VMware Digital Workspace Newsletter - Week 7

                 

Week 7 -  2022             Weekly highlight:    Changes to user set app passcodes in Workspace ONE Boxer 22.02 for iOS (87592) With the introduction of SAML Authentication support, Boxer will always start the Workspace ONE SDK on launch and will not display app passcode screens when using the standalone enrollment workflow. User passcodes for Boxer will now be managed from the SDK settings page.  Impact: Workspace ONE Administrator Passcode policies set by administrators are not affected by this change Note: We highly encourage administrators to set SDK level app passcode policies for end-users as a best practice In the near future we will be deprecating the support of end-user enabled passcodes. Passcode policies are now managed on the SDK settings page (Groups & Settings > All Settings > Apps Settings and Policies > Security Policies > Authentication Type) End-User Users who already have set an app passcode in environments without a Workspace ONE SDK passcode policy set, will be able to continue using the passcode until the device is reenrolled or if the app is reinstalled Users who have already enrolled through using the standalone enrollment workflow, where a Workspace ONE SDK passcode policy is set, will not be affected by the change Options for administrators who have configured App Passcodes in their environment are outlined in this article: Deprecation of the key AppForceActivateSSO in Workspace ONE Boxer for iOS effective July 31st 2021 Please review: https://kb.vmware.com/s/article/87592?lang=en_US           Week 07 Software Releases   System Component Release Announcement Release Date Backend Intelligence 22.02.02 Increased the default number to 100 for dashboards, reports, and automations. Fixed an issue where the deauthorization of the Unified Access Gateway was returning an error.  https://kb.vmware.com/s/article/87545?lang=en_US 11.02.22 Backend Hub Services SaaS February 2022 Install Workspace ONE UEM Web Clips (on Windows Hub) Workspace ONE UEM web clips (deployed through a profile) now have an added option to allow installation by the user. Previously, these web clips were only launchable. Hub Services Templates changes will update upon App Relaunch or Browser Refresh When changes are made to Hub Services Template assignments such as priority or reassignment of a template, the new template will be updated on a user’s device when the Workspace ONE Intelligent Hub app is relaunched or when the Hub portal is refreshed in a browser. Note: This is currently not supported on all platforms. This will be available on the Hub portal in a browser, iOS version 21.01, Android version 22.01, and macOS version 22.01. Workspace ONE Hub Services Notification Process Library If you are building custom workflows in Workspace ONE Experience Workflows, we’ve added a process library that will make things easier! You can now import this new Hub Services Notification Process Library to use either as an abstraction or a starting template for building the logic to send a notification to the Workspace ONE Intelligent Hub app. Integration Pack Test Connection We’ve added an in-build process to our existing out-of-the-box integration packs for admins to perform a test connection and ensure the configurations are correct. Zoom Recording Sharing Integration Pack for Experience Workflows Hub Services customers with Workspace ONE Experience Workflows enabled can configure an integration with Zoom and Office 365 to notify Zoom meeting hosts when their Zoom recording is available. The notification card will also provide a one-click option to share the recording via the Workspace ONE Intelligent Hub app to the attendees of the Zoom meeting. LinkedIn Learning Integration Pack for Experience Workflows Hub Services customers with Workspace ONE Experience Workflows enabled can now configure an integration with LinkedIn Learning to notify users in Workspace ONE Intelligent Hub when new and popular trainings are available. https://docs.vmware.com/en/VMware-Workspace-ONE/services/rn/Workspace-ONE-Hub-Services-Cloud-Release-Notes_2201.html 17.02.22 Android Web 22.02 ABRW-173569: Single tab Kiosk mode configuration to hide URL bar and/or navigation controls This will provide admin configurations to hide URL address bar and/or bottom bar (navigation controls and home button) from Web browser in single tab Kiosk mode. This will enable the customers to provide a locked-down full-screen experience in Kiosk mode to the frontline workers to keep them focused on the workflow or task that they are supposed to work on through the configured web applications in Kiosk mode and minimize distractions. Bug fixes & stability improvements https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-Web-for-Android.html 15.02.22 (staged) Android Hub 22.01 User Bookmarks Now you can access your Intelligent Hub Web bookmarks on your Android device. This can be found in your favorites tab in the area called “Web Links” You can also add your own URLs   Install a root certificate during QR code device provisioning Allow removal of Chrome from Android Enterprise devices Set Cross Profile Packages (Connected Apps) Protect system apps from being disabled on add version/uninstall of Allowlist Application Control Profile Support for the Clear Application Data command for Android 9+ Work Managed devices Bug Fixes https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/Introducing-VMware-Workspace-ONE-Intelligent-Hub-for-Android.html 14.02.22 Android Relay 5.14 Support of Android Hub 22.01 https://kb.vmware.com/s/article/81990?lang=en_US 14.02.22 Android Boxer 22.02 SAML Authentication support Pre-req: managed account on Exchange server - On-Prem or Office 365 This feature allows faster authentication process and less expectation of the user to remember multiple login credentials. With the introduction of this feature, app passcode settings will need to be updated in Workspace ONE UEM. You can find more information about the changes in our knowledge base. Sign-in needed alert message This feature brings better awareness to the user when an Active Directory password expiration or change occurs. An alert message pops up when Boxer is being opened and notifies the user that he/she needs to re-enter his/her credentials The user can directly be redirected to the authentication screen and re-enter his/her credentials If the user chooses to neglect the alert, he/she would be still able to use Boxer will preview previous emails, calendar events, and contacts but wouldn’t be able to execute actions connected with server operations Create and edit event screens improvements Improvements in the user experience when the end time/date of an event is being set before the start time/date Custom reminders for an event can be created Multiple reminders for an event can be set for Gmail accounts Introduces setting for the reminder event type Better user experience for setting notification for an event based on the event type Debug logs predefined recipient Pre-req: managed account on Exchange server - On-Prem or Office 365 This feature allows users, who are facing problems with Boxer, to send logs directly to their IT admins or support teams without the need to know what is their exact email address. A new KVP is introduced SupportEmailAddress (String). The KVP should be set by the administrator to the support email on which they prefer to receive logs. Accessibility improvements https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-Boxer-for-Android.html 17.02.22 iOS Content 22.02 Parallel Downloads - Now users will have improved downloading experience with multiple downloads running at the same time. Bug Fixes https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-Content-for-iOS.html 16.02.22 iOS Web 22.02 This update will provide admin configurations to hide URL address bar and/or bottom bar (navigation controls and home button) from Web browser in single tab Kiosk mode. https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-Web-for-iOS.html 17.02.22   Understanding Horizon Licenses (87490) This resource provides clarification on the multiple types of Horizon licenses, how to view them within the Customer Connect portal (formerly known as the My VMware portal), and how to verify Horizon license consumption. Additional details on their functionality as add-on licenses is also included. Horizon License Types/Offerings VMware offers multiple deployment options for Horizon: On-premises: offered as Perpetual Horizon licenses or as part of the Horizon Universal subscription offering SaaS/hosted in the cloud: offered as a Horizon Cloud subscription, a Horizon Universal subscription, or as an add-on to Workspace ONE Within each of these deployment types, multiple offerings are available with a variety of features and functionalities: To learn more about the features included with each Perpetual offering, please view VMware Horizon Perpetual Feature Comparison. To learn more about the features included with each Subscription offering, please view VMware Horizon Subscription Feature Comparison. Please find out more in: https://kb.vmware.com/s/article/87490?lang=en_US   VMware User Group (VMUG) EUC Day on February 17th  VMUG's Virtual EUC Event will deliver a highly interactive, 3-D virtual environment. Join us to connect with several VMware experts, EUC vendors, and fellow community members at this FREE, one-day online event. The best part is this event is virtual so you can experience it all from anywhere – you don't even have to leave your home or office! Attend VMUG EUC Virtual for: Breakout sessions with live Q&A Online chat capabilities with VMware experts and VMUG leaders Access to exhibitors' virtual booths Downloadable resources And much more! Review more details and the agenda here: https://my.vmug.com/s/community-event?id=a1Y4x00000025M6EAI Register here: https://vmugvirtualeucday2022.vfairs.com/ Event is driven out of the US, all times are Central Time (CET +06:00)   Workspace ONE Access and Hub Services SaaS IP address ranges used for network configuration (68035) This article provides the list of available Workspace ONE Access and Hub Services SaaS environments, with corresponding domains as well as destination and source IP addresses of the servers. https://kb.vmware.com/s/article/68035?lang=en_US   Workspace ONE Adoption Kits: This campaign kit includes several customizable tools that are pre-designed, pre-written, or pre-planned to make it simple for your company to promote adoption of the full Workspace ONE platform to your employees. Digital Workspace Experience Adoption Kit Assets : https://kb.vmware.com/s/article/81465?lang=en_US BYOD Adoption Kit Assets : https://kb.vmware.com/s/article/2960367?lang=en_US Productivity Apps Adoption Kit Assets : https://kb.vmware.com/s/article/2960368?lang=en_US Horizon Adoption Kit Assets : https://kb.vmware.com/s/article/2961438?lang=en_US Workspace ONE Intelligent Hub Adoption Kit Assets : https://kb.vmware.com/s/article/2961437?lang=en_US Highlighting High Priority KBs Announcing end of support for device administrator (Android Legacy) in Workspace ONE UEM (80971) To align with Google’s strategy and ensure VMware’s investment in the right long-term solution for Android, as of March 31st, 2022, VMware will no longer support device administrator-based management on Android (referred to as Android (Legacy) in the Workspace ONE UEM console).  [Action Required] Android Intelligent Hub 9.0.0.391 Cannot Check In (86083) VMware will start requiring SNI in Workspace ONE UEM Dedicated SaaS environments starting January 16th, 2022. After this date, Android devices running Intelligent Hub 9.0.0.391 or lower may no longer communicate with Workspace ONE UEM. Affected devices may have to be re-enrolled with a supported version of Intelligent Hub. VMware Tunnel Proxy End of Support Life Announcement (87345) VMware is announcing End of Support Life for the Tunnel Proxy component of the VMware Tunnel solution. This will be effective January 30, 2023. VMware Workspace ONE UEM New Control Plane SaaS Deployment Schedule (86243) Workspace ONE UEM has undergone a complete re-architecture to modernize the platform using microservices and containers to enable increased scalability and performance and increase the rate of innovation. Now after having conducted significant and careful testing, these architecture updates, including a new control plane, will be deployed to UEM SaaS environments over the next several weeks, with options available to on-premise customers after this roll-out (Later in 2022). [Resolved] CRSVC-25521 - Workspace ONE UEM - Guidance for addressing CVE-2021-22054 (87167) The Workspace ONE team has investigated CVE-2021-22054 and has determined that the possibility of exploitation can be removed by performing the steps detailed in the Workaround section of this article. This workaround is meant to be a temporary solution until updates documented in VMSA-2021-0029 can be deployed.   Recently updated KBs VMware Tunnel Proxy End of Support Life Announcement (87345) NSX Port Groups on VDS 7.0 Issues/Support for Horizon Instant Clones (80706) Horizon on VMware Cloud on AWS Support (58539) VMware Horizon 7 sizing limits and recommendations (2150348) Workspace ONE Access and Hub Services SaaS IP address ranges used for network configuration (68035)   Digital Workspace Techzone, Blog and YouTube Updates Workspace ONE UEM Enhances support for Windows on ARM devices Using paginated requests with Workspace ONE UEM REST APIs What Product Certification/Validation Programs Are Available for EUC Ecosystem Partners? Git VMware {code} Samples and Flings DEMO: Onboarding Windows Devices with Freestyle Orchestrator What is OAuth - Learning the Basics Pro Tips and Tricks - How to be an API Boss Git Basics: Getting Git Going Git Basics: What is Git? Techzone Podcast: Git Commit(ted) to </Dev> Resources: Customer Spotlight with The Home Depot   Third Party Blog and Technology Updates Patrick Zoeller: Empower Frontline Workers with Honeywell Devices and Workspace ONE UEM - Digital Workspace Apple's 'realityOS' for Rumored AR/VR Headset Referenced in Source Code Mobinergy Blog: Is this a phone? Is this a laptop? No, it's mobility!     February Software Releases   System Component Release Announcement Release Date Backend WS1 Intelligence 22.02.02 https://kb.vmware.com/s/article/87394?lang=en_US 11.02.22 Backend Hub Services SaaS February 2022 https://docs.vmware.com/en/VMware-Workspace-ONE/services/rn/Workspace-ONE-Hub-Services-Cloud-Release-Notes_2201.html 17.02.22 iOS Hub 22.01 https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/Workspace-ONE-Intelligent-Hub-for-iOS.html 03.02.22 iOS Web 22.02 https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-Web-for-iOS.html 17.02.22 iOS Content 22.02 https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-Content-for-iOS.html 16.02.22 iOS Notebook 22.01 https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-Notebook-for-iOS.html 03.02.22 Android Hub 22.01 https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/Introducing-VMware-Workspace-ONE-Intelligent-Hub-for-Android.html 14.02.22 Android Boxer 22.02 https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-Boxer-for-Android.html 17.02.22 staged Android Web 22.02 https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-Web-for-Android.html 15.02.22 staged Android Content 22.01 https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workpace-ONE-Content-for-Android.html 03.02.22 Android Tunnel 21.12 https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-Tunnel-for-Android-Release-Notes.html 09.02.22 Android Relay 5.14 https://kb.vmware.com/s/article/81990?lang=en_US 14.02.22 Windows Provisionning Tool 3.3 https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/Workspace-ONE-Provisioning-Tool.html 09.02.22 Horizon Horizon Cloud Service 2201 https://docs.vmware.com/en/VMware-Horizon-Cloud-Service/services/rn/horizon-service-relnotes.html 03.02.22 Patch & Seed Script Updates Week07-2022 OS Seed Script Update Most recent updates: Apple Seed Scripts iOS 15.3.1 (19D52),macOS Monterey 12.2.1 (21D62) https://resources.workspaceone.com/view/rywydmj6ghb9nmch4ywq/en Last Update: CW07 Seed Script for latest Device Model Information Latest Models: Macbook Pro 14 and 16 https://resources.workspaceone.com/view/x8kn6bslt67vwvlgx4ld/en Last update: CW01 Custom Script to Allow Android 12 enrollments into Workspace ONE UEM Console Agnostic script to update seed data to allow Android 12 enrollments into the Console. https://resources.workspaceone.com/view/rvfdv9s6mhsh4xgdxf7f/en Last Update: CW44 Workspace ONE UEM 20.08 Patch Level: 20.8.0.37 FCA-200869: Update SKUORDER update API to allow Freestyle basic SKU to be added to older UEM versions. Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2008/rn/VMware-Workspace-ONE-UEM-Release-Notes-2008.html#-20-8-0-37-patch-resolved-issues--resolved Last Update: CW01 Workspace ONE UEM 20.11 Patch Level: 20.11.0.42 FCA-200867: Update SKUORDER update API to allow Freestyle basic SKU to be added to older UEM versions. Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2011/rn/VMware-Workspace-ONE-UEM-Release-Notes-2011.html#20-11-0-42-patch-resolved-issues-resolved Last Update: CW01 Workspace ONE UEM 21.02 Patch Level: 21.2.0.29 FCA-200865: Update SKUORDER update API to allow Freestyle basic SKU to be added to older UEM versions. Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2102/rn/Workspace-ONE-UEM-2102-Release-Notes.html#-21-2-0-29-patch-resolved-issues-resolved Last Update: CW01 Workspace ONE UEM 21.05 Patch Level: 21.5.0.44 PPAT-10454: Internal SDK app throws Error Code:14 with Tunnel Proxy. RUGG-10569: Investigate if jQuery can be upgraded to 1.12. CRSVC-26774: Update the Claim "org_location_group_id" to use customer OrganizationgroupId where Opt-in happens instead of Global OrganizationgroupId. Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2105/rn/Workspace-ONE-UEM-2105-Release-Notes.html#-21-5-0-44-patch-resolved-issues--resolved Last Update: CW07 Workspace ONE UEM 21.09 Patch Level: 21.9.0.23 AMST-35182: Newly enrolled Windows 10 devices install x86 version of AppDeploymentAgent. RUGG-10570: Investigate if jQuery can be upgraded to 1.12. Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2109/rn/Workspace-ONE-UEM-2109-Release-Note.html#-21-9-0-23-patch-resolved-issues-resolved Last Update: CW07 Workspace ONE UEM 21.11 Patch Level: 21.11.0.11 RUGG-10571: JQuery upgrade to 1.12 CRSVC-26834: The Trust Service log does not output even though the log level is changed to "verbose". AMST-35181: Newly enrolled Windows 10 devices install x86 version of AppDeploymentAgent AMST-35156: Wrong device Attributes - Enrollment Type Id - on un/re-enrollment Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2111/rn/vmware-workspace-one-uem-2111-release-notes/index.html#resolved-issues-2111010-patch-resolved-issues Last Update: CW07