Weekly highlight:
Workspace ONE UEM Cloud 2306 VMware Workspace ONE UEM Cloud 2306 is available to Shared SaaS customers as of August 4, 2023! Rollouts to Shared SaaS environments will begin next week. - What's New Highlights (full list in Release Notes)
- Console
- We’ve changed the behavior for our SCEP certificates. Auto-renewed certificates no longer append sceprenew to the Subject.
- When you reset your account password, your Workspace ONE UEM console session used to reset the password continues, but we automatically log you out of any other active sessions. This feature applies only to basic administrator accounts. The third party authentication is not currently supported. This feature is enabled by default, there is no system setting.
- iOS
- Manage the location of Web Clips when defining the layout of the device's home screens using the Home Screen Layout profile. You can place Web Clips on any home screen, on the Dock, or within Folders.
- To improve VPP app deployments, we have now implemented Apple's latest API suite.
- We have updated the profiles for Restrictions, Wi-Fi, VPN, and Skip Setup Assistant. As of iOS 16, these profiles now support all available configuration keys.
- macOS
- The new macOS Device Updates dashboard enables you to assign and deploy minor and major macOS updates to devices. This dashboard leverages Apple’s MDM protocol, supporting options such as the ability to download and stage the update to a device, notify the user that an update is available, or even force an update to take place without user interaction.
- We’ve added several new configuration options for macOS profiles
- Freestyle
- You can now create a workflow for one-time removal of an application and/or profile from a device. After the workflow is deployed on the device, the app or profile is uninstalled successfully.
- Windows
- You can now keep those on-demand apps up to date whenever you add a new version.
- We’ve added two new templates: Windows 11 versions 21H2 and 22H2. We have also included Windows 11 version 21H2 for creating a new CIS Windows Benchmarks template.
- Enhancements for Windows Profiles:
· - Profile data will now be provided to the console through the Windows DDUI Profiles (Beta).
- Enhancements with Windows Update:
· - Windows Update information has been moved to the Intelligent HUB
- New Device Update view shows the accurate installation status together with the Update installation source for easier troubleshooting.
- We’ve introduced three buttons to help you troubleshoot Windows updates such as Pause, Rollback, and Resume.
- Android
- We’re excited to announce that VMware has integrated with Microsoft to extend our UEM conditional access capabilities for Microsoft Azure Active Directory (AD), with support for Android shared device mode.
- You can now silently grant applications access to client certificates provisioned by Workspace ONE UEM. VPN clients, browsers, and other applications will no longer have to prompt the device user to select a certificate for authentication.
Upcoming EUC Events Release Updates Week 32: Workspace ONE Tunnel for Android 23.06 (staged) - In this release, we’ve made a few updates containing general quality and performance improvements with the following new features:
- Improve Tunnel setup time during device checkout
- Added support for sending hostname in the PROXY action for Device Traffic Rules
Workspace ONE Intelligent Hub for macOS 23.07 - [HUBM-6663] - [Hub Health] Automatic log collection, workflow healing, configuration
- [HUBM-7113] - Reset Hub App without reboot
- [HUBM-7145] Recover from the deadlock state
- [HUBM-7142] Self heal Hub app when secure channel communication is broken
- [HUBM-6532] Upgrading third party frameworks (Keychain access)
Workspace ONE Intelligent Hub for iOS 23.07 - Quick Actions for Enterprise Wipe and Delete Device
- We are introducing quick actions into the Support tab for a specific device that has been previously found in the Self-Service Portal
- This feature allows end users to go to their devices in the Support tab and take actions on those devices such as:
- Enterprise wipe (remove management and delete corporate data from the device
- Make noise (allow you to trigger a noise on the device)
- To enable this, go to the current device in Support -> Current Device -> Preferences -> Toggle on Quick Actions
- UEM version 23.02+ is required for the critical actions (Enterprise Wipe and Delete Device)
- Hub Services 23.06+ brings support for the non-critical actions
- You will also be required to have Critical Actions turned on. This can be found in the Hub Services Console at Employee Self-Service > Device Self-Service > Critical Actions. This will be coming to on prem versions of Hub Services later.
- Delete Device (delete the device from the Workspace ONE account and completes an enterprise wipe of the device)
- Clear Passcode (clear the passcode of a target device)
- HUBI-9958: Citrix Desktops fail to load
- HUBI-9383: People Search employee ID is not showing under the employee’s name
Workspace ONE Intelligent Hub for Android 23.07 - Android 14 Support: See Getting Ready for Android 14 (2023).
- Support for shared devices with Entra ID (formerly Azure AD) Conditional Access: Workspace ONE UEM 2306 and higher is required for this feature.
- Non-critical Device Actions in Hub: We are introducing the following non-critical actions which can be executed by the user remotely on any of the enrolled devices through the Hub Support tab - Make Noise, Change Device Passcode, Clear Device Passcode. This helps end users to execute these actions in a self-service manner when required, without requiring any help from the service desk or IT support. This requires Hub Services 23.06+ and Workspace ONE UEM 2302+.
- Ability to Hide the Apps and Favorites Tabs: We are introducing the ability for the customers to hide Apps and/or Favorites tab if their use-case requires it. Till now, Apps tab used to be always enabled when using Hub Services which will not be the case now. To hide the Apps and/or the Favorites tab, admins need to turn off the toggles in the Hub Services console for those tabs. If any of the other tabs are configured to be shown i.e. People, For You, Support, Custom tab, those other tabs will show without the Apps and Favorites tab needing to be shown. If the Apps tab is disabled but Favorites tab is still enabled, Web Links will be the only feature visible on the Favorites tab.
- Bug Fixes
Workspace ONE XR Hub 23.07 - Release Notes for XR Hub 23.07
- Meta's Quest for Business platform is still currently in open beta
- Kiosk mode still requires "developer mode" access to the device to run ADB commands which enable required settings. See Known Issues.
- XR Hub compatibility with Quest for Business enrollment into Workspace ONE UEM. Quest for Business enrollment caveats:
- Kiosk mode performance improvements; continues to be in Tech Preview for Meta Quest devices
- Single Sign-On (SSO) and Check-In / Check-Out (CICO) improvements
- App entitlement display and app transitioning improvements
- Spatial window, pointer, keyboard, and localization improvements
- Various bug fixes and performance enhancements
- XR Hub Full Release Notes
- Download Link for XR Hub
- My Workspace ONE
- If necessary, scroll and select Workspace ONE XR Hub
- If necessary, choose Platform: Android, then App Version: 23.07 and then Console Version: All
Workspace ONE Assist Installer 23.07 + Clients - Enhanced streaming performance in iOS devices
- Workspace ONE Assist now supports enhanced streaming quality and performance in iPhones & iPads during a screen share session across all supported browsers.
- Support for dynamic shortcuts to Work Profile applications from the Assist console
- In this Assist release, we have implemented the capability on the Assist agent to retrieve the list of apps installed on the work profile side of the device enrolled in COPE mode and list them in the Shortcuts tool window of the Assist Console. This will help the admins to easily access these shortcuts and navigate around the device during troubleshooting.
- Enhancements to the UI/UX in the Remote Assist console
- Experience enhanced discoverability of value-added Assist features such as Shortcuts, Whiteboard, and so on, which are now readily visible in the toolbar and can be accessed with a single click.
- Support for Remote Assist sessions on Proxy enabled MacOS machines
- We have added support for Assist sessions on MacOS machines that are configured for proxy with authentication.
- Support for Remote View Only in Android Unattended mode
- Remote Assist session with the Unattended mode in Android always provided the Admin with full remote control capability even if the admin role in UEM did not have the Remote Control permission enabled for Assist.
- Support for Database Name Modification & Password reset for local SQL User accounts
- Support for Unattended mode on Windows 10 IOT Enterprise OS version
- Integration with UEM SYSLOG for logging, monitoring and reporting Assist events
- Assist console logging improvements
- Bug Fixes
- 23.07 Clients for Android, macOS, Windows and iOS mandatory for the new features and capabilities
- SaaS Upgrades have started. Please refer to the SaaS Upgrade Schedule, and https://status.workspaceone.com/for details.
VMware Security Advisory: Moderate Severity - VMSA-2023-0017 EUC UX Research Updates & Opportunities Our goal is to gather insight into user behaviors, motivations, and goals, so we can use those insights to inform and strengthen product and design decisions. Upcoming Opportunities - Who Wants To Join? Interested in giving your opinion and making your voice heard? Check out what’s available! - Help Improve WS1 UEM and Intelligence (MULTIPLE opportunities available)!
- This includes giving feedback on refreshed designs of existing features, sneak peek's at new features, and changes to the menu and navigation.
- Take this short questionnaire to let us know you're interested in being invited. This will take less than 5 minutes to complete.
KB Highlights & Announcements Week 32:
SINST-176160 - Workspace One UEM - Unable to edit existing or create new DDUI profiles. (93911) - Upon deploying the patches noted in KB 93877, you may experience an error when creating or editing DDUI device profiles (iOS, macOS, Android Enterprise) in the Workspace ONE UEM Console.
- Attempting to create or edit a profile may result in "an error has occurred" message being displayed as below. Additionally the Metadata Transform Service may fail to start on application servers hosting the Workspace ONE UEM API comoponent.
[AMST-39210] - Intelligent Hub not installing on OOBE-enrolled ARM x64 Windows devices (93527) - When OOBE enrollment is performed for an ARM x64 device, the device remains in a "Pending Hub" state on the UEM console.
- The enrollment process on the device freezes at the OOBE blue screen.
- This issue is specific to OOBE. If we perform native OMADM enrollment, we can see that the ARM x64 agent is installed successfully on the device and the device gets enrolled successfully.
[Resolved] SINST-176145 - Multiple Workspace ONE UEM application pools and services may not start once stopped (93877) - Workspace ONE UEM services and application pools may fail to start once stopped.
- The server code for Workspace ONE UEM is digitally signed with an internal signing certificate to ensure that the delivered code remains identical to the one that was initially signed. The Windows operating system verifies the code signing certificate via several methods before allowing services to run.
- A fix has been released for this issue for the following supported versions of Workspace ONE UEM available for On-premise consumption. Please note these patches differ from typical Workspace ONE UEM cumulative patches in a few ways
WNS Status Disconnects After Applying New Firewall Profile on Windows Devices (93931) - The WNS (Windows Notification Service) status becomes disconnected as soon as the new firewall profile is applied to Windows devices.
- The WNS status disconnected is caused by the new firewall profile's setting, specifically the 'Outbound Action & Inbound Action' sections under both Public and Private settings, which are set to block.
- To resolve this issue, you need to whitelist the WPNService, which manages the connection between the device and the WNS server. This can be done by adding firewall rules to the new firewall profile.
End of Support Life for VMware Workspace ONE Notebook (93850) - VMware is announcing End of Support Life for the Workspace ONE Notebook application. This will be effective February 2nd, 2024. The support period will end on February 2nd, 2024, and the product will reach End of Support Life. Following this date, the Workspace ONE product team will not be servicing this product in any fashion. The app will be removed from Google Play, the App Store, and My Workspace ONE following the end of the support.
High Priority KBs - VMware Workspace ONE UEM New Control Plane SaaS Deployment Schedule (86243)
Workspace ONE UEM has undergone a complete re-architecture to modernize the platform using microservices and containers to enable increased scalability and performance and increase the rate of innovation. Now after having conducted significant and careful testing, these architecture updates, including a new control plane, will be deployed to UEM SaaS environments over the next several weeks, with options available to on-premise customers after this roll-out (Later in 2022). - Support Access Policies for Customers with Expired SaaS EUC Licenses (89494)
In alignment with VMware's Corporate Standards and those of the industry as a whole, VMware customers who have purchased SaaS (Software-as-a-Service) licenses for EUC (End-User Computing) products can expect the behavior outlined in the KB regarding Support access when their subscription has a status of Active Pending Cancellation or Expired/Cancelled.
Recently updated or added KBs (Links) Digital Workspace Techzone, Blog and YouTube Updates 3rd Party Blog Updates & Industry News
August Software Releases Patch & Seed Script Updates Week 32-2023 - OS Updates Seed Script
- Seed Script for latest Device Model Information
- Workspace ONE UEM 22.10
- Patch level 22.10.0.22
- AAPP-15902: Internal iOS app details display incorrect Bundle Identifier.
- AMST-38845: Reduce traffic of empty sample for winRT devices.
- FCA-205278: Device Search API is not returning Wi-Fi SSID in the response.
- CRSVC-37275: Changes for correcting AppSequence workflow type in 2210.
- AGGL-14559: Remove unwanted calls that are made to play.google.com when user saves a new application or edits the application assignment.
- FS-3226: iOS and Android Workflows getting struck in 'InProgress' status.
- CRSVC-37376: While creating new Compliance policy under view Device Assignment page pressing enter is saving the compliance policy.
- PPAT-14136: Post Migration to AWS CloudFront - Tunnel Configuration Page does not load.
- SINST-176112: Airwatch API Gateway file copy failed during deployment.
- AAPP-15940: Device snc should not queue Remove Provisioning Profile Command if PP is shared by other assigned apps.
- https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2210/rn/vmware-workspace-one-uem-2210-release-notes/index.html
- Last Update: CW24
|
Comments
Post a Comment