Week 3 - VMware Digital Workspace Newsletter

  

Weekly highlight: 

 

VMware Workspace ONE ITSM Connector is now a ServiceNow certified app:

 

The Workspace ONE ITSM Connector supports common Workspace ONE UEM commands, such as change passcode, device lock, device and enterprise wipe, log requests, messages, soft reset, device sync, and more. Integration with Workspace ONE Assist enables help desks to quickly launch remote support sessions and view or control employee devices, directly from ServiceNow.

 

https://store.servicenow.com/sn_appstore_store.do#!/store/application/b110a7a11b12b41092ce8514604bcb28/1.0.2?referer=%2Fstore%2Fsearch%3Flistingtype%3Dallintegrations%25253Bancillary_app%25253Bcertified_apps%25253Bcontent%25253Bindustry_solution%25253Boem%25253Butility%25253Btemplate%26q%3DVMware&sl=sh

 

Release Notes

Initial release 

• Integration with Workspace ONE UEM via REST api
• Guided setup for HTTP connection
• Configurable device managment actions 
• Role based access for actions
• Seamless integration with standard Incident form

• Week 03 Software Releases

  
  

  Component	Release	Announcement	Release Date
  Photon OS	4.0 Rev2	OpenSSL 3.0.0 : In Photon OS 4.0 Rev2, the default OpenSSL version is 3.0.0. To support OpenSSL 3.0.0, all the dependent packages are updated and published. pmd-nextgen: The pmd-nextgen package introduces the photon-mgmtd tool. Use photon-mgmtd to manage systems, networks, services, and applications. photon-mgmtd features a plugin-based architecture with platform-independent APIs that you can use for remote access, performance analysis, configuration, and health monitoring. tdnf: In Photon OS 4.0 Rev2, tdnf is updated to version 3.2.3. This version of tdnfincludes bug fixes and new features such as the repoquerycommand, new metalink library, and so on. For more information about the features in version 3.2.3 refer to the following link: tdnf Releases Installer: In Photon OS 4.0 Rev2, the following enhancements are added to the installer: Support for Kickstart files in secondary devices. Support for a user-specified mount media to boot the operating system. Photon Real-Time Operating System: The Photon Real-Time Operating System is improved with lower latency and reduction in operating system jitters. Other improvements include better stability of the real-time applications and enhanced application-debugging capability. eBPF: Support for eBPF in the Linux kernel is added. GNU tarfs: Support for GNU tarfs in Linux-ESX kernel is added. https://vmware.github.io/photon/docs/overview/whats-new/	14.01.22
  VIDM	3.3.6	Log4j updated to 2.17. VMware Identity Manager 3.3.6 is a minor release that includes the fixes for VMSA-2021-0028 and VMSA-2021-0030. https://docs.vmware.com/en/VMware-Workspace-ONE-Access/3.3/rn/VMware-Identity-Manager-336-Release-Notes.html	17.01.22
  ENS v2 OnPrem	22.01	ENS-5140: Retrieving token fails if the token already exists in the ENS database. ENS-5162: ENS Installer is not honoring the proxy setting while checking connectivity with the signing service. https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-Email-Notification-Service-2-for-On-Premises-Installation.html#resolved-issues-for-workspace-one-email-notification-service-2-version-22-01-resolved	20.01.22
  WS1 Access SaaS	January 2022	Linux and Chrome OS are now supported device types in Access Policy Rules Previously, Linux and Chrome OS devices were limited to only matching access policy rules that are accessing content from “Web Browser” or “All Device Types” to authenticate with Workspace ONE Access. Now, we individually support identifying Linux and Chrome OS devices with their own drop-down options, allowing for increased flexibility to configure Linux-specific or Chrome OS-specific authentication methods. This addition will not disrupt the function of any current access policy configurations as both “Web Browser” and “All Device Types” will still apply to any operating system. https://docs.vmware.com/en/VMware-Workspace-ONE-Access/services/rn/Workspace-ONE-Access-Cloud-2021-release-notes.html#new	06.01.22
  Hub Services SaaS	January 2022	Simplify creating Notifications with Notification Templates Notification Templates allow admins to save standard or commonly used notification content as a template. Instead of starting from a blank slate, admins can create custom notifications quickly from a notification template. Admins can define new notification templates or save an existing notification as a notification template. To further streamline the notification creation experience, admins can send a new notification by copying an existing notification. Favorites section does not display if Favorites tab is disabled If the Favorites tab is not enabled in the admin console, the Favorites section will no longer show on the Hub web. Install UEM web clips (on Windows Hub) UEM web clips (deployed through a UEM profile) now have an additional option to allow installation by the user. Previously, these web clips were only launchable. Saba Learning Integration Pack for Workspace ONE Experience Workflows Hub Services customers that have Workspace ONE Experience Workflows enabled can now configure an integration with Saba Learning to notify users in Workspace ONE Intelligent Hub when a new training has been assigned to them. This notification will contain information about the courses along with a link to the course in Saba. https://docs.vmware.com/en/VMware-Workspace-ONE/services/rn/Workspace-ONE-Hub-Services-Cloud-2021-Release-Notes.html#about	20.01.22

  
  

  Guidance to VMware Horizon customers regarding Log4j

  • In a zero-day situation such as the Apache Software Foundation Log4j vulnerability, cyber criminals are racing to exploit the vulnerabilities identified by CVE-2021-44228 and CVE-2021-45046 before organizations can address them.  

  • We continue to amplify the message in our security advisory, VMSA-2021-0028, urging customers to address the vulnerability immediately, including with VMware Horizon 8 and Horizon 7.x. 

  • Note that all internal and external Horizon components including Connection Server, Agent, Cloud Connector and UAG must address the Log4j vulnerabilities in an urgent manner. Customers who have deployed Unified Access Gateway (UAG) as part of their Horizon environment should follow the guidance given in UAG knowledge base article 87092, in addition to the Horizon guidance provided in our advisory.

  • For more infos please read: https://blogs.vmware.com/euc/2022/01/guidance-to-vmware-horizon-customers-regarding-log4j.html

  
  

  Workspace ONE Intelligence shows international i18n characters in report export (86395)

  • Workspace ONE Intelligence reports do not display non-English characters (e.g Chinese) properly in downloadable/CSV reports. Although, the same data is displayed correctly in Workspace ONE UEM report.

  • KB: https://kb.vmware.com/s/article/86395?lang=en_US

  
  

  [Action Required] Android Intelligent Hub 9.0.0.391 Cannot Check In (86083)

  • When Android Intelligent Hub communicates with Workspace ONE UEM servers, it provides an SNI (Server Name Indication) in its request. Intelligent Hub 9.0.0.391 and lower (AKA AirWatch Agent) do not provide this request.

  • Update: The impact below will only apply to Dedicated SaaS Workspace ONE UEM environments that use custom URLs. By default, Dedicated SaaS environments use *.awmdm.com URLs. Organization can replace these with Custom URLs such as emm.mycompany.com.
    https://kb.vmware.com/s/article/86083?lang=en_US

  
  

  Highlighting High Priority KBs

  • Announcing end of support for device administrator (Android Legacy) in Workspace ONE UEM (80971)
    To align with Google’s strategy and ensure VMware’s investment in the right long-term solution for Android, as of March 31st, 2022, VMware will no longer support device administrator-based management on Android (referred to as Android (Legacy) in the Workspace ONE UEM console). 

  • [Action Required] Android Intelligent Hub 9.0.0.391 Cannot Check In (86083)
    VMware will start requiring SNI in Workspace ONE UEM Dedicated SaaS environments starting January 16th, 2022. After this date, Android devices running Intelligent Hub 9.0.0.391 or lower may no longer communicate with Workspace ONE UEM. Affected devices may have to be re-enrolled with a supported version of Intelligent Hub.

  
  

  Recently updated KBs

  • WS1 UEM Console Release and End of General Support Matrix (2960922)

  • Troubleshooting Intermittent Blast Connection Issues in Unified Access Gateway (UAG) (83088)

  • VMware Horizon Guidelines for Nested Mode in Horizon 8 (80509)

  
  

  Digital Workspace Techzone, Blog and YouTube Updates

  • Dynamic Environment Manager and OneDrive for Business Integration – Ron’s Cool Feature of the Week

  • Supporting frontline shift worker use-cases with Workspace ONE Web

  • Guidance to VMware Horizon customers regarding Log4j

  • Cybersecurity Journey to Zero Trust: Episode 4

  • Workspace ONE Enables BYO and COPE for Retail with Shift-Based Access Control

  • Multi-Cloud Virtual Desktops and Applications with VMware Horizon

  
  

  Third Party Blog and Technology Updates

  • Mobile-Jon: The Mobile Jon Blog: 2021 Review and Lessons Learned

  • Microsoft Blog: Why you shouldn’t set these 25 Windows policies

  
  

  
  

  
  

  Software Releases January 2022

  
  

  System	Component	Release	Announcement	Release Date
  Android	Hub	21.11	https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/Introducing-VMware-Workspace-ONE-Intelligent-Hub-for-Android.html	07.01.22
  Android	Relay	5.13	https://kb.vmware.com/s/article/81990?lang=en_US	07.01.22
  Backend	Console OnPrem	21.11	https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2111/rn/vmware-workspace-one-uem-2111-release-notes/index.html	13.01.22
  Other	ITSM Connector for ServiceNow	1.0.2	https://store.servicenow.com/sn_appstore_store.do#!/store/application/b110a7a11b12b41092ce8514604bcb28/1.0.2?referer=%2Fstore%2Fsearch%3Flistingtype%3Dallintegrations%25253Bancillary_app%25253Bcertified_apps%25253Bcontent%25253Bindustry_solution%25253Boem%25253Butility%25253Btemplate%26q%3DVMware&sl=sh	13.01.22
  Backend	Photon OS	4.0 Rev2	https://vmware.github.io/photon/docs/overview/whats-new/	14.01.22
  Backend	ENS v2 OnPrem	22.01	https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-Email-Notification-Service-2-for-On-Premises-Installation.html#resolved-issues-for-workspace-one-email-notification-service-2-version-22-01-resolved	20.01.22
  Backend	VIDM	3.3.6	https://docs.vmware.com/en/VMware-Workspace-ONE-Access/3.3/rn/VMware-Identity-Manager-336-Release-Notes.html	17.01.22
  Backend	WS1 Access SaaS	January 2022	https://docs.vmware.com/en/VMware-Workspace-ONE-Access/services/rn/Workspace-ONE-Access-Cloud-2021-release-notes.html#new	06.01.22
  Backend	Hub Services SaaS	January 2022	https://docs.vmware.com/en/VMware-Workspace-ONE/services/rn/Workspace-ONE-Hub-Services-Cloud-2021-Release-Notes.html#about	20.01.22

  
  

  Patch & Seed Script Updates Week03-2022

  • OS Seed Script Update

  • Most recent updates: iOS 15.2.1 (19C63)

  • https://resources.workspaceone.com/view/rywydmj6ghb9nmch4ywq/en

  • Last Update: CW03
    
    

  • Seed Script for latest Device Model Information

  • Latest Models: Macbook Pro 14 and 16

  • https://resources.workspaceone.com/view/x8kn6bslt67vwvlgx4ld/en

  • Last update: CW01

  
  

  • Custom Script to Allow Android 12 enrollments into Workspace ONE UEM Console

  • Agnostic script to update seed data to allow Android 12 enrollments into the Console.

  • https://resources.workspaceone.com/view/rvfdv9s6mhsh4xgdxf7f/en

  • Last Update: CW44

  
  

  • Workspace ONE UEM 20.08

  • Patch Level: 20.8.0.37

  • FCA-200869: Update SKUORDER update API to allow Freestyle basic SKU to be added to older UEM versions.

  • Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2008/rn/VMware-Workspace-ONE-UEM-Release-Notes-2008.html#-20-8-0-37-patch-resolved-issues--resolved

  • Last Update: CW01
    
    

  • Workspace ONE UEM 20.11

  • Patch Level: 20.11.0.42

  • FCA-200867: Update SKUORDER update API to allow Freestyle basic SKU to be added to older UEM versions.

  • Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2011/rn/VMware-Workspace-ONE-UEM-Release-Notes-2011.html#20-11-0-42-patch-resolved-issues-resolved

  • Last Update: CW01
    
    

  • Workspace ONE UEM 21.02

  • Patch Level: 21.2.0.29

  • FCA-200865: Update SKUORDER update API to allow Freestyle basic SKU to be added to older UEM versions.

  • Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2102/rn/Workspace-ONE-UEM-2102-Release-Notes.html#-21-2-0-29-patch-resolved-issues-resolved

  • Last Update: CW01
    
    

  • Workspace ONE UEM 21.05

  • Patch Level: 21.5.0.40

  • PPAT-10246: [WMT] Build Sync & APIs to pull config/DTR

  • ARES-21113: Add Retry mechanism for network failure

  • Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2105/rn/Workspace-ONE-UEM-2105-Release-Notes.html#21-5-0-39-patch-resolved-issues-resolved

  • Last Update: CW03

  
  

  • Workspace ONE UEM 21.09

  • Patch Level: 21.9.0.19

  • AGGL-11198: DDUI - Remove UI components from Launcher payload that are not supported in 2109.

  • Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2109/rn/Workspace-ONE-UEM-2109-Release-Note.html#-21-9-0-19-patch-resolved-issues-resolved

  • Last Update: CW03

  
  

  • Workspace ONE UEM 21.11

  • Patch Level: 21.11.0.04

  • AGGL-11276: Params to clear accounts is not sent on check-in from device details/auto logout.

  • AMST-34890: Disabling HardwareDeviceIdentifierForWindowsFeatureFlag is still merging device records.

  • Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2111/rn/vmware-workspace-one-uem-2111-release-notes/index.html#resolved-issues-211104-patch-resolved-issues

  • Last Update: CW03