Weekly highlight:
Release Updates Week 10-24:
Apple Updates Week 10
- Apple updates iOS and iPadOS
- iOS/iPadOS 17.4,
- iOS/iPadOS 16.7.6,
- iOS/iPadOS 15.8.2
- What’s new for enterprise in iOS 17
- What’s new for enterprise in iPadOS 17
- About iOS 17 Updates
- About iPadOS 17 Updates
- About the security content of iOS 16.7.6 and iPadOS 16.7.6
- About the security content of iOS 17.4 and iPadOS 17.4
Workspace ONE Boxer for Android 24.02
- Health Check Improvements
- Workspace ONE Notebook Integration is deactivated
- Workspace ONE Notebook Integration with Workspace ONE Boxer is deactivated.
- Quality Improvements
VMware EUC Security Advisories:
VMSA-2024-0006.1
- VMware ESXi, Workstation, and Fusion updates address multiple security vulnerabilities (CVE-2024-22252, CVE-2024-22253, CVE-2024-22254, CVE-2024-22255)
- Please see the advisory here: https://www.vmware.com/
security/advisories/VMSA-2024- 0006.html
EUC UX Research Opportunities
- Our goal is to gather insight into user behaviors, motivations, and goals, so we can use those insights to inform and strengthen product and design decisions.
- Interested in giving your opinion and making your voice heard? Check out what’s available!
Opportunity #1
- EUC Product/Feature: Experience Mgmt (DEEM/DEX)
- Topic: EUC Design is making a variety of changes to DEX and wants to hear your opinion about whether it’s going in the right direction! Some changes include potential new product tiers and cross-console functionality like getting DEX insights for Horizon, UEM, and Hub Services. Get a sneak peak at early wireframes of these new tools.
- Opportunity Type: Focus group conversations on 3/07 and 3/08 from 9-10am CST (10am EST, 3pm GMT, 4pm CET)
- Sign Up Link: HERE
Opportunity #2
- EUC Product/Feature: WS1 UEM
- Topic: Get a sneak peak at early wireframes of new designs for adding applications from the Enterprise App Repository flow.
- Opportunity Type: 45-minute, 1x1 conversations via Zoom
- Sign Up Link: HERE
Opportunity #3
- EUC Product/Feature: WS1 UEM
- Topic: Get a sneak peak at early wireframes of new designs for Vulnerability Management shared at Explore 2023!
- Opportunity Type: Variety of 60-minute, 1x1 conversations and focus groups via Zoom.
- Sign Up Link: HERE
Opportunity #4
- EUC Product/Feature: WS1 UEM, Horizon, and Intelligence
- Topic: How AI can work alongside you as you’re getting onboarded to WS1 or while you’re using it daily? For example, what if it could help you create a new cert authenticated Wi-Fi policy, query, or widget? What if you could ask it to show you the number of new enrollments in your deployment?
- Opportunity Type: Variety of 60-minute, 1x1 conversations and focus groups via Zoom.
- Sign Up Link: HERE
KB Highlights & Announcements Week 10-24:
iOS 17.4 and Alternative App Marketplaces (96740)
- iOS 17.4 introduces support for third-party app marketplaces for devices located in the European Union (EU). With the introduction of a special developer entitlement, third-party organizations can now create their own alternative app marketplaces that can be downloaded and installed on devices running iOS 17.4 and later. Alternative app marketplaces provide a new distribution method for applications, allowing users in the EU to download apps outside of Apple’s App Store. For more information on this topic, please see Apple’s support article, Update on apps distributed in the European Union.
App Not deploying on 23.10.x macOS Hub (96724)
- Customer is experiences issues where Proofpoint application does not install on devices that have been upgraded to 23.10.x version of the macOS hub. Application worked without issue with previous version of macOS Hub. In managedsoftwareupdate.log shows that app downloads to 97% and then shows the following error "The install failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. An unexpected error occurred while moving files to the final destination.)"
[AAGNT-198419] Managing WiFi on Android 12+ requires Location Services enabled (96763)
- Note: The behavior describe in this article is the same as in Managing WiFi on Android 10 & 11 requires Location Services enabled (96641) , but we consider this an issue with Workspace ONE UEM in Android 12+ as this is not an Android limitation in these OS versions.
On Android 12+ devices where Location Services is disabled, Workspace ONE UEM is unable to remove or update WiFi configurations. As such, if: - A WiFi profile is uninstalled from the device, Workspace ONE UEM will be unable to remove the WiFi configuration from the device.
- A new version is added to an existing, installed WiFi profile, Workspace ONE UEM will be unable to update the WiFi configuration on the device with any settings changes in the new profile version.
Workspace ONE UEM Samsung Knox Platform Guide 2024 (96762)
- Table of Contents:
- Introduction – Knox platform for enterprise
- Knox license keys
- Knox Mobile Enrollment
- Knox Service Plugin
- Knox-specific features/capabilities built into UEM
- License activation, passcode enforcement
- EFOTA (firmware management)
- On Premise and Closed Network considerations
High Priority KBs
- End of Life Announcement for the Legacy App Catalog in Workspace ONE UEM for SaaS UEM Customers (95774)
We are announcing the End of Life (EOL) for the UEM Legacy Catalog for UEM SaaS customers only at this time. If you are a On-Premises UEM Customer, this notice does not impact you at this time, further communications will follow for timelines on migrating On-Premises UEM Customers to the Intelligent Hub App Catalog. - Workspace ONE UEM - Updated requirements for on-premise cumulative patches (94706)
The base GA version for current Workspace ONE UEM releases is being revised through updated installers. On-premise customers will need to consume a revised installer for a given major version before any future cumulative patches can be deployed for that major version. These revised installers are required to address compatibility issues with regular cumulative patches. - Introducing Workspace ONE (WS1) UEM Next-Gen SaaS
VMware is excited to announce that the resource management & tracking improvements, the first major feature-based milestone in the Workspace ONE UEM Modernization Journey, is now available for customer testing. These improvements will be enabled in limited testing environments (CN135) starting on Thursday August 24, 2023. - Getting Ready for Android 14 (2023)
- Getting Ready for Apple Major OS Releases 2023
Recently updated or added KBs (Links)
- Workspace ONE UEM Samsung Knox Platform Guide 2024 (96762)
- [AAGNT-198419] Managing WiFi on Android 12+ requires Location Services enabled (96763)
- Introducing WS1 UEM Next-Gen SaaS: Device List View, Resource Delivery and Deployment Tracking Modernization Improvements in Tech Preview Environment CN135 (94042)
- iOS 17.4 and Alternative App Marketplaces (96740)
- App Not deploying on 23.10.x macOS Hub (96724)
- Intelligent Hub for Windows 10 stuck on loading screen (96139)
- When using Horizon Client 2312 and Blast protocol, a session is disconnected with VDPCONNECT_CONNECT_TLS error. (96660)
Digital Workspace Techzone, Blog and YouTube Updates
- Introducing advanced device telemetry for mobile devices through Workspace ONE Intelligence SDK
- Experience Management for Horizon, Powered by Workspace ONE Intelligence
- Horizon Configuration
- Horizon 8 Architecture
3rd Party Blog Updates & Industry News
Beta, Lab and Tech Preview Updates
Workspace ONE Multiuser Support for Windows
- **Early Access** - This Early Access program is for testing Multiuser functionality on Windows devices. The program provide access to pre-released version of UEM software in UAT environments. These environments are upgraded frequently with bug fixes and new features. This program is to be used for testing ONLY. There will be no support provided for production devices. Please see the list of known issues before testing. This list will be updated frequently as new fixes are rolled out. If you are not comfortable testing Alpha builds of UEM software, it is recommended you wait for the official beta release of Multiuser.
Please ensure your applications are created in the appropriate context (device or user) and are assigned to all potential users of the device. If you create user app and it is not assigned to the next user, it will be uninstalled.
Supported Enrollment Flows:
Agent Based Enrollment only
Silent Enrollment
*Support for OOBE enrollment will be added after seeding of Intelligent Hub to CN135/CN137/CN138*
Pending Functionality: - Pause Checkout functionality per device is missing in the current build in CN135/137/138. Will be added after next upgrade
- Certificate Management is missing in the current build in CN135/137/138. Will be added in COM-CN-52122.
- User Group checkout restrictions are not working in current build. Will be fixed in next upgrade.
- Single user to Multiuser migration is missing in the current build in CN135/137/138. Will be fixed in next upgrade.
- Known Issues:
- AMST-40743 - User SID is incorrectly cached for the entirety of reassignment.
- AMST-40735 - MultiUser migration button is not visible on device more actions (fixed in COM-CN-52275+)
- AMST-40408 - Add option to pause user check out on device details
- AMST-40369 - On demand App assigned to previous user only still shown in Hub to new user
- AMST-40366 - Email does not change in the console is the new user does not have one in UEM
- AMST-40328 - Entitlements not shown in PEO screen.
- AMST-40215 - Profile installation is not showing up in Troubleshooting tab
Official Windows Intelligent Hub - ARM64
- [Hub] New UI Framework for Intelligent Hub (WinUI3).
- [Hub] Windows devices now support registration with Google BeyondCorp for Context-Aware Access. Device compliance states will be synced with Google to grant user access to Google apps.
- [Hub] Intelligent Hub will now show the number of unread administrator-generated notifications over the Intelligent Hub icon in the task bar.
- [Hub] Intelligent Hub logging has been enhanced. In addition to formatting improvements, thread IDs, error levels, and additional error information are now present.
- [Hub] Support for Single Sign On using Kerberos - Windows Intelligent Hub now supports Kerberos as an authentication method for sign on.
- [Hub] Support for MFA when using a 3rd party IDP for authentication into Intelligent Hub. Windows Intelligent Hub now properly supports Multi-Factor Authentication when signing into Intelligent Hub.
Bugs Fixed:
- HUBW-13932 - VMware.Hub.Win32Agent.
AppXInstaller.exe crash during upgrading to master - HUBW-13935 - Log collection is not launching the folder automatically when collected from System
- HUBW-13953 - Can not uninstall the app (stuck) from control
- HUBW-13981 - Scripts in installing status without user click on it
- HUBW-10961 - AwWindowsIpc.exe keeps crashing after installation so that the enroll UI cannot be prompted
- HUBW-12543 - DM does not unenroll after uninstallation of Intelligent Hub
- HUBW-12529 - TaskScheduler is crashing on ARM64 device
WS1 Content 24.02 for Android
- Bug fixes and general improvements
Sign up or LogIn [HERE] to get access to the latest Beta versions.
March Software Releases
System | Component | Release | Announcement | Release Date |
Android | Boxer | 24.02 | 04.03.24 | |
Patch & Seed Script Updates Week 10-24
- OS Updates Seed Script
- Most recent update: Apple Seed Scripts iOS 17.4.0 (21E219)
- https://resources.
workspaceone.com/view/ rywydmj6ghb9nmch4ywq/en - Last Update: CW10
- Seed Script for latest Device Model Information
- Seed Script to support macOS model - MacBook Pro (14-inch, M3, Nov 2023) - Mac15,3
- https://resources.
workspaceone.com/view/ x8kn6bslt67vwvlgx4ld/en - Last update: CW49
- Workspace ONE UEM 22.09
- Patch Level 22.9.0.45
- CRSVC-43327: Increased CPU usage by CiscoISE App pool.
- AGGL-16159: Android VPN profile shows "Failed to save profile" error when trying to modify the profile or add a version to the profile.
- https://docs.vmware.com/en/
VMware-Workspace-ONE-UEM/2209/ rn/vmware-workspace-one-uem- 2209-release-notes/index.html# resolved-issues-22904-patch- resolved-issues - Last Update: CW50
- Workspace ONE UEM 22.10
- Patch level 22.10.0.38
- AAPP-16888: AWCP - Provisioning portal certificate signing request plist generation issue.
- CRSVC-44195: Correlation-ID header is missing from the Device State Migration tool to DST service.
- https://docs.vmware.com/en/
VMware-Workspace-ONE-UEM/2210/ rn/vmware-workspace-one-uem- 2210-release-notes/index.html - Last Update: CW09
- Workspace ONE UEM 22.12
- Patch Level 22.12.0.43
- AAPP-16989: App icons for some internal iOS apps are not displayed in UEM Console and Hub catalog.
- CRSVC-44196: Correlation ID header is missing from the Device State Migration tool to DST service.
- PPAT-16319: Issues with Tunnel certificate rotation.
- AAPP-16420: When CNS is configured for APNs, non-silent APNs is sent by manual Hub Query from UEM instead of silent APNs.
- https://docs.vmware.com/en/
VMware-Workspace-ONE-UEM/2212/ rn/vmware-workspace-one-uem- 2212-release-notes/index.html# Resolved%20Issues-22.12.0.04% 20Patch%20Resolved%20Issues - Last Update: CW09
- Workspace ONE UEM 23.02
- Patch Level 23.02.0.41
- CMSVC-17611 Inconsistence the device tag data upon re-enrollment
- CMEM-187009 Optimize Stored Procedure to avoid intermittent timeout
- CMCM-190931 Increase the maximum page size for managed content ds endpoint
- AMST-40590 Seeding - latest SFD 23.02 build to UEM 2306 and 2302 consoles
- AAPP-16995 Device Attribute Phone Number Modified on Wi-Fi iPads with no sim card
- https://docs.vmware.com/en/
VMware-Workspace-ONE-UEM/2302/ rn/vmware-workspace-one-uem- 2302-release-notes/index.html# Resolved%20Issues - Last Update: CW10
- Workspace ONE UEM 23.06
- Patch Level 23.06.0.24
- AMST-40589: Seeding latest SFD 23.02 build to Workspace ONE UEM 2306 console.
- ARES-27759: MTD solution no longer showing user info for unmanaged apps after UEM upgrade.
- ARES-27857: App Removal Protection not triggering when threshold is met.
- AAPP-17022: The description for Custom B2B apps is not shown in Legacy and Hub catalog.
- ARES-28059: Database error while hitting the Devices Tab to check the devices assigned details on an app.
- https://docs.vmware.com/en/
VMware-Workspace-ONE-UEM/2306/ rn/vmware-workspace-one-uem- 2306-release-notes/index.html# Patch%20Resolved%20Issues - Last Update: CW10
- Workspace ONE UEM 23.10
- Patch Level: 23.10.0.6
- AAPP-16943: Not able to configure EAS payload when credential payload is added.
- AGGL-14885: ChromeOS Credentials Profiles do not redeploy between user logins.
- UM-8727: Fix the parameter passed to the Microsoft Graph Client APIs when searching by devices.
- AAPP-16463: Spacemen error when customer is trying to assign/edit/Manage Device for VPP app (proloquo2g).
- CRSVC-44714: SAN is missing in eJBCA CSR.
- Patch Level: 23.10.0.7
- UM-8734 Unable to access usergroups even with admin roles and right permissions
- RUGG-12924 CustomAtttibute sample update in DeviceState was failing due to duplicate custom attributes mapping
- ENRL-4128 After UEM 2310 Upgrade iOS CICO Fails When OS Version Used in Enrollment Restriction Policy
- CRSVC-46941 Device summary tab, security card is not displaying Azure Active Directory Registration or Azure Device ID under device details
- CRSVC-46609 AAD CA - Unable to save intelligent hub setting page on lower OGs
- CMSVC-17622 Boeing- Run Pre-validation tool for analyzing SG data on CN1397
- CMCM-190929 Increase the maximum page size for managed content ds endpoint
- ARES-27858 ARP not triggering when threshold is met
- AMST-40710 Seed Windows Hub 23.10.5 x86 UEM console 2310
- AAPP-17023 The description for Custom B2B apps is not shown in legacy and hub catalog
- AAPP-17002 VPP application not updating version on the console for one application but does push the updated version to devices
Comments
Post a Comment