSS > 8)

VMware Docs VMware Workspace ONE Intelligence Release Notes (VMware Workspace ONE Intelligence )

Workspace ONE UEM [] > [Intelligence]

/

Workspace ONE Intelligence Connector /Workspace ONE UEM Intelligence [] > [Intelligence] Intelligence

Workspace ONE Intelligence

Workspace ONE Intelligence (SUBSCRIBE)

My Workspace ONE

VMware Workspace ONE Other Languages: English Introducing VMware Workspace ONE Intelligence February 13th, 2019 Release

Workspace ONE UEM managed Google Play Android Android Enterprise managed Google Play iframe iframe Google Play API VMware

Google Play Workspace ONE UEM VMware Workspace ONE Intelligent Hub VMware Workspace ONE UEM

Android Enterprise iframe

APK iframe 10 25 []

iframe

New Features for Android Managed Google Play Store in Workspace ONE UEM Console

Web

Web Android URL Google Play

managed Play Google Play managed Play () managed Play

managed Google Play

My Workspace ONE

VMware Workspace ONE Other Languages: English

VMware 2019 3 1 Android/Windows CE AirWatch Remote Management 3.0

(SnS) AirWatch Remote Management 3.0 2019 3 1 VMware Advanced Remote Management Add-On

VMware Advanced Remote Management Add-On HTML5

Add-On VMware Other Languages: English End of General Support for AirWatch Remote Management 3.0 for Android and Windows CE

Overview

In order to aid installing VMware Workspace ONE, some of the Workspace ONE installers can be run in a headless/silent mode. This is accomplished by running the installers via command line with specific arguments passed to the installer over the command line. These arguments takeplace of the prompts that you'd normally work through when running an installer.

Known Limitations

In headless mode, required prerequisites (like IIS and Java) cannot be installed. These need to be installed prior to attempting to run the installers in headless mode.

The database installer will default to registry values over command line values. If the DB connection details change between installations, these values should be deleted out of the registry first.

Running In Headless Mode

Msiexec Specific Arguments

There are a few flags that need to be passed to an installer to tell Msiexec that you wish to run the installer headless. Additionally, these flags determine log level. All of the installers need the same flags passed to it when running via command line. Examples for how to run these installers are provided specific to each installer, however the table below explains Msiexec-specific flags requiired.

Value

Explanation

Example Value

/s

This flag specifies that Msiexec should expect arguments to be passed to it.

/V

This flag specifies verbose logging for Msiexec.

/qn

This flag tells the installer to run in headless mode.

/lie

This flag sets the logging level for the installer. Directly preceding this needs to be the log path.

/lie C:\path\to\log.file

Workspace ONE Application Installer

Arguments

Value

Explanation

Example Value

TARGETDIR

This is the directory where Workspace ONE should be installed to.

TARGETDIR=E:\Workspace ONE

INSTALLDIR

This is the directory where Workspace ONE should be installed to.

INSTALLDIR=E:\Workspace ONE

AWSETUPCONFIGFILE

Path to the configuration file.

AWSETUPCONFIGFILE=C:\path\to\config.xml

Configuration XML

The application installer requires too many properties to pass via command line, so to simplify configuration, the installer will accept an XML file with the majority of the properties set in said file. Below are a few example XMLs attached for review. Detailed configuration of these XML files is outside of the scope of this document at this time.

API_ConfigScript.xml

CN_ConfigScript.xml

DS_ConfigScript.xml

Single_ConfigScript.xml

Example Command

Workspace ONE_Application_8.4_Full_Install.exe/s /V"/qn /lie D:\Installs\AppInstall.log TARGETDIR=E:\Workspace ONE INSTALLDIR=E:\Workspace ONE AWSETUPCONFIGFILE=C:\path\to\config.xml"

Note:If you're running these commands via PowerShell, you need to provide escape characters around the quotes (' for PowerShell). Also, there is no space between /V"/qn because Msiexe expects arguments to begin directly after the quote. Placing a space here would result in an error.

Workspace ONE Database Installer

Arguments

The database installer requires the following arguments passed to it via command line.

Value

Explanation

Example Value

TARGETDIR

This is the directory where Workspace ONE should be installed to.

TARGETDIR=E:\Workspace ONE

INSTALLDIR

This is the directory where Workspace ONE should be installed to.

INSTALLDIR=E:\Workspace ONE

IS_SQLSERVER_AUTHENTICATION

Authentication type used to connect to the database server.

0 = Windows Auth

1 = Basic Auth

IS_SQLSERVER_AUTHENTICATION=1

IS_SQLSERVER_SERVER

Path to the database.

IS_SQLSERVER_SERVER=ATLP-DB01.COMPANY.ORG\2008R2

IS_SQLSERVER_USERNAME

Username to connect to the database.

IS_SQLSERVER_USERNAME=username

IS_SQLSERVER_PASSWORD

Password to connect to the database.

IS_SQLSERVER_PASSWORD=password

IS_SQLSERVER_DATABASE

Name of database.

IS_SQLSERVER_DATABASE=awdb

Example Command

Workspace ONE_DB_8.4_Setup.exe /s /V"/qn /lie D:\Installs\DBInstall.log TARGETDIR=E:\Workspace ONE INSTALLDIR=E:\Workspace ONE IS_SQLSERVER_AUTHENTICATION=1IS_SQLSERVER_SERVER=ATLP-DB01.COMPANY.ORG\2008R2IS_SQLSERVER_USERNAME=DBUSER IS_SQLSERVER_PASSWORD=DBPASSWORD IS_SQLSERVER_DATABASE=AIRWATCHDB"

Note:If you're running these commands via PowerShell, you need to provide escape characters around the quotes (` for PowerShell). Also, there is no space between /V"/qn because Msiexe expects arguments to begin directly after the quote. Placing a space here would result in an error.

The VMware Workspace ONE Team is excited to announce Workspace ONE UEM 1902 is scheduled to be deployed to SaaS environments. When your environment is scheduled to be upgraded, you can view the upgrade timeline by navigating to the My Company page on My Workspace ONE.

A separate notification will be sent out when Workspace ONE UEM 1902 is available for On-Premises customers in the coming weeks.

What's New?

Know when your password is going to expire with the new Email Notification of Password Expiration.The UEM console sends administrators an email five days (by default) before a password expires. On-premises administrators can change the default value of five days while shared SaaS administrators cannot. If eligible, change this default value by navigating to Groups & Settings > All Settings > Admin > Console Security > Passwords.The emails are only sent on the first and last day of the notification period.

Meet the new Organization Group picker.Several UI improvements have been made to the organization group picker, found in Add Smart Group, Add User Account, Add Admin Account > Role, and Add DEP Profile screens.An instant search function has been added: start typing in the OG text box and it immediately runs a search based on the string you enter, displaying the names of the OGs for which it finds matches. OGs that appear in the instant search results are presented with their full hierarchy path, with individual organization groups separated by forward-slashes. OG names and paths that are longer than the width of the OG picker window wrap around so you can see the entire name/path. No configuration is needed to use this feature, it's enabled by default.

Improve security by including a user's active directory Secure Identifier in the certificate SAN for ADCS CA Integration.You can now map the SID value certificate requests for ADCS certificate templates.

Control who you send your SMTP test connection emails to.We've added the ability to set the "To" email address when testing the SMTP connection. To use this new feature, navigate to Groups & Settings > All Settings > System > Enterprise Integration > Email (SMTP).

Configure what's important with the Configurations page.The Configurations page is a curated list of critical system settings that are essential to setting up your business needs. You can search the configurations for the feature you are interested in, filter out features you do not want to see, and share your filtered list with other administrators. Take advantage of this feature by navigating to Groups & Settings > Configurations.

Getting Started with Workspace ONE Intelligent Hub.

Enhanced experience to define the Intelligent Hub configuration. You can now find a summary of Intelligent Hub settings around management mode, authentication type, and Hub catalog within the Intelligent Hub configuration page, and even configure those settings easily and quickly.

Activate Hub Services instantly even if youdon'thave the Cloud VMware Identity Manager instance. The Intelligent Hub Configuration page now provides instant access to Hub Services so that you can start your journey towards the digital workspace. You no longer have to file a support ticket or contact your VMware representative to take advantage of Hub Services. You can click through a simple wizard to get the VMware Identity Manager Cloud tenant and auto activate Hub Services.

Seamless activation of Hub Services. If you already have a Cloud instance of VMware Identity Manager and want to use Hub Services features like the catalog, People, and Notifications, we have you covered. We refined the experience so you can just enter the tenant URL and credentials to active Hub Services.

Quickly configure VMware-hosted mobile flows connectors.Find and configure VMware-hosted mobile flows connectors without needing to deploy any connectors on your cloud or infrastructure. The UEM console compiles a list of available connectors for you to use.

For additional information, please see the Workspace ONE UEM 1902 release notes available in VMware Docs.

Support Contact Information

To receive support, either submit a ticket via the My Workspace ONE portal or call your local support line.

Best Regards,

The VMware Workspace ONE TeamOther Languages:

VMware Workspace ONE SaaS Workspace ONE UEM 1902 SaaS Workspace ONE UEM 1902 My Workspace ONE My Company

Workspace ONE UEM 1902

E 5 UEM E 5 SaaS [] > [] > [] > [ ] > [] E

UI [ ][][] > [] DEP [] [] /

ADCS CA SAN Active Directory ADCS SID

SMTP E SMTP [] E [] > [] > [] > [] > [E (SMTP)]

[] > []

Workspace ONE Intelligent Hub

Intelligent Hub Hub Intelligent Hub [Hub ]

Cloud VMware Identity Manager Hub Intelligent Hub Hub Hub VMware VMware Identity Manager Hub

Hub VMware Identity Manager Cloud People Hub URL Hub

VMware Mobile Flows VMware Mobile Flows Mobile Flows UEM

VMware Docs Workspace ONE UEM 1902 Release Notes (Workspace ONE UEM 1902 )

My Workspace ONE

VMware Workspace ONE Other Languages: English Introducing Workspace ONE UEM 1902 for SaaS

AirWatch Launcher Workspace ONE UEM MDM Android AirWatch Launcher 3.3

[] XML XML

1. []

2. [] []

3. XML []

XML

True False

[] PayloadUUID

4. []

characteristic type

Android characteristic type="com.airwatch.android.androidwork.launcher"

Android (Legacy) characteristic type="com.airwatch.android.kiosk.settings"

- XML

- topLefttopRighttopCenterbottomLeftbottomRightbottomCenter center XML (topCenter)

- sp

- 16

<characteristic type="com.airwatch.android.kiosk.settings" uuid="eadfebd8-7f4c-4837-b9dd-dfcf31bd84e6"><parm name="DisplayLockScreenMessage" value="{"message":"AirWatch","position":"topRight","textSize":"20", "textColor":"#4E993E"}"/></characteristic>

/ AirWatch /

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"><parm name="MaxProfilesAllowed" value="Value"/> </characteristic>

//

Launcher

[]

[]

AirWatch SAFE API SAFE XML

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"><parm name="DismissSafeRebootDialog" value="True"/></characteristic>

/ XML 1

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"><parm name="DismissPowerOffDialog" value="True"/></characteristic>

AirWatch [ ] XML /

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"><parm name="DonotClearAppDataSet" value="com.airwatch.browser,com.android.testapp"/></characteristic>

ID /

AirWatch Launcher

<characteristic type="com.airwatch.android.kiosk.settings" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec"><parm name="DisableFolderRename" value="True"/> </characteristic>

AirWatch Launcher

AirWatch Launcher 3.2

AirWatch Launcher 4.0

AirWatch Launcher 4.1

AirWatch Launcher 4.2

Other Languages: English Custom Profile Support in AirWatch Launcher 3.3

New Features

AAGNT-185371: Device Side Force Reprocess - UI Option

Technical Requirements

UEM Console version:9.2+

Android 4.1+

ENRL-913

Workspace ONE UEM 18.11.0.9

Workspace ONE Intelligent Hub iOS E

[Resolved] ENRL-913: Error displayed after entering email address during Intelligent Hub enrollment on iOS devices

Workspace ONE UEM [Intelligent Hub ] Identity Manager

URL ID

URL Workspace ONE UEM [] > [] > [] > [] > [ URL]

(/DeviceServices URL URL )

ID Workspace ONE UEM [] > [] > [] > [] []

Workspace ONE UEM 18.11.0.11 Other Languages: English

VMware 2019 5 4 VMware Workspace ONE People Workspace ONE People App Store Google Play (2019 2 4 ) (2019 5 4 ) Workspace ONE Workspace ONE People

Workspace ONE People Workspace ONE Intelligent Hub Workspace ONE People Intelligent Hub [People]

Workspace ONE People Workspace ONE Intelligent Hub ( Workspace ONE Intelligent Hub )

VMware Workspace ONE Intelligent Hub People Hub Workspace ONE

Hub

IT

PeopleE

Intelligent Hub

Workspace ONE

My Workspace ONE Resource

My Workspace ONE

VMware Workspace ONE Other Languages: English End of General Support for VMware Workspace ONE People

Overview

On March 1, 2019, Remote Management 3.0 for Android and Windows CE will reach its End of General Support (EOGS) and will no longer be supported by VMware Workspace ONE.

Customer Impact

All existing AirWatch Remote Management 3.0 installations for Android and Windows CE with active Support and Subscription (SnS) will continue to be supported until March 1, 2019. Upon renewal, existing customers with remote management use cases and requirements are encouraged to purchase the latest solution,VMware Advanced Remote Management Add-On,in order to not lose functionality post the EOGS date.

The VMware Advanced Remote Management Add-On is a more powerful HTML5-based solution, which delivers the best user experience and most comprehensive remote management capabilities.

For questions on how to purchase this Add-On, please contact your VMware Sales Representative.

Other Languages:

The VMware Workspace ONE team is excited to announce that VMware Relay Service 3.0.4 for Android is publicly available.

Whats New in this App Version

Updated app version to support Workspace ONE Intelligent Hub 9.0.2.14 for Android.

Customer Impact

Take advantage of these updates by meeting the minimum requirements and downloading AirWatch VMware Relay Service 3.0.4 for Android.

Minimum Requirements

Android 5.0+

How to Download AirWatch VMware Relay Service 3.0.4 for Android

Prior Version is Installed:Direct end users to update the app when prompted. The application seamlessly updates over the existing application version without disrupting device enterprise functionality.

Prior Version is Not Installed:Direct end users to download it from the Play Store.

Support Contact Information

To receive support, either submit a ticket via the My Workspace ONE portal or call your local support line.

Best Regards,

The VMware Workspace ONE TeamOther Languages:

VMware Workspace ONE VMware AirWatch Relay Service 3.0.4 for Android

Workspace ONE Intelligent Hub 9.0.2.14 for Android

VMware AirWatch Relay Service 3.0.4 for Android

Android 5.0+

VMware AirWatch Relay Service 3.0.4 for Android

Play

My Workspace ONE

VMware Workspace ONE Other Languages: English Introducing VMware Relay Service 3.0.4 for Android

VMware Workspace ONE AirWatch Container 3.9 for Android

AWORK-168396 SDK

AWORK-168411

AWORK-168410

AWORK-168406Container

AirWatch Container 3.9 for Android

Android 4.4+

Workspace ONE UEM (AirWatch ) 9.1+

AirWatch Container 3.9 for Android

Google Play

My Workspace ONE

VMware Workspace ONE Other Languages: English Introducing AirWatch Container 3.9 for Android

Samsung ELM Service Android AirWatch Agent 8.2 VMware Workspace ONE Intelligent Hub for Android Samsung ELM Service Android (Work Managed) Samsung Samsung ELM Service

Knox Play for WorkKnox

Samsung

Android Legacy BYOD ()

() Google Play VMware Workspace ONE Intelligent Hub

() VMware Workspace ONE Intelligent Hub

() VMware Workspace ONE Intelligent Hub

() Samsung

()

VMware Workspace ONE Android (Legacy) Platform Guide

Knox Mobile Enrollment ()

Knox Mobile Enrollment (KME)

() MDM

() MDM VMware Workspace ONE Intelligent Hub Samsung ELM Service

() Wi-Fi KME

VMware Workspace ONE Samsung Knox Mobile Enrollment Guide

Android - (Work Managed)

()

() NFC QR afw#

() VMware Workspace ONE Intelligent Hub

() Samsung

()

VMware Workspace ONE Android

Android - (Work Profile)

Samsung AirWatch Agent 8.2

VMware Workspace ONE Intelligent Hub Samsung ELM Service Android Legacy

ELM Service

() AirWatch Agent 8.2

() Samsung ELM Service

Android (Work Managed) (Samsung ELM Service )

() AirWatch Agent 8.2

() VMware Workspace ONE Intelligent Hub Samsung ELM

() Samsung

Samsung

Android Legacy (Samsung ELM Service )

() AirWatch Agent 8.2

() VMware Workspace ONE Intelligent Hub Samsung ELM

() Samsung

Samsung

Android (Work Profile)

AirWatch Agent 8.2 AirWatch Agent Samsung Samsung

VMware Workspace ONE Intelligent Hub Samsung ELM Service Android Legacy

()

() Samsung ELM Service

() AirWatch Agent 8.2

Samsung Knox

Android AirWatch Agent 8.2 Knox

Knox VMware Workspace ONE Intelligent Hub Knox VMware Workspace ONE Intelligent Hub VMware Workspace ONE Intelligent Hub / Workspace ONE UEM Console > > Android > Agent VMware Workspace ONE Intelligent Hub / Knox Android AirWatch Agent 8.2 Play Google Play

Samsung Knox Play for Work

Android AirWatch Agent 8.2 Knox Workspace ONE UEM Console AirWatch Agent 8.2 Knox Play for Work My Workspace ONE

My Workspace ONE

VMware Workspace ONE Other Languages: English Samsung ELM Service merged with VMware Workspace ONE Intelligent Hub for Android

VMware Workspace ONE Android VMware AirWatch Service for Huawei 1.0

Android VMware AirWatch Service for Huawei 1.0

AAGNT-179673: Huawei

Wi-Fi

NFC

SMS

SD

Wi-Fi

GPS

APN

Bluetooth

USB

USB

USB

Android VMware AirWatch Service for Huawei 1.0

EMUI 4.1 Huawei

Android AirWatch Agent 7.2

Android VMware AirWatch Service for Huawei 1.0

My Workspace ONE Resource Android VMware AirWatch Service for Huawei 1.0

My Workspace ONE

VMware Workspace ONE Other Languages: English Introducing VMware AirWatch Service for Huawei 1.0 for Android

VMware Workspace ONE SaaS Microsoft Windows Server VMware Workspace ONE 4 30

( )

E

VMware Browser

AirWatch Inbox VMware Boxer

Content Locker ( )

( )

SaaS Web

VMware Workspace ONE

App Catalog

VMware Workspace ONE SaaS

( )

E

VMware Browser

AirWatch Inbox VMware Boxer

Content Locker ( )

( )

SaaS Web

VMware Workspace ONE

App Catalog

ACC (VMware Workspace ONE Cloud Connector)VMware TunnelMAG (Mobile Access Gateway)SEG ( E ) VMware Workspace ONE VMware Workspace ONE

VMware Workspace ONE SaaS IP

VMware Workspace ONE SaaS ()

My Workspace ONE

VMware Workspace ONE Other Languages: English VMware Workspace ONE Monthly Maintenance FAQ

VMware Workspace ONE (AWCM) AWCM

AWCM

ACC (VMware Workspace ONE Cloud Connector) ( )

VMware Tunnel

MAG (Mobile Access Gateway)

(Windows Mobile Android )

VMware Workspace ONE SaaS IP

ACC (VMware Workspace ONE Cloud Connector)VMware TunnelMAG (Mobile Access Gateway)SEG ( E ) VMware Workspace ONE VMware Workspace ONE

My Workspace ONE

VMware Workspace ONE Other Languages: English VMware Workspace ONE AWCM Maintenance FAQ

SaaS

VMware Workspace ONE SaaS My Workspace ONE Web My Company

VMware Workspace ONE / VMware Workspace ONE ( )

My Workspace ONE

SaaS VMware Workspace ONE My Workspace ONE My Company

My Company Upgrade this environment

VMware Workspace ONE

How to use the Dedicated SaaS Upgrade Scheduler

/SaaS Dedicated SaaS Overview ( SaaS )

YES, THIS IS WHAT I WANT SaaS VMware Workspace ONE Web

My Company

VMware

11:00 3:00

10:00 2:00

10:00 2:00

9:00 1:00

(reschedule) SaaS

(cancel upgrade) My Company Upgrade this environment SaaS

SaaS VMware Workspace ONE My Company 2 My Company

Other Languages: English

My Workspace ONE

2017 9 My Workspace ONE VMware VMware Workspace ONE My Workspace ONE

My Workspace ONE [Log In] 2 () Partner Central My VMwarePartner Central Partner Central

How to Log In to the My Workspace ONE Portal

My VMware Partner Central

My VMware

My VMware My VMware []

/ My Workspace ONE My Workspace ONE

2017 9 18 My Workspace ONE Other Languages: English

2017 9 18 My Workspace ONE VMware My Workspace ONE VMware Workspace ONE My Workspace ONE Support > Get Help

My Workspace ONE (Partner Central My VMware)

Partner Central

VMware Partner Network Partner Central Partner Central VMware Partner Network Partner Central Web Partner Central [email protected]

Partner Central My Workspace ONE My Workspace ONE My Workspace ONE my.air-watch.com

My VMware

VMware Partner Network My VMware My VMware / My Workspace ONE Other Languages: English Partner Login to My Workspace ONE

Technical Requirements

UEM Console version requirements:1811 or higher

Device side requirements:Windows 10 client OS version 1709 or newer

Recommended you run this process while the VM is "offline" so that you can ensure all apps are installed correctly in an offline state. Connect the VM to the network once the system reaches OOBE.

Setup Instructions

Download Windows 10 Pro x64 from MSDN or MS volume license site

Install on a fresh Virtual Machine

Once the system gets to the out of box screen (OOBE), hit CTRL-SHIFT-F3 to enter "Audit Mode".

Once at the desktop, drag and drop the PPKG, XML, and this tool to the desktop. (You might need to install VMware Tools if using VMware Workstation to enable drag and drop. Restarting the machine will automatically boot it back into Audit mode.)

Run the tool and select your PPKG and XML

Click the appropriate button depending on your test case:

"Apply Apps Only" to only install apps

"Apply Full Process" to initiate the end to end process.

Select "Restart" or "Shutdown" for the system behavior after applying Sysprep

New Features

Run silently or via script with new command line support

Supports automatic BitLocker decryption of Windows 10 clients

Bug fixes and improved logging

Overview

In all supported versions of the Workspace ONE UEM console, the managed Google Play Store is the recommended way to manage all your application deployment use-cases for Android devices. This managed Google Play loads in an iframe whenever a public app is added when Android Enterprise is enabled. This iframe is opened through API integration with Google Play and is not hosted by VMware.

Google Play has released several exciting new features over the last few weeks which are available to Workspace ONE UEM administrators today without an upgrade to the VMware Workspace ONE Intelligent Hub or the VMware Workspace ONE UEM console!

New Features

These new features are already available to Workspace ONE console administrators when adding a public app on an organization group with Android Enterprise enabled. Once the iframe is loaded, the new options are available in the left-hand menu. Each of these new features are described in the following sub-sections.

Simple Publishing Private Apps

The Private apps flow has been drastically improved to remove the need to add every piece of information normally needed for a public app and condensed it into an APK and a Title. Uploading through the iframe publishes the app in as little as 10 minutes and waives the $25 fee required to publish apps. Additional information such as a description, images, and more can be added in the Advanced options after uploading.

Note: Private apps uploaded through the iframe can never be made public apps.

Web Apps

Web applications can be managed on Android devices just like public apps. In order to do so, administrators must set the title, URL, display mode, and icon. Google Play will do the rest.

Organizing Apps

The managed Play Store experience for your users can be made to look and feel just like the Google Play on personal device. Workspace ONE administrators can simplify access to recommended apps by adding applications into collections which will then be displayed as swim lanes on the managed Play Store. When using this feature, there is a minimum requirement of one collection at all times. Apps which have not been assigned to a collection can only be found in the managed Play Store using the search functionality.

Note: Once an environment has begun using collections the managed Google Play cannot be reverted to an earlier state. Because the change to collections cannot be rolled back, customers are highly encouraged to test the feature in a sandbox environment to ensure it aligns with the desired end-user experience and functionality before rolling it out to any production environments.

Support Contact Information

To receive support, either submit a ticket via the My Workspace ONE portal or call your local support line.

Best Regards,

The VMware Workspace ONE Team

Other Languages:

The VMware Workspace ONE Provisioning Tool helps you test and validate your applications (exported as a .ppkg file) and the special-purpose unattend.xml configuration file as part of the Dell Provisioning for Workspace ONE offer. This tool simplifies the testing and validation of this process in your own environment before these files are sent and applied in the Dell factory.

Highlights

Simple UI to easily enable the IT admin to validate their ppkg and unattend.xml files in their own environment, mimicking what Dell is doing in the factory.

Supports PPKGs and unattend.xmls generated with Workspace ONE UEM Console 1811 or newer.

Highly flexible. Allows IT admins to specify the configurations for tool in a text based config file in order to change things like tool timeout and report location, to name a few.

Generates a detailed final summary report with client details and app installation results. This file is saved in C:\ProgramData\Airwatch\UnifiedAgent\Logs\PPKGFinalSummary.log after the "Full Process" button is clicked.

Halts the process if any steps fails for the given operation, giving the ability to IT admins to view & debug the state of the machine and the apps.

Supported Operations

Apply Apps Only - Given a ppkg, this tool deploys the applications on a test windows machine

Apply Full process - Given a ppkg and xml file, this tool deploys the applications on a test windows machine followed by Workspace ONE enrollment and Sysprep.

here.

VMware Workspace ONE Provisioning Tool Considerations

The VMware Workspace ONE Provisioning tool allows you to test yourDell Provisioning for VMware Workspace ONEconfiguration files. The tool also allows you configure the tool settings and use command line actions to run tests.

Command Line Actions

You can choose to run your tests using command line actions.

VMware Workspace ONE Provisioning Tool Command Line Actions

Command Line Action

Description

-a, --action

Required. Action to perform (AppsOnly or Full).

-p, --ppkg

Required. PPKG File path.

-u, --unattend

Unattend XML File path.

-s, --shutdown

Shuts down the computer after the Sysprep command finishes running.

-r, --reboot

Restarts the computer after Sysprep. You can use this option to audit the computer and to verify that the first-run experience operates correctly. The tool reboots by default if no option is specified.

--help

Display the help screen.

--version

Display the version information.

After running the action, exit codes display. These codes report the outcome of the action. The exit codes are as follows:

0 - Success

1 - Failure

2 - Reboot Required

3 - Timeout

Some examples include:

Display the help screen:VMwareWS1ProvisioningTool --help

Apply apps only (PPKG):VMwareWS1ProvisioningTool -a appsonly -p 'C:\MyProvisioningPackage.ppkg'

Apply full process (ppkg & XML) - shutting down the system at the end:VMwareWS1ProvisioningTool -a full -p 'C:\MyProvisioningPackage.ppkg' -u 'C:\MyAnswer.xml' -s

Apply full process (ppkg & XML) - rebooting the system at the end:VMwareWS1ProvisioningTool -a full -p 'C:\MyProvisioningPackage.ppkg' -u 'C:\MyAnswer.xml' -r

VMware Workspace ONE Provisioning Tool Configuration Options

You can change the configuration settings for the VMware Workspace ONE Provisioning Tool to meet your needs. To change the settings, you must edit the VMwareWS1ProvisioningTool.exe.config file.

For the full Dell Provisioning Operational Guide, please click

The VMware Workspace ONE team is excited to announce that AirWatch Container 3.9 for Android is publicly available.

Bugs Fixed in this App Version

AWORK-168396: Whitelisted apps are granted write access to SDK databases.

AWORK-168411: Profiles and banner are not landing on device after enrollment.

AWORK-168410: Apps will not re-install in container mode if the app was removed first.

AWORK-168406: Unnecessary popup window is seen while enrolling with Container.

Customer Impact

Take advantage of these updates by meeting the minimum requirements and downloading AirWatch Container 3.9 for Android.

Minimum Requirements

Android 4.4+

Workspace ONE UEM Console 9.1+

How to Download AirWatch Container 3.9 for Android

Prior Version is Installed: Direct end users to update the app when prompted. The application seamlessly updates over the existing application version without disrupting device enterprise functionality.

Prior Version is Not Installed: Direct end users to download it from the Google Play Store.

Support Contact Information

To receive support, either submit a ticket via the My Workspace ONE portal or call your local support line.

Best Regards,

The VMware Workspace ONE TeamOther Languages:

The VMware Workspace ONE Team is excited to announce that PIV-D Manager 1.1 for Android is publicly available.

VMware PIV-D Manager is a mobile application that integrates with various Derived Credential solution providers. PIV-D enables the use of Derived Credentials in conjunction with VMware AirWatch.

A Derived Credential, as defined by NIST SP 800-157, is analternative token which can be implemented and deployed directly with mobile devices. In simpler terms, a Derived Credential is a client certificate generated on the mobile device (or issued) after an end user has proven their identity using their existing smart card (i.e. CAC or PIV) during an enrollment process. A Derived Credential is a user-friendly yet secure alternative to using a traditional smart card with a mobile device.

Key Features of VMware PIV-D Manager 1.1 for Android

Integration with AirWatch Agent

Integration with VMware Browser

Certificate sharing with AirWatch SDK enabled applications

Activate Entrust and Intercede using OpenURL

Various SDK Updates and bug fixes

How to Download VMware PIV-D 1.1 for Android

Download VMware PIV-D 1.1 for Android from the My Workspace ONE Resource Portal

Support Contact Information

To receive support, either submit a ticket via the My Workspace ONE portal or call your local support line.

Best Regards,

The VMware Workspace ONE Team

Introducing VMware AirWatch Panasonic Service 1.2 for Android

The VMware Workspace ONETeam is excited to announce that VMware AirWatch Panasonic Service 1.2 for Android is publicly available.

Bugs Fixed in this App Version

AAGNT-176705: Resolved issue where internal apps installed through VMware Workspace ONE to Panasonic FZ-N1 devices did not complete installation.

Customer Impact

Take advantage of these updates by meeting the minimum requirements and downloading VMware AirWatch Panasonic Service 1.2 for Android.

Minimum Requirements

Android Ice Cream Sandwich and above (OS 4.0+)

Workspace ONE UEM Console 8.1+

How to Download VMware AirWatch Panasonic Service 1.2 for Android

Prior Version is Installed Direct end users to update the app when prompted. The application seamlessly updates over the existing application version without disrupting device enterprise functionality.

Prior Version is Not Installed Direct end users to download it from the Play Store.

Support Contact Information

To receive support, either submit a ticket via the My Workspace ONE portal or call your local support line.

Best Regards,

The VMware Workspace ONE Team

Introducing VMware AirWatch Kyocera Service 1.0.7 for Android

The VMware Workspace ONE Team is excited to announce that VMware AirWatch Kyocera Service 1.0.7 for Android is publicly available.

Bugs Fixed in this App Version

AAGNT-177821 Resolved issue with Kyocera devices being detected as non-enterprise.

Customer Impact

Take advantage of these updates by meeting the minimum requirements and downloading VMware AirWatch Kyocera Service 1.0.7 for Android.

Minimum Requirements

Android 4.0+

Workspace ONE UEM Console 8.1+

How to Download VMware AirWatch Kyocera Service 1.0.7 for Android

Prior Version is Installed Direct end users to update the app when prompted. The application seamlessly updates over the existing application version without disrupting device enterprise functionality.

Prior Version is Not Installed Direct end users to download it from the Google Play Store.

Support Contact Information

To receive support, either submit a ticket via the My Workspace ONE portal or call your local support line.

Best Regards,

The VMware Workspace ONE Team

The VMware Workspace ONE Team is excited to announce that VMware AirWatch Service for Huawei 1.0 for Android is publicly available.

Key Features of VMware AirWatch Service for Huawei 1.0 for Android

AAGNT-179673: Added new restrictions for Huawei devices:

Silent App Install

Allow Back Key

Allow Menu Key

Allow Wifi Tethering

Allow Status Bar

Allow Home Key

Allow NFC

Allow Cellular Data

Allow Voice Dialer

Allow Sending SMS

Allow Task Manager

Allow SD Card

Allow Wifi

Allow GPS

Allow Safe Mode

Configure and set preferred APN

Allow Bluetooth

Allow USB

Allow USB Mass Storage

Allow USB Debugging

Minimum Requirements for VMware AirWatch Service for Huawei 1.0 for Android

Huawei devices running EMUI 4.1 or higher

Android Agent v7.2 for Android

How to Download VMware AirWatch Service for Huawei 1.0 for Android

Download VMware AirWatch Service for Huawei 1.0 for Android from the My Workspace ONE Resource Portal.

Support Contact Information

To receive support, either submit a ticket via the My Workspace ONE portal or call your local support line.

Best Regards,

The VMware Workspace ONE Team

The VMware Workspace ONE Team is excited to announce that VMware AirWatch Service for MSI 1.0 for Android is publicly available.

Key Features of VMware AirWatch Service for MSI 1.0 for Android

AAGNT-178648: Support for silent certificate install

AAGNT-178646: Support for Allow Data Roaming restriction

AAGNT-178643: Set emergency button press interval

AAGNT-178642: Support for Enable/Disable all system certificates

AAGNT-178641: Enable/Disable specific applications on the device

AAGNT-178640: Support for application blacklisting and whitelisting

AAGNT-178638: Allow USB, MTP, Tethering, Voice Service, SD Card, Wi-Fi, Bluetooth, Camera, and Mobile Data

AAGNT-178636: Configure cellular APN settings on the device

AAGNT-178635: Install a Motorola custom device settings package via Apply Custom Settings File/Action

AAGNT-178254: Perform an OS Upgrade over the air via OS Upgrade File/Action

Customer Impact

Take advantage of this functionality by meeting the minimum requirements and downloadingVMware AirWatch Service for MSI 1.0 for Android.

Minimum Requirements for VMware AirWatch Service for MSI 1.0 for Android

Motorola LEX10 devices on Android Marshmallow or higher

How to Download VMware AirWatch MSI Service 1.0 for Android

Prior Version is Installed The application is built into the OS and requires an OS update to receive the new version.

Prior Version is Not Installed Direct end-users to update the OS to a version that contains the MSI Service.

Support Contact Information

To receive support, either submit a ticket via the My Workspace ONE portal or call your local support line.

Best Regards,

The VMware Workspace ONE Team

VMware Workspace ONE Cloud Messaging Service (AWCM) maintenance windows are leveraged to conduct maintenance work specifically against the AWCM application servers and associated public facing endpoints.

During AWCM maintenance windows customers might experience brief disruptionwith the following workflows:

Enterprise integration leveraging VMware Workspace ONE Cloud Connector (ACC) (e.g. Directory based authentication)

Real time policy updates for VMware Tunnel integration

Real time policy updates for Mobile Access Gateway integration

Certain advanced device features will be unavailable (e.g. Windows Mobile remote management, Android remote management and file explorer)

To avoid any disruption in service, VMware Workspace ONE recommends customers whitelist all necessary VMware Workspace ONE SaaS IP Ranges that can be found here.

In the rare case that customers experience any disruption in service with client hosted VMware Workspace ONE integration modules such as VMware Workspace ONE Cloud Connector (ACC), VMware Tunnel, Mobile Access Gateway (MAG), Secure Email Gateway (SEG), VMware Workspace ONE recommends restarting the service as a troubleshooting measure. If issues persist, engage VMware Workspace ONE Support for further assistance.

Support Contact Information

To receive support, either submit a ticket via the My Workspace ONE portal or call your local support line.

Best Regards,

The VMware Workspace ONE Team

Overview

As part of VMwares promise to provide best-in-class security to our customers, VMware is planning to update the network cipher suite supported in the VMware SaaS data centers by dropping support for weak/legacy ciphers.

This change applies to all SaaS hosted endpoints, specifically the Shared Services (App Wrapping, Auto Discovery), API interfaces, admin console sessions via the web browser as well as connections from mobile devices to device services endpoints.

Our teams do not anticipate any downtime associated with this deployment of this change.

Support Contact Information

To receive support, either submit a ticket via the My Workspace ONE portal or call your local support line.

Best Regards,

The VMware Workspace ONE Team

Other Languages:

How to log in to the My Workspace ONE Portal

As of September 2017, access to the My Workspace ONE portal is managed through VMware authentication systems. My Workspace ONE should still be used by VMware Workspace ONE Customers and Partners to submit support requests and find documentation.

When you navigate to the My Workspace ONE portal, first select the "Log In" button in the upper right corner. You will see two options for logging in. Customers and Partners without Partner Central credentials should select My VMware. Partners with Partner Central credentials should select Partner Central.

here

After you select the appropriate login option, you will be redirected to My VMware or Partner Central to log in:

If you have an existing My VMware profile, usethose credentials to log in.

If you are a new user to My VMware, please select the Register button to create an account.

Once you register and/or authenticate, you will be redirected back to My Workspace ONE and can browse normally.

For more information on how to manage users in My Workspace ONE after September 18, 2017, please click .