VMware Digital Workspace Newsletter - Week 33

                                                                                          






Weekly highlight:

 

General availability of VMware Workspace ONE UEM Console 2206 

  • VMware Workspace ONE UEM Console 2206 is available to Dedicated SaaS and on-premise customers as of August 15, 2022! Shared SaaS Rollouts are covered already.
  • What's New?
    • Console
      • We have made enhancements to Device wipe! Earlier, certain BitLocker profile settings, such as "Force Encryption," could interfere with reliable device wipes. With the improvements, Enterprise Wipe and Enterprise Reset will now ensure that device wipes occur as expected.
      • Get unmanaged app samples with no user session.Devices that run without a user logged in will now return app samples to properly reflect all the software installed on a PC. Previously, app samples were only sent when a user was logged in, so changes to app inventory might not be accurate.

Android

      • Want a simpler way to manage zero-touch Android devices? We have a solution for you!You can now navigate to a separate Google portal for managing zero-touch devices. In the Google portal, users create and edit EMM configurations, browse devices, and manage portal access. The Android EMM Registration page has a zero-touch configuration page that lets you to link and manage zero-touch settings. For more information see, Android EMM Registration

macOS

      • Restore a macOS 12 device with ease.You can now use a simple workflow to make a used Mac ready for another user without having to erase the entire drive and OS. Users can perform the Erase All Contents and Settings (EACS) action, just like on iOS, to erase all user data and user-installed apps from the device without having to reinstall the operating system, and easily restore a device with macOS Monterey. For more information, see Erase All Content and Settings (EACS).
      • Removing an app’s System Extension profile just got easier!You can now remove an app's system extension without requiring local administrator authentication. With macOS 12, a new key feature called RemovableSystemExtension is introduced, which allows the MDM administrator to remove an app's system extensions.

Freestyle

 

 

 

 

 

 

 

Week 33 Software Releases

System

Component

Release

Announcement

Release Date

Backend

Console OnPrem

22.06

Console

  • We have made enhancements to Device wipe! Earlier, certain BitLocker profile settings, such as "Force Encryption," could interfere with reliable device wipes. With the improvements, Enterprise Wipe and Enterprise Reset will now ensure that device wipes occur as expected.
  • Get unmanaged app samples with no user session.Devices that run without a user logged in will now return app samples to properly reflect all the software installed on a PC. Previously, app samples were only sent when a user was logged in, so changes to app inventory might not be accurate.

Android

  • Want a simpler way to manage zero-touch Android devices? We have a solution for you!You can now navigate to a separate Google portal for managing zero-touch devices. In the Google portal, users create and edit EMM configurations, browse devices, and manage portal access. The Android EMM Registration page has a zero-touch configuration page that lets you to link and manage zero-touch settings. For more information see, Android EMM Registration

macOS

  • Restore a macOS 12 device with ease.You can now use a simple workflow to make a used Mac ready for another user without having to erase the entire drive and OS. Users can perform the Erase All Contents and Settings (EACS) action, just like on iOS, to erase all user data and user-installed apps from the device without having to reinstall the operating system, and easily restore a device with macOS Monterey. For more information, see Erase All Content and Settings (EACS).
  • Removing an app’s System Extension profile just got easier!You can now remove an app's system extension without requiring local administrator authentication. With macOS 12, a new key feature called RemovableSystemExtension is introduced, which allows the MDM administrator to remove an app's system extensions.

Freestyle

  • We have improved the Workflow step messages.For troubleshooting purposes, we have enhanced the workflow details page and the workflow messages presented per step on the device details. The error messages offer information regarding the cause and components of the error. Click the hyperlink to see a detailed message model for error messages that exceed the word limit.

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2206/rn/vmware-workspace-one-uem-powered-by-airwatch-2206-release-notes/index.html

16.08.22

iOS

Content

22.08

·       Content MIME type

·       Additional header parameter for the documents for better security and filtering of documents by enterprise admins

·       Support for Long names

·       Updated the experience to show long names of files, repositories etc without needing user to do additional clicks

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-Content-for-iOS.html

17.08.22

Android

Web

22.08

  • ABRW-174058 : Support user-defined order for Web bookmarks
    • Users will now be able to reorder bookmarks as per their preference and save the order for faster access to their frequently used or favorite bookmarks.
  • ABRW-174114 : Use first letter of the bookmark title for bookmark abbreviation when there is no icon
    • Web now shows the first letter of the name/title of bookmark instead of the first letter of the URL, if the corresponding page doesn’t have any icon associated with it. 
  • Bug fixes & stability improvements

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-Web-for-Android.html

16.08.22

 

Gartner® Magic Quadrant for UEM Tools & Gartner® Critical Capabilities for UEM

 

Android 13 is GA as of August 15th

 

 

AAGNT-195041 - Certificates incorrectly installed for WPA2 Enterprise WiFi for Android 11+ (89264)

·       When organizations push WiFi profiles that use certificates for authentication, Android 11+ devices may fail to connect to WiFi. Specifically, this can occur if the following criteria are met:

1.     Organization uses Workspace ONE UEM Console 2109 or higher

2.     In the WiFi payload:

a.     Security Type is set to WPA/WPA2 Enterprise

b.     An Identity Certificate is selected from a Credentials payload in this profile. In said Credentials payload, Credential Source is set to Defined Certificate Authority.

 

AMST-35941 - Workspace ONE UEM - Unable to Click on Save after modifying an existing application assignment for Windows internal applications (88878)

  • You may experience a problem with saving changes to existing assignments for Windows internal applications as the Save button may be unresponsive after you've modified the assignment.
  • Workspace ONE UEM 2203
  • Our Product team has been notified and is working to address this in a timely manner.
  • Workaround: Edit the existing assignment for the application and toggle the "Override Reboot Handling" switch on and off again thus allowing the assignment to be saved.
  • KB-Reference: https://kb.vmware.com/s/article/88878?lang=en_US&source=email

 

Microsoft Windows Defender falsely classifies Horizon Agent's glib.dll as Trojan Malware. (89162)

  • This article describes the false-positive alert for Horizon Agent displayed by Microsoft Windows Defender version 1.371.1173.0.
  • As part of the remdiation operation, Microsoft Windows Defender version 1.371.1173.0 deletes the Horizon Agent glib dll file (C:\Program Files\Common Files\VMware\Remote Experience\x64\glib-2.0.dll), breaking Horizon Agent feature functionality and displays the following error:

"VMwareViewClipboard.exe - System Error: The code execution cannot continue because glib-2.0.dll is missing. This issue may be resolved by reinstalling the application."

 

ESC-32864 - Data Usage on Roaming in Android Profiles not working (89292)

·       The Data Usage on Roaming setting in the Samsung KNOX Restriction payload of Android Profiles is not working. By default, this setting is enabled. When disabled, end users on Samsung Android devices can unexpectedly still use cellular data during roaming.  

  • We have determined that the Data Usage on Roaming setting, which is Samsung-specific, does not work on devices running Android 7.0 and higher. To prevent users from using cellular data during roaming, please follow the steps below. By doing so, this restriction will apply to all Android 7.0+ devices - not just Samsung.

1.     Create a new Android Profile or edit existing Android Restrictions Profiles

2.     Add the Custom Settings payload

3.     In the Custom Settings field, insert this XML code

4.  <characteristic uuid="c0710174-139b-4592-93cb-7f6c5e7d1440" type="com.airwatch.android.androidwork.restrictions" target="2">
5.     <parm name="allowDataRoaming" value="False" />
</characteristic>

·       This settings will be added to the Android Restrictions payload in future releases of the Workspace ONE UEM Console.

·       KB-Reference: https://kb.vmware.com/s/article/89292?lang=en_US&source=email

 

Highlighting High Priority KBs

·       Announcing end of support for device administrator (Android Legacy) in Workspace ONE UEM (80971)
To align with Google’s strategy and ensure VMware’s investment in the right long-term solution for Android, as of March 31st, 2022, VMware will no longer support device administrator-based management on Android (referred to as Android (Legacy) in the Workspace ONE UEM console). 

  • VMware Tunnel Proxy End of Support Life Announcement (87345)
    VMware is announcing End of Support Life for the Tunnel Proxy component of the VMware Tunnel solution. This will be effective January 30, 2023.
  • VMware Workspace ONE UEM New Control Plane SaaS Deployment Schedule (86243)
    Workspace ONE UEM has undergone a complete re-architecture to modernize the platform using microservices and containers to enable increased scalability and performance and increase the rate of innovation. Now after having conducted significant and careful testing, these architecture updates, including a new control plane, will be deployed to UEM SaaS environments over the next several weeks, with options available to on-premise customers after this roll-out (Later in 2022).

 

Recently updated and added KBs

 

Digital Workspace Techzone, Blog and YouTube Updates

 

3rd Party Blogs and Industry Updates

·       vAndu: Cloud Gaming: What’s it like playing the most graphically demanding games inside a VM using Horizon Direct-Connect? Can it replace bare-metal gaming PCs?

 

Beta, Lab and Tech Preview Updates

  • Workspace ONE Boxer 22.08 for Android
    • KVP for Resource URL during authentication
      Introduces a new account-level KVP - AccountOauthResourceURL (string). The KVP overrides the Resource URL during user authentication. Recommended to be used by customers with Hybrid Modern Authentication when they need a specific Resource URL.
  • Workspace ONE Boxer 22.08 for iOS
    • Support of historical S/MIME certificates with DISA Purebred
      • This feature provides support for storing more than one S/MIME certificate when using PIV-D and Purebred.
      • Users would be able to access older emails that were encrypted with different certificates. 
      • The feature can be activated/deactivated by a feature toggle called "Historical S/MIME" in Advanced Settings > Enable features (it is activated by default)
  • WS1 Intelligent Hub 22.08 for macOS
    • Option to uninstall managed application from App Catalog (supported from UEM Console 21.11 and Hub Services 22.07)
    • Drop support for macOS 10.14
    • General enhancements
      • Optimisation of App list sample
      • HUB sensors error reporting improvements
      • Upgrade Munki to 5.7.2, MSAL to 1.2.2 and Python to 3.10.6
      • Improvements in product downloads from Relay Server
      • UI improvements to Native App Catalog

 

August Software Releases

System

Component

Release

Announcement

Release Date

Backend

Console OnPrem

22.06

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2206/rn/vmware-workspace-one-uem-powered-by-airwatch-2206-release-notes/index.html

16.08.22

iOS

Hub

22.07

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/Workspace-ONE-Intelligent-Hub-for-iOS.html

08.08.22

iOS

Content

22.08

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-Content-for-iOS.html

17.08.22

Android

Hub

22.07

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/Introducing-VMware-Workspace-ONE-Intelligent-Hub-for-Android.html

08.08.22

Android

Web

22.08

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-Web-for-Android.html

16.08.22

Other

ITSM Connector for ServiceNow

1.1

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/vmware-workspace-one-itsm-connector-for-servicenow-release-notes/index.html

03.08.22

 

Patch & Seed Script Updates Week33-2022

 

 

 

 

 

 

 

  •  

Comments