VMware EUC Newsletter - Week 10

  

 

 



 

 

 

Weekly highlight:

 

Horizon Cloud Service next-gen 2302

  • Horizon Accelerator
    • Horizon Accelerator customers can now file support requests through the Support page in the left navigation menu.
  • Horizon Gateway Appliances
    • Administrators can now edit and retry a failed Unified Access Gateway deployment without the need to delete the deployment first.
  • Image Management
    • Additional detail and subtasks are displayed in the activity log for long running image service tasks, such as import, copy as new image, copy as new version, and publish.

 

 

 

Release Updates Week 10:

 

Workspace ONE Intelligent Hub for Android 23.02

  • Add Access Point Name configurations to any Android 9+ Work Managed device
    • Workspace ONE Intelligent Hub 23.02 and onward supports adding Access Point Name configurations to any Work Managed devices on Android 9.0 and higher. Previously, this was only supported for Samsung Work Managed devices. This will be supported through Custom Settings Profiles as of Intelligent Hub 23.02. Future releases of the Workspace ONE UEM Console will support configuration of this Profile via a dedicated payload. Please see Android - Access Point Name Custom Settings Profile for more details.
  • Bug Fixes

 

Workspace ONE Assist Installer 23.02

 

  • 1. Integration with UEM SYSLOG for logging, monitoring and reporting Assist events (Limited Availability: Requires UEM version 2302 which is expected to GA on March 22nd 2023)

All the actions performed by an admin in a Remote Assist session are now logged for security and auditing purposes. In line with this need, we have implemented the Audit Log functionality where in any actions performed by the admin in the remote session will be recorded & sent to the UEM Event logger and can be exported to Syslog. Please note that Assist will not collect any PII information as part of the event logging.

  • 2. Enhanced streaming performance with VP8 Encoding for Android devices.

Workspace ONE Assist now supports VP8 encoding on Android devices to enhance streaming quality and performance during a screen share session across all supported browsers. With the support for VP8 encoding, Memory usage on the remote device will also see a reduced load. VP8 encoding is enabled by default and does not require any additional configurations.

  • 3. Support for Remote Control in Motorola LEX 11 devices with Motorola APIs

Remote Control is now supported in Motorola LEX 11 devices. The Assist agent will leverage Motorola provided APIs to support remote control functionality within Assist.

All functionalities that exist within Assist including touch and key injection events will be now available through the Motorola remote management APIs.

Supported LEX L11 Firmware version – Starting from Android 11 release R3.3 (R40.33.10) 

  • 4. Support for viewing and controlling external monitors connected to Zebra devices using the Workstation Connect Cradle or Connect Hub

Zebra devices that are connected to external monitors through the Workstation Connect Cradle or Connect Hub can now be viewed and controlled through the remote session.

The Multi-Monitor button appears in the admin console when the Zebra device has an external monitor connected. It allows the admin to switch between the displays they want to view or control. Please note that only one monitor may be viewed or controlled at any given time.

  • 5. Improved reliability of Assist connections in Windows & MacOS platforms

When an Assist session is started by an Admin from the UEM console, the connection is established with the remote device automatically. However, assist sessions sometimes end in request timeouts due to various factors. One of the common reasons for this is due to Hub not processing the Remote Management command in time to wake up the Assist agent on the device.

  • 6. Support for Unattended Mode of Remote Session in MacOS

Workspace ONE Assist is introducing the ability to remotely connect to and control MacOS devices that are corporate owned, with no personal data or user expectation of privacy and that business needs to access without approval from a remote user. 

  • 7. Updated Privacy verbiage & Terms and Conditions verbiage on PIN entry screen in device

We have updated the verbiage displayed on our Privacy screen & the Terms and Conditions screen during the PIN entry process to be more relevant to the interaction between the Customer IT/Help Desk Org and the Employees of the customer. 

 

Workspace ONE Assist for Windows 10 23.02

  • Improved reliability of Assist connections in Windows platform

When an Assist session is started by an Admin from the UEM console, the connection is established with the remote device automatically. However, assist sessions sometimes end in request timeouts due to various factors. Some of the common reasons for this is due to Hub not receiving the AWCM notification or processing the Remote Management command in time to wake up the Assist agent on the device.

  • Updated Privacy verbiage & Terms and Conditions verbiage on PIN entry screen in device.

We have updated the verbiage displayed on our Privacy screen & the Terms and Conditions screen during the PIN entry process to be more relevant to the interaction between the Customer IT/Help Desk Org and the Employees of the customer.

 

Workspace ONE Assist for macOS 23.02

 

  • Improved reliability of Assist connections in MacOS platform

When an Assist session is started by an Admin from the UEM console, the connection is established with the remote device automatically. However, assist sessions sometimes end in request timeouts due to various factors. Some of the common reasons for this is due to Hub not receiving the AWCM notification or processing the Remote Management command in time to wake up the Assist agent on the device.

  • Support for Unattended Mode of Remote Session in MacOS

Workspace ONE Assist is introducing the ability to remotely connect to and control MacOS devices that are corporate owned, with no personal data or user expectation of privacy and that business needs to access without approval from a remote user. 

  • Updated Privacy verbiage & Terms and Conditions verbiage on PIN entry screen in device

We have updated the verbiage displayed on our Privacy screen & the Terms and Conditions screen during the PIN entry process to be more relevant to the interaction between the Customer IT/Help Desk Org and the Employees of the customer.

 

Workspace ONE Assist for Android 23.02

  • Enhanced streaming performance with VP8 Encoding for Android devices

Workspace ONE Assist now supports VP8 encoding on Android devices to enhance streaming quality and performance during a screen share session across all supported browsers. With the support for VP8 encoding, Memory usage on the remote device will also see a reduced load. VP8 encoding is enabled by default and does not require any additional configurations.

  • Support for Remote Control in Motorola LEX 11 devices with Motorola APIs

Remote Control is now supported in Motorola LEX 11 devices. The Assist agent will leverage Motorola provided APIs to support remote control functionality within Assist.

All functionalities that exist within Assist including touch and key injection events will be now available through the Motorola remote management APIs. Supported LEX L11 Firmware version – Starting from Android 11 release R3.3 (R40.33.10)

  • Support for viewing and controlling external monitors connected to Zebra devices using the Workstation Connect Cradle or Connect Hub

Zebra devices that are connected to external monitors through the Workstation Connect Cradle or Connect Hub can now be viewed and controlled through the remote session.

The Multi-Monitor button appears in the admin console when the Zebra device has an external monitor connected. It allows the admin to switch between the displays they want to view or control. Please note that only one monitor may be viewed or controlled at any given time.

  • Updated Privacy verbiage & Terms and Conditions verbiage on PIN entry screen in device

We have updated the verbiage displayed on our Privacy screen & the Terms and Conditions screen during the PIN entry process to be more relevant to the interaction between the Customer IT/Help Desk Org and the Employees of the customer.

 

Workspace ONE Tunnel for Windows

  • We have made updates containing general quality and performance improvements with no new features. 
    Please use this client for all MDM workflows.
  • Bug Fixes
    • PPAT-11472 and PPAT-12153: Fixed intermittent DNS resolution issues for internal domains when Enhanced Domain Resolution is enabled.
    • PPAT-13019: Optimized local port usage for improved DNS management.

 

Workspace ONE Content for iOS 23.03

  • Ability to persist List and Grid View across App sessions
  • Bug Fixes
    • ISCL-182529 - Open in the third-party app doesn't show the latest version of files

 

KB Highlights & Announcements Week 10:

 

Product update on VMware Workspace ONE Intelligence for Horizon (91183)

  • To deliver additional value to VMware Horizon Cloud customers, VMware Workspace ONE Intelligence for Horizon is available for customers with VMware Horizon Universal, Horizon Apps Universal, and Horizon Apps Standard subscription licenses.  

Horizon Cloud customers are entitled to VMware Workspace ONE Intelligence for Horizon and gain many features & enhancements not available previously in the Horizon Universal console, including the ability to create & share custom dashboards & reports.  

With this change, historical dashboards and reports will be available through Workspace ONE Intelligence only, and no longer available in the Horizon Universal console starting May 1, 2023.  

 

Best Practices to restrict or remove a specific iOS Application from devices (91236)

  • The following are the options for how to restrict or push end-users to remove an iOS application that you do not want on managed devices.  Organizations may want to block certain applications from devices due to corporate policy or regulations. For iOS devices, UEM cannot prevent installations of specific applications from the App Store and apps that are installed manually by the end user (unmanaged applications) cannot be removed. However, there are options for organizations to take.

 

A restart of the Horizon Agent WSNM service causes session inconsistency (91251)

  • A WSNM service restart is observed in the window application event viewer logs similar to the below:
·         Event ID : 10002
·         Level : Information
·         General Message: Shutting down application or service 'VMware Horizon View Agent'.
  •  
  •     End User sessions get locked unexpectedly.
  •     Within the Horizon Administration console, the machine may report as not available with a status of protocol error or overlapped requests. 

 

With iOS 16 and later, In the Horizon client, the iOS device name is Generic (91223)

  • With iOS 16 and later, Apple changed name property, only a Generic device name returns by default.
  • The default value of name property varies according to iOS device’s operating system version number

 

High Priority KBs

  • [Action Needed] - Refresh Old Android Enrollment QR Codes
    VMware is making changes to enhance the security posture of cloud-based endpoints related to this enrollment method on March 1st, 2023. As a result of this change enrollment using some older QR codes may fail. As a resolution, new QR codes will need to be generated as replacements for affected QR codes.
  • VMware Tunnel Proxy End of Support Life Announcement (87345)
    VMware is announcing End of Support Life for the Tunnel Proxy component of the VMware Tunnel solution. This will be effective January 30, 2023.
  • VMware Workspace ONE UEM New Control Plane SaaS Deployment Schedule (86243)
    Workspace ONE UEM has undergone a complete re-architecture to modernize the platform using microservices and containers to enable increased scalability and performance and increase the rate of innovation. Now after having conducted significant and careful testing, these architecture updates, including a new control plane, will be deployed to UEM SaaS environments over the next several weeks, with options available to on-premise customers after this roll-out (Later in 2022).
  • Support Access Policies for Customers with Expired SaaS EUC Licenses (89494)
    In alignment with VMware's Corporate Standards and those of the industry as a whole, VMware customers who have purchased SaaS (Software-as-a-Service) licenses for EUC (End-User Computing) products can expect the behavior outlined in the KB regarding Support access when their subscription has a status of Active Pending Cancellation or Expired/Cancelled.

 

Recently updated or added KBs (Links)

 

Digital Workspace Techzone, Blog and YouTube Updates

 

3rd Party Blog Updates & Industry News

 

Beta, Lab and Tech Preview Updates

  • Workspace ONE Tunnel Client on Linux
    • The first beta for the Tunnel client on Linux supports the following:
      • Standalone – Unmanaged enrollment
        • Basic or SAML authentication (SAML authentication requires GUI)
        • There is no requirement for device management
      • Per- App and Full Device Tunnel mode
      • IPv4 and IPv6 networks
      • TCP traffic over TLS and UDP traffic over DTLS
      • IP/CIDR rules in DTR
    • Please review the ‘What’s New and Technical Requirements’ page on the Early Access portal for client setup information.
  • WS1 Intelligent Hub 23.01 for Linux 
    • Application Management (LAGNT-596 & LUEM-473)
      • Ability to install, remove or upgrade internal applications using WS1 UEM
      • Supports uploading either .deb or .rpm files
    • Additional WS1HubUtil command line options to aid troubleshooting and visibility (LAGNT-649)
    • Root cert deployment to browser cert store (LAGNT-661)
    • Profiles Interface migrated to new Data Driven User Interface (DDUI) (LUEM-184)
    • Bug Fixes

 

 

 

Patch & Seed Script Updates Week 10-2023

 

 

 

 

 

 

  • Workspace ONE UEM 22.09
    • Patch Level 22.9.0.19
    • FCA-204796: On Devices List View-> Custom Layout, Email, Phone, Display Name, First and Last names are blank.
    • MACOS-3604: Spaceman error when loading Accounts > Users > List view.
    • UM-7872         AirWatch Purge expired Sample Data SQL job is failing        
    • FCA-204890    [FCA] [Device list and details] Show success for change og of device even when it is prevented by tenancy restriction
    • ARES-24701    For internal iOS apps, unable to renew provisioning profile
    • ARES-24673    Internal app publish fails due to duplicate key inserted error
    • AMST-38335   Baseline compliance report generation on fully compliant devices refreshes the baseline policies and switches the status to Pending Install.
    • AAPP-15423    Post Console Upgrade from 22.06 to 22.09 VPP Assignment is not working as expected
    • AAPP-15386    Beacon sample should trigger Device Info sample but shouldn't save OS data
    • https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2209/rn/vmware-workspace-one-uem-2209-release-notes/index.html#resolved-issues-22904-patch-resolved-issues
    • Last Update: CW10
  • Workspace ONE UEM 22.10
    • Patch Level 22.10.0.13
    • AAPP-15424: Post Console Upgrade from 22.06 to 22.09 VPP Assignment is not working as expected.
    • AAPP-15427: Beacon sample should trigger Device Info Sample but should not save OS data.
    • AMST-38336: Baseline compliance report generation on fully compliant devices refreshes the baseline policies and switches the status to Pending Install.
    • ARES-24501: Enterprise Application Repository is no longer able to add iTunes application.
    • FCA-204247: Console app pool is terminating with unhandled exception.
    • FCA-204891: Show success for change og of device even when it is prevented by tenancy restriction.
    • https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2210/rn/vmware-workspace-one-uem-2210-release-notes/index.html
    • Last Update: CW10

 

  • Workspace ONE UEM 22.12
    • Patch Level 22.12.0.6
    • AMST-38337: Baseline compliance report generation on fully compliant devices refreshes the baseline policies and switches the status to Pending Install.
    • ARES-24702: Unable to view/edit Credential Profile in UEM.
    • AAPP-15387: Beacon sample should trigger Device Info sample but should not save OS data.
    • CRSVC-35245: AWCM Test Connection stops working after console runs for a few days.
    • MACOS-3613: DDUI - VPN payload "Provider Designated Requirement" field has a maximum character limit of 255.
    • AAPP-15425: Post Console Upgrade from 22.06 to 22.09 VPP Assignment is not working as expected.
    • FCA-204781: Console app pool is terminating with unhandled exception.
    • AMST-38342: Computer name field missing for Windows devices
    • https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2212/rn/vmware-workspace-one-uem-2212-release-notes/index.html#Resolved%20Issues-22.12.0.04%20Patch%20Resolved%20Issues
    • Last Update: CW10

 


 

 

 

Comments