VMware Digital Workspace Newsletter - Week 20

Image
                           Week 20 -  2022             Weekly highlight:   Workspace ONE Hub Services  & Workspace ONE Access updates:   Removing the 3-Character Limit for People Search People Search (on Hub Web) will now allow searching with just one or two characters instead of the usual 3-character search. This enables support for searching names in logographic languages like Chinese, Japanese, etc.   Workflows Error Handling – Email Alerts upon failures Workspace ONE Experience Workflows error handling has been improved to send email alerts directly to Administrators   when a scheduled process fails to run successfully for any reason. All integration packs will now have an additional configuration parameter to include an email address to receive these notifications.   Saviynt Access Request Integration Pack for Workspace ONE Experience Workflows Hub Services customers with Workspace ONE Experience Workflows enabled can configure an integration with   Saviynt   to notify approve

VMware Digital Workspace Newsletter - Week 9

                 

      

Week 8 -  2022

 

 

 



 

 

 

Weekly highlight: 

 

Announcing VMware Workspace ONE Productivity Apps for all Workspace ONE Customers (87757)

  • VMware is excited to announce that the following VMware Workspace ONE Productivity Apps: VMware Boxer, Content, Notebook, Web and PIV-D are now included as part of Workspace ONE and available for all Workspace ONE customers.
  • What does this mean to me as a customer? 
    All existing customers who purchased productivity apps as a separate add-on will not need to renew them since their entitlement to these apps will be included as part of Workspace ONE at time of renewal.  
  • What types of deployments can use the Productivity Apps? 
    All Workspace ONE customers, SaaS or on-prem are entitled to Workspace ONE Boxer, Content, Web, Notebook and PIV-D as complimentary downloads from the Apple or Google Play stores. 
  • What is the benefit of using the Productivity Apps? 
    Our productivity apps, VMware Workspace ONE Boxer, Content, Notebook, Web and PIV-D empower users to get more done faster from anywhere on their mobile device. Visit our website here to learn how our Productivity Apps improve the way employees work on mobile.
  • How secure are the Productivity Apps? 
    We offer end-to-end data protection with control points at the user, device, app and network levels to help meet the security requirements of corporate-owned and BYOD use cases. 
  • How do we get started? 
    For information on how to set up, configure and get started from the Workspace ONE UEM Console, visit our docs site here. 
  • Who can I contact if I have a question? 
    For questions or concerns, please contact your VMware representative. 
  • KB-Reference: https://kb.vmware.com/s/article/87757?lang=en_US

 

 

 

 

Week 09 Software Releases

 

System

Component

Release

Announcement

Release Date

iOS

Workspace ONE SDK SWIFT

22.2

  • SDK-175321: Optional withdrawal of Copy/Paste encryption in Web based on SDK settings configuration
  • ISDK-175551: All references of SDK developer docs are changed from code.vmware.com to developer.vmware.com
  • ISDK-175775: User credentials are missing in the Hub application soon after creating the Face ID / Passcode on the shared devices
  • ISDK-175348: Fixed CICO 3rd party app flips to HUB when the device is offline when offline access is Disabled

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-SDK-for-iOS--Swift-.html

28.02.22

iOS

PIV-D Manager

21.09

1. Registered mode support for PIV-D

2. Standalone Enrolment support for PIV-D

3. Sharing the credentials from PIV-D via Persistent Token Extension

4. Bug fixes and stability improvements

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-PIV-D-Manager-for-iOS.html

28.02.22

Android

SDK

22.2

  • SDK module for In-app update experience for Play store apps
  • Updated Kotlin version to 1.5.31
  • Updated SDK gradle to 7.0.2
  • Bug Fixes

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-SDK-for-Android.html

02.03.22

Android

Assist

22.03

  • Introducing Assist Service application version 3.0 to support remote control on Android 12 devices

For further details please refer to the Release Notes

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/Workspace-ONE-Assist-for-Android.html

02.03.22

Windows

Assist

22.03

  • Improved reliability of Assist connection in attended mode

For further details please refer to the Release Notes 

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/Workspace-ONE-Assist-for-Windows-10.html

02.03.22

macOS

Assist

22.03

  • Improved reliability of Assist connection in attended mode
  • Support for M1 macOS devices without the need to separately install Rosetta2

For further details please refer to the Release Notes 

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/Workspace-ONE-Assist-for-macOS.html

02.03.22

iOS

VM Tunnel

22.01

  • General quality and performance improvements

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-Tunnel-for-iOS.html

02.03.22

iOS

Content

22.02.1

  • General quality and performance improvements

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-Content-for-iOS.html

03.03.22

 

Workspace ONE UEM iOS 15.3.1 devices incorrectly reported (87691)

  • iOS devices being falsely detected the following upgrade to iOS 15.3.1 and detected in Workspace ONE UEM 21.11+
  • The problem appears to affect only this current version and has not been detected in earlier versions at this time.
  • This issue may have the following impact:
  • iOS version on UEM console may be displayed as lesser than 15.3.1
    Enrollment restrictions targeted for iOS versions lesser than 15.3.1 will also affect iOS devices that are updated and report the latest OS update in the information sample when the device reports this to UEM.
    Device policies restricted to iOS versions other than 15.3.1 will not get published to iOS devices and may have an adverse impact on device management criteria.
  • https://kb.vmware.com/s/article/87691?lang=en_US

 

Workspace ONE UEM Windows Software Distribution Agent fails to install (87801)

  • On freshly enrolling a Windows device, Software Distribution Agent (SFD) may fail to install on the device, further preventing the ability to deliver applications to devices from the UEM console.
    • Windows devices that have the MSFT update KB5010415 installed. This patch is available for Windows 10 version 20H2 and onwards. More details on KB5010415 here​​​​​​.
    • Devices with Windows version 21H2, which has KB5010415 built in.This behavior can occur on the following devices:
  • To identify a machine which is impacted by this issue, check the value of the Status attribute for the registry keys depending on the version of the SFD agent deployed (More details in KB).
  • Our product team has been engaged and is actively working to resolve the issue.
  • Note: Until a fix is made available for the SFD issue, we recommend not installing the Microsoft update KB5010415 on the devices.
  • More details in KB https://kb.vmware.com/s/article/87801?lang=en_US

 

Introducing new "Contains" operator with wildcard search in Workspace ONE Intelligence (87715)

  • In Workspace ONE Intelligence, the "Contains" operator performed prefix search in widget, automation preview and report preview. Wildcard search was not previously available.
  • The new "Contains" operator will support wildcard search for string data type to improve usability.
  • A new "Contains" operator has been added. The former "Contains" operator in Workspace ONE Intelligence will be rebranded to "Contains (deprecated)".
  • The new "Contains" operator now supports wildcard search for string data type.
  • For any of your filters in widget, automation and report using "Contains (deprecated)", please test and move to the new "Contains" operator for string data type, and use "Contains Any of" or "Contains All of" for collection data type. This will help avoid any potential interruptions in future.
  • KB-Reference: https://kb.vmware.com/s/article/87715?lang=en_US

 

Horizon users are intermittently disconnected while in session (87822)

  • Users working in applications or desktops are disconnected
  • The disconnects do not have a set interval that matches any timeout (exactly 8hrs for every user for instance, Horizon Connection Server logs duration of sessions at disconnect so this can be verified) 
  • Similar log lines are observed in the Unified Access Gateway (UAG) esmanager log:

Too many connections opened for session: 9a56910b-df55-43f9-8f43-eb91866bb89a, max channels allowed:

  • This behavior occurs because the latest versions of Unified Access Gateway (UAG) have implemented a security feature that limits the number of connections from each client. Load Balancing features that reuse http sessions are no longer supported. Some examples include:
    • Multiplexing
    • F5 OneConnect
    • Any feature that reuses HTTP or TCP sessions
  • Disable multiplexing or any applicable feature on the load balancer that reuses sessions that are presented to the UAG appliances. Please consult your load balancer vendor for guidance on what features would reuse sessions in this manner.
  • KB-Reference: https://kb.vmware.com/s/article/87822?lang=en_US

 

RUGG-10598: Copying/Adding/Editing the provisioning profile can cause profile removal from devices. (87754)

  • When Admins are looking to add/copy/edit the provisioning profile on the Workspace ONE UEM console UI, the profile is being copied/saved to a different location (Devices > Profiles) resulting in the removal of the profile added/edited/copied on the devices.
  • Starting with version 21.09 of Workspace One UEM, making changes (add/copy/edit) of Provisioning profiles is causing the respective profiles on the devices to be removed.
  • Our Product team is working to address this issue in a timely manner. Please subscribe to this article to receive updates when they are available.
  • VMware recommends leveraging API calls rather than using the UI screen. The API calls in the following order to replicate the copy scenario. More detail is mentioned here.
    GET : https://{{url}}/api/mdm/profiles/<Profile ID>
    POST : https://{{url}}/api/mdm/profiles/platforms/android/create
  • KB-Reference: https://kb.vmware.com/s/article/87754?lang=en_US

 

[VMSA Alert] Moderate Severity - VMSA-2022-0007 - VMware Tools for Windows update addresses an uncontrolled search path vulnerability (CVE-2022-22943)

 

Highlighting High Priority KBs

 

Recently updated KBs

 

Digital Workspace Techzone, Blog and YouTube Updates

 

Third Party Blog and Technology Updates

 

Beta, Lab and Tech Preview Updates

 

March Software Releases

System

Component

Release

Announcement

Release Date

iOS

Content

22.02.1

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-Content-for-iOS.html

03.03.22

iOS

VM Tunnel

22.01

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-Tunnel-for-iOS.html

02.03.22

Android

Assist

22.03

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/Workspace-ONE-Assist-for-Android.html

02.03.22

Android

SDK

22.2

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-SDK-for-Android.html

02.03.22

Windows

Assist

22.03

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/Workspace-ONE-Assist-for-Windows-10.html

02.03.22

macOS

Assist

22.03

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/Workspace-ONE-Assist-for-macOS.html

02.03.22

 

Patch & Seed Script Updates Week09-2022

  • OS Seed Script Update



  • Custom Script to Allow Android 12 enrollments into Workspace ONE UEM Console



  • Workspace ONE UEM 20.08
  • Workspace ONE UEM 20.11
  • Workspace ONE UEM 21.02
  • Workspace ONE UEM 21.05
    • Patch Level: 21.5.0.45
    • FCA-201546: Console login failing for directory admin account with error "Invalid credentials" in CN135 environment
    • FCA-201418: Unable to delete IOS device record for OG with APNS not configured
    • CRSVC-26918: Remove the index IX_DeviceExtendedProperties_RowVersion
    • CRSVC-26674: Optimization of the sp CoreAndDefaultAttributes_Update
    • CRSVC-26362: Implement PasswordMigration scheduler Job
    • AMST-35269: The Kiosk profile takes a longer time to install on the devices and sometimes days even though the device is checking in.
    • AMST-35262: Newly enrolled Windows 10 devices install x86 version of AppDeploymentAgent
    • AMST-35247: Delay in processing windows install/removal commands for apps & profiles
    • Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2105/rn/Workspace-ONE-UEM-2105-Release-Notes.html#-21-5-0-44-patch-resolved-issues--resolved
    • Last Update: CW09



  • Workspace ONE UEM 21.09
    • Patch Level: 21.9.0.24
    • CRSVC-26590: Device Details - Time Windows - List shows incorrect schedule date.
    • CRSVC-27369: Increase the SMTP username limit from 64 to 255 characters.
    • AMST-35263: Delay in processing windows install/removal commands for apps & profiles.
    • CRSVC-26678: Optimization of the sp CoreAndDefaultAttributes_Update.
    • CRSVC-26919: Remove the index IX_DeviceExtendedProperties_RowVersion.
    • AMST-35205: DM and HUB having race condition causing enrollment issues.
    • RUGG-10703: Copy and Edit of the existing provisioning profile creates the profile copy under Devices > Profiles & Resources section.
    • Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2109/rn/Workspace-ONE-UEM-2109-Release-Note.html#-21-9-0-23-patch-resolved-issues-resolved
    • Last Update: CW09



  • Workspace ONE UEM 21.11
    • Patch Level: 21.11.0.13
    • AAPP-13367: Issues Removing Apple Education Profile from iPads.
    • CMCM-189603: CN1108- DB Contention issue with multiple calls to EnterpriseContent schema.
    • AMST-35270: The Kiosk profile takes a longer time to install on the devices and sometimes days even though the device is checking in.
    • AGGL-11415 [Passcode] Unable to send Clear Device/Work App Passcode in COPE.
    • CMSVC-16026: Hub services - Unable to find the smart groups in the WS one hub services during assignment against templates
    • AAPP-13482: CN22 - VPP Auto Update not working for some applications.
    • AGGL-11382: Launcher orientation is set to locked in XML when its not selected in the UI.
    • AMST-35248: Delay in processing windows install/removal commands for apps and profiles.
    • CRSVC-27368: Increase the SMTP username limit from 64 to 255 characters.
    • CRSVC-26920: Remove the index IX_DeviceExtendedProperties_RowVersion.
    • RUGG-10704:Copy and Edit of the existing provisioning profile creates the profile copy under Devices > Profiles & Resources section.
    • FS-818: RB-2111-Freestyle Orchestrator is still tagged as Tech Preview.
    • Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2111/rn/vmware-workspace-one-uem-2111-release-notes/index.html#resolved-issues-2111010-patch-resolved-issues
    • Last Update: CW09

 

    1.  

 

 

 

 

 

 

 


 

 

 

 

 

 

 

 

 

 

Comments

Popular posts from this blog

Workspace ONE | Use ADFS as an Identity Provider in Workspace ONE Access with JIT

Configure Shared iPad for Apple Business Manager in Workspace ONE

Simon's recommended VMworld 2021 sessions