Weekly highlight: Announcing VMware Workspace ONE Productivity Apps for all Workspace ONE Customers (87757) - VMware is excited to announce that the following VMware Workspace ONE Productivity Apps: VMware Boxer, Content, Notebook, Web and PIV-D are now included as part of Workspace ONE and available for all Workspace ONE customers.
- What does this mean to me as a customer?
All existing customers who purchased productivity apps as a separate add-on will not need to renew them since their entitlement to these apps will be included as part of Workspace ONE at time of renewal. - What types of deployments can use the Productivity Apps?
All Workspace ONE customers, SaaS or on-prem are entitled to Workspace ONE Boxer, Content, Web, Notebook and PIV-D as complimentary downloads from the Apple or Google Play stores. - What is the benefit of using the Productivity Apps?
Our productivity apps, VMware Workspace ONE Boxer, Content, Notebook, Web and PIV-D empower users to get more done faster from anywhere on their mobile device. Visit our website here to learn how our Productivity Apps improve the way employees work on mobile. - How secure are the Productivity Apps?
We offer end-to-end data protection with control points at the user, device, app and network levels to help meet the security requirements of corporate-owned and BYOD use cases. - How do we get started?
For information on how to set up, configure and get started from the Workspace ONE UEM Console, visit our docs site here. - Who can I contact if I have a question?
For questions or concerns, please contact your VMware representative. - KB-Reference: https://kb.vmware.com/s/article/87757?lang=en_US
Week 09 Software Releases Workspace ONE UEM iOS 15.3.1 devices incorrectly reported (87691) - iOS devices being falsely detected the following upgrade to iOS 15.3.1 and detected in Workspace ONE UEM 21.11+
- The problem appears to affect only this current version and has not been detected in earlier versions at this time.
- This issue may have the following impact:
- iOS version on UEM console may be displayed as lesser than 15.3.1
Enrollment restrictions targeted for iOS versions lesser than 15.3.1 will also affect iOS devices that are updated and report the latest OS update in the information sample when the device reports this to UEM.
Device policies restricted to iOS versions other than 15.3.1 will not get published to iOS devices and may have an adverse impact on device management criteria. - https://kb.vmware.com/s/article/87691?lang=en_US
Workspace ONE UEM Windows Software Distribution Agent fails to install (87801) - On freshly enrolling a Windows device, Software Distribution Agent (SFD) may fail to install on the device, further preventing the ability to deliver applications to devices from the UEM console.
- Windows devices that have the MSFT update KB5010415 installed. This patch is available for Windows 10 version 20H2 and onwards. More details on KB5010415 here.
- Devices with Windows version 21H2, which has KB5010415 built in.This behavior can occur on the following devices:
- To identify a machine which is impacted by this issue, check the value of the Status attribute for the registry keys depending on the version of the SFD agent deployed (More details in KB).
- Our product team has been engaged and is actively working to resolve the issue.
- Note: Until a fix is made available for the SFD issue, we recommend not installing the Microsoft update KB5010415 on the devices.
- More details in KB https://kb.vmware.com/s/article/87801?lang=en_US
Introducing new "Contains" operator with wildcard search in Workspace ONE Intelligence (87715) - In Workspace ONE Intelligence, the "Contains" operator performed prefix search in widget, automation preview and report preview. Wildcard search was not previously available.
- The new "Contains" operator will support wildcard search for string data type to improve usability.
- A new "Contains" operator has been added. The former "Contains" operator in Workspace ONE Intelligence will be rebranded to "Contains (deprecated)".
- The new "Contains" operator now supports wildcard search for string data type.
- For any of your filters in widget, automation and report using "Contains (deprecated)", please test and move to the new "Contains" operator for string data type, and use "Contains Any of" or "Contains All of" for collection data type. This will help avoid any potential interruptions in future.
- KB-Reference: https://kb.vmware.com/s/article/87715?lang=en_US
Horizon users are intermittently disconnected while in session (87822) - Users working in applications or desktops are disconnected
- The disconnects do not have a set interval that matches any timeout (exactly 8hrs for every user for instance, Horizon Connection Server logs duration of sessions at disconnect so this can be verified)
- Similar log lines are observed in the Unified Access Gateway (UAG) esmanager log:
Too many connections opened for session: 9a56910b-df55-43f9-8f43-eb91866bb89a, max channels allowed: - This behavior occurs because the latest versions of Unified Access Gateway (UAG) have implemented a security feature that limits the number of connections from each client. Load Balancing features that reuse http sessions are no longer supported. Some examples include:
- Multiplexing
- F5 OneConnect
- Any feature that reuses HTTP or TCP sessions
- Disable multiplexing or any applicable feature on the load balancer that reuses sessions that are presented to the UAG appliances. Please consult your load balancer vendor for guidance on what features would reuse sessions in this manner.
- KB-Reference: https://kb.vmware.com/s/article/87822?lang=en_US
RUGG-10598: Copying/Adding/Editing the provisioning profile can cause profile removal from devices. (87754) - When Admins are looking to add/copy/edit the provisioning profile on the Workspace ONE UEM console UI, the profile is being copied/saved to a different location (Devices > Profiles) resulting in the removal of the profile added/edited/copied on the devices.
- Starting with version 21.09 of Workspace One UEM, making changes (add/copy/edit) of Provisioning profiles is causing the respective profiles on the devices to be removed.
- Our Product team is working to address this issue in a timely manner. Please subscribe to this article to receive updates when they are available.
- VMware recommends leveraging API calls rather than using the UI screen. The API calls in the following order to replicate the copy scenario. More detail is mentioned here.
GET : https://{{url}}/api/mdm/profiles/<Profile ID>
POST : https://{{url}}/api/mdm/profiles/platforms/android/create - KB-Reference: https://kb.vmware.com/s/article/87754?lang=en_US
[VMSA Alert] Moderate Severity - VMSA-2022-0007 - VMware Tools for Windows update addresses an uncontrolled search path vulnerability (CVE-2022-22943) Highlighting High Priority KBs - Announcing end of support for device administrator (Android Legacy) in Workspace ONE UEM (80971)
To align with Google’s strategy and ensure VMware’s investment in the right long-term solution for Android, as of March 31st, 2022, VMware will no longer support device administrator-based management on Android (referred to as Android (Legacy) in the Workspace ONE UEM console). - [Action Required] Android Intelligent Hub 9.0.0.391 Cannot Check In (86083)
VMware will start requiring SNI in Workspace ONE UEM Dedicated SaaS environments starting January 16th, 2022. After this date, Android devices running Intelligent Hub 9.0.0.391 or lower may no longer communicate with Workspace ONE UEM. Affected devices may have to be re-enrolled with a supported version of Intelligent Hub. - VMware Tunnel Proxy End of Support Life Announcement (87345)
VMware is announcing End of Support Life for the Tunnel Proxy component of the VMware Tunnel solution. This will be effective January 30, 2023. - VMware Workspace ONE UEM New Control Plane SaaS Deployment Schedule (86243)
Workspace ONE UEM has undergone a complete re-architecture to modernize the platform using microservices and containers to enable increased scalability and performance and increase the rate of innovation. Now after having conducted significant and careful testing, these architecture updates, including a new control plane, will be deployed to UEM SaaS environments over the next several weeks, with options available to on-premise customers after this roll-out (Later in 2022). - [Resolved] CRSVC-25521 - Workspace ONE UEM - Guidance for addressing CVE-2021-22054 (87167)
The Workspace ONE team has investigated CVE-2021-22054 and has determined that the possibility of exploitation can be removed by performing the steps detailed in the Workaround section of this article. This workaround is meant to be a temporary solution until updates documented in VMSA-2021-0029 can be deployed.
Recently updated KBs Digital Workspace Techzone, Blog and YouTube Updates Third Party Blog and Technology Updates Beta, Lab and Tech Preview Updates March Software Releases Patch & Seed Script Updates Week09-2022 - Seed Script for latest Device Model Information
- Custom Script to Allow Android 12 enrollments into Workspace ONE UEM Console
- Patch Level: 21.5.0.45
- FCA-201546: Console login failing for directory admin account with error "Invalid credentials" in CN135 environment
- FCA-201418: Unable to delete IOS device record for OG with APNS not configured
- CRSVC-26918: Remove the index IX_DeviceExtendedProperties_RowVersion
- CRSVC-26674: Optimization of the sp CoreAndDefaultAttributes_Update
- CRSVC-26362: Implement PasswordMigration scheduler Job
- AMST-35269: The Kiosk profile takes a longer time to install on the devices and sometimes days even though the device is checking in.
- AMST-35262: Newly enrolled Windows 10 devices install x86 version of AppDeploymentAgent
- AMST-35247: Delay in processing windows install/removal commands for apps & profiles
- Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2105/rn/Workspace-ONE-UEM-2105-Release-Notes.html#-21-5-0-44-patch-resolved-issues--resolved
- Last Update: CW09
- Patch Level: 21.9.0.24
- CRSVC-26590: Device Details - Time Windows - List shows incorrect schedule date.
- CRSVC-27369: Increase the SMTP username limit from 64 to 255 characters.
- AMST-35263: Delay in processing windows install/removal commands for apps & profiles.
- CRSVC-26678: Optimization of the sp CoreAndDefaultAttributes_Update.
- CRSVC-26919: Remove the index IX_DeviceExtendedProperties_RowVersion.
- AMST-35205: DM and HUB having race condition causing enrollment issues.
- RUGG-10703: Copy and Edit of the existing provisioning profile creates the profile copy under Devices > Profiles & Resources section.
- Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2109/rn/Workspace-ONE-UEM-2109-Release-Note.html#-21-9-0-23-patch-resolved-issues-resolved
- Last Update: CW09
- Patch Level: 21.11.0.13
- AAPP-13367: Issues Removing Apple Education Profile from iPads.
- CMCM-189603: CN1108- DB Contention issue with multiple calls to EnterpriseContent schema.
- AMST-35270: The Kiosk profile takes a longer time to install on the devices and sometimes days even though the device is checking in.
- AGGL-11415 [Passcode] Unable to send Clear Device/Work App Passcode in COPE.
- CMSVC-16026: Hub services - Unable to find the smart groups in the WS one hub services during assignment against templates
- AAPP-13482: CN22 - VPP Auto Update not working for some applications.
- AGGL-11382: Launcher orientation is set to locked in XML when its not selected in the UI.
- AMST-35248: Delay in processing windows install/removal commands for apps and profiles.
- CRSVC-27368: Increase the SMTP username limit from 64 to 255 characters.
- CRSVC-26920: Remove the index IX_DeviceExtendedProperties_RowVersion.
- RUGG-10704:Copy and Edit of the existing provisioning profile creates the profile copy under Devices > Profiles & Resources section.
- FS-818: RB-2111-Freestyle Orchestrator is still tagged as Tech Preview.
- Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2111/rn/vmware-workspace-one-uem-2111-release-notes/index.html#resolved-issues-2111010-patch-resolved-issues
- Last Update: CW09
|
Comments
Post a Comment