VMware EUC Newsletter - Week 18




Weekly highlight:



iOS 16.4.1 and iPadOS 16.4.1 (a)

Apple Rapid Security Response support (92132)

  • Background
    On May 1st, 2023, Apple released their new Rapid Security Response feature for both iOS and macOS. Rapid Security Responses deliver important security improvements between software updates. Apple states Rapid Security Responses are applied automatically by default and only apply to the latest versions of iOS, iPadOS, and macOS, beginning with iOS 16.4.1, iPadOS 16.4.1, and macOS 13.3.1. For more information regarding this feature, please see the following link to Apple's support article.
  • Expected Behavior
    Workspace ONE UEM does not currently support reporting on Rapid Security Response installation status or granular management of specific Rapid Security Responses. This means that:
    • Devices will not display installed Rapid Security Responses within UEM console Device Details or List Views
    • UEM console cannot trigger installation of specific Rapid Security Responses
    • Compliance Policies, Enrollment Restrictions, and Smart Groups can not target devices with specific Rapid Security Responses installed

Apple provides MDM the ability to block Rapid Security Response installation and prevent removal. If you'd like to apply either of these policies, please see the following link to a custom XML profile

  • Resolution
    The Workspace ONE UEM team is currently developing functionality to report and manage Rapid Security Response installation status.
    This article will be updated in the future to provide feature support timelines. 
  • https://kb.vmware.com/s/article/92132?lang=en_US







Release Updates Week 18:

VMware Workspace ONE Intelligent Hub for macOS 23.04

  • HUBM-6298 Native ForYou Tab on macOS initial enablement
  • HUBM-6527HUBM-6712 - 3rd Party Integrations: Update Alamofire & Firebase
  • Fixed Bugs
    • HUBM-6582 - macOS Sensor with User Switch trigger was not getting executed on the device
    • HUBM-6677 - Application displayed in the catalog when "DisplayInCatalog" is disabled
    • HUBM-6729 - Close was clicked on the AWrecoveryKeyVC prompt



Workspace ONE Boxer for Android 23.04

  • Create Online Meetings for Zoom 
    • Prerequisites:
      • Cloud ENS enabled
    • With this feature, the users are going to be able to create a Zoom meeting and add the conference details directly into an invite when they create or edit it
    • A new “Zoom Online Meeting” toggle is present in the create/edit event screen, which when turned on automatically creates the Zoom link together with the other meeting details 
    • The feature is activated and the toggle appears when the new account-level KVP EnableZoomOnlineMeetings is set to true. 
      • The default value of the KVP is false 
    • The first time when the user tries to create a meeting he/she would be prompted to authenticate in Zoom with their credentials
  • Quality Improvements and Crash Fixes


Workspace ONE SDK for Android 23.04

  • Previous releases required the SDK-built app to implement an AirWatch SDK Service class. This release requires a Workspace ONE SDK Event Handler class instead. 
    • We have moved to the Workspace ONE SDK Event Handler class because the Android JobIntentService has been deprecated. See the Android Developers site article JobIntentService for details. 
    • Find instructions for using the Workspace ONE SDK Event Handler class in the Workspace ONE SDK for Android Base Integration Guide. We offer a markdown version and a PDF version. 
      • The markdown version of the guide is in the repository that also holds the sample code, Base Integration Guide
      • Find the portable document format (PDF) version of the guide on the VMware website, Base Integration Guide
  • We've added support for the Play Integrity API. 
  • We migrated the Workspace ONE SDK for Android from JobIntentService to the WorkManager library. 
  • We've made bug fixes and stability improvements.


Photon OS 5.0

  • Photon OS 5.0 provides enhancements in Network Configuration Manager, PMD-nextgen, Container Runtime Security, Linux Real-Time Kernel, and TDNF Features. The release introduces the Photon OS Container Builder tool. This release of Photon OS also supports XFS and BTRFS filesystems, Control Group V2, ARM64 on Linux-esx kernel, PostgreSQL. It contains installer improvements and critical updates to the OSS packages including Linux kernel version updates. This topic summarizes what's new and different in Photon OS 5.0.


EUC UX Research Updates & Opportunities 

Our goal is to gather insight into user behaviors, motivations, and goals, so we can use those insights to inform and strengthen product and design decisions.

Upcoming Opportunities - Who Wants To Join?

Interested in giving your opinion and making your voice heard? Check out what’s available!

  • Digital Employee Experience Workspace: Device Profile / Timeline
    • Play with a prototype of a NEW design for Device Profile. How easy is it to use? What is missing?
      • Feature that introduces a timeline to view events/history like application usage, system errors, and network activity, so Admins have a more complete picture of a device’s behavior/performance
    • 60-minute 1x1 conversation via Zoom
    • Relevant for:
      • Admins involved in Helpdesk/ServiceDesk
      • Admins using Digital Employee Experience (DEEM, Surveys, Insights, etc.)  
    • Fielding: Week of 5/15
    • Admins will receive VMware swag upon completing the 1x1 Zoom conversation!



  • WS1 Intelligence: App Manangement & Usage Tool
    • See an early wireframe concept of a potential new tool that would show app usage data, app cost savings, and automate the app management processes. We are looking for your feedback on the design – is it going in the right direction? Is anything missing? Does the content make sense?
    • 60-minute 1x1 conversation via Zoom
    • Relevant for:
      • Admins currently using Workspace One Intelligence or Workspace ONE Hub Services
      • Admins involved in managing applications (add apps, remove apps, measure recent activity, etc.) 
    • Fielding: Week of 5/08
    • Admins will receive VMware swag upon completing the 1x1 Zoom conversation!



  • Digital Employee Experience: Incident MGMT. & Playbooks/Tool
    • See an early wireframe concept of a potential new tool that would help Admins manage unplanned events that interfere with productivity. It would also have a place to access step-by-step instructions and best practices to help Admins when solving a problem. Is the concept going in the right direction? Is anything missing? Does the content make sense? 
    • 60-minute 1x1 conversation via Zoom
    • Relevant for: Any Admin involved in Helpdesk/ServiceDesk
    • Fielding: Week of 5/08
    • Admins will receive VMware swag upon completing the 1x1 Zoom conversation!




KB Highlights & Announcements Week 18:


Upcoming changes to APNs for Applications for On-Premises Workspace ONE UEM (91116)

  • Workspace ONE Productivity apps on iOS receive push notifications using APNs through Workspace ONE UEM. The certificates necessary to deliver these notifications need to be renewed every year that requires administrators of On-Premises environments to run a database script provided by VMware, before the expiry to avoid any disruption

Workspace ONE Productivity Applications that are part of this process flow are: 

1) Workspace ONE Intelligent Hub 
2) Workspace ONE Boxer 
3) Workspace ONE Content 
4) Workspace ONE Web

  • In an effort to reduce the manual task or running a SQL script, consolidate notifications technologies and reduce complexities of how the notifications are delivered to the device, VMware Workspace ONE is introducing a global Cloud Notification Service that will be responsible for delivering APNs notifications to the respective productivity applications. 

On-Premises UEM environments will need to update networking infrastructure to be able to communicate with the Cloud Notification Service. 


Updating Device Assignments for Applications in the OG Hierarchy (92216)

  • This article provides guidance on updating device assignments for applications in the OG hierarchy. If the same application is uploaded in both the parent and child OGs, the child OG will always receive the assignment from its current OG. If no assignment is found, it will traverse up the hierarchy to obtain the assignment.
    Devices will always receive assignments from the nearest OG in the hierarchy with the highest version of the application. As a general thumb rule, assignments should always come from the nearest OG.
    It is important to note that if an application is already uploaded in a lower OG and devices are receiving assignments from that OG, the devices will continue to receive the application from the nearest OG, even if a higher version is available in the root OG. To avoid this situation, customers should add higher versions of the application in the lower OG when uploading it to the root OG.


High Priority KBs

  • VMware Workspace ONE UEM New Control Plane SaaS Deployment Schedule (86243)
    Workspace ONE UEM has undergone a complete re-architecture to modernize the platform using microservices and containers to enable increased scalability and performance and increase the rate of innovation. Now after having conducted significant and careful testing, these architecture updates, including a new control plane, will be deployed to UEM SaaS environments over the next several weeks, with options available to on-premise customers after this roll-out (Later in 2022).
  • Support Access Policies for Customers with Expired SaaS EUC Licenses (89494)
    In alignment with VMware's Corporate Standards and those of the industry as a whole, VMware customers who have purchased SaaS (Software-as-a-Service) licenses for EUC (End-User Computing) products can expect the behavior outlined in the KB regarding Support access when their subscription has a status of Active Pending Cancellation or Expired/Cancelled.


Recently updated or added KBs (Links)


Digital Workspace Techzone, Blog and YouTube Updates


3rd Party Blog Updates & Industry News


Beta, Lab and Tech Preview Updates


iOS, macOS, watchOS and tvOS beta releases

  • iOS 16.5 Beta 4 (20F5059a)
  • iPadOS 16.5 Beta 4 (20F5059a)
  • macOS 13.4 Beta 4 (22F5059b)
  • watchOS 9.5 Beta 4 (20T5560a)
  • tvOS 16.5 Beta 4 (20L5559a)

The following content is also available:

  • Platform SSO Developer Beta Documentation v1.3

For additional information, known issues, and installation instructions, please review the release notes available in Feedback Assistant and on the AppleSeed web portal.


May Software Releases





Release Date




Release Notes



Photon OS


Release Notes





Release Notes





Release Notes



Patch & Seed Script Updates Week 18-2023








  • Workspace ONE UEM 22.10
    • Patch Level
    • AAPP-15424: Post Console Upgrade from 22.06 to 22.09 VPP Assignment is not working as expected.
    • AAPP-15427: Beacon sample should trigger Device Info Sample but should not save OS data.
    • AMST-38336: Baseline compliance report generation on fully compliant devices refreshes the baseline policies and switches the status to Pending Install.
    • ARES-24501: Enterprise Application Repository is no longer able to add iTunes application.
    • FCA-204247: Console app pool is terminating with unhandled exception.
    • FCA-204891: Show success for change og of device even when it is prevented by tenancy restriction.
    • https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2210/rn/vmware-workspace-one-uem-2210-release-notes/index.html
    • Last Update: CW10


  • Workspace ONE UEM 22.12
    • Patch Level
    • AAPP-15770: APNs Outbound messages throttled and failure code: Unknown.
    • ARES-25157: Rocket Man error on device tab when installing an application.
    • CMEM-186838: Sync Mailbox is failing due to unmapped device records.