EUC Newsletter - Week 15





Weekly highlight:




Release Updates Week 15-24:

Workspace ONE Intelligent Hub for Linux 24.03

  • SAML support for CLI Enrollment – For enrollments executed via command line, the Intelligent Hub can now pop a browser to capture a user’s enrollment credentials if the UEM Organization Group is configured for integrated, modern authentication. This removes a limitation that has been present since the first release of the Intelligent Hub for Linux and minimizes the need for utilizing web enrollment to enroll users. This functionality requires either Firefox or Chrome to be installed on the device.
  • Support for 64bit on ARM – New installers are available for 64bit operating systems running on the ARM chipset. This includes support for virtual machines running on M-chip based Apple Mac devices, as well as any other ARM hardware running a 64bit OS.
  • Sensors in User Context - Workspace ONE Sensors can now be executed in the user context on a Linux device in addition to the existing option of running them in the system context. This is now like Mac and Windows that provide both options. The drop down to select the execution context is in the definition of the sensor itself in Workspace ONE UEM starting with 2402.
  • More enhancements
    • Added option for admin to disable private key encryption
    • Added support to validate iptables in order to fetch the firewall status
    • Removed sudo requirement from the enrollment command
    • Added support for web enrollment using flatpak installed browser
  • Resolved Issued
    • LAGNT-910 – Fix intermittent sample deserialization error while parsing date in non ISO formats
    • LAGNT-916 - Remove sudo requirement from the enrollment command
    • LAGNT-918 – Resolve log directory permissions errors after unenroll and enroll using ws1Hubutil
    • LAGNT-921 - Add enrollment in progress check to avoid multiple enrollment attempt
    • LAGNT-922 - Remove Hub restart after each feature flag value change
    • LAGNT-975 - Support for Wi-Fi profile using password with additional special characters
    • LAGNT-976 – Fix Assist for Linux button missing issue
    • LAGNT-977 - Linux agents not consistently receiving auto-upgrade command
    • LAGNT-1034 - Reduce number of log entries by AWCM on network failure


Workspace ONE Assist Installer 24.03

  • Expanded support for additional Assist privileges in UEM roles
  • Shortcuts
  • Enhanced support for shortcuts within the default Android profile
  • Reduced latency and improved real-time streaming experience for Android devices
  • Workspace ONE Assist now generates and stores log files and health indicators, which aid in troubleshooting any product related issues.
  • Workspace ONE Assist now generates and stores health indicators, which aid in troubleshooting any product related issues.
  • Bug Fixes


Workspace ONE Assist Clients 24.03

  • Linux
    • In this release, we’ve made an update addressing functionality and performance improvements with no new features.
  • macOS
    • In this release, we’ve made an update addressing functionality and performance improvements with no new features.
  • Android
    • Reduced latency and improved real-time streaming experience for Android devices
    • Workspace ONE Assist now supports improved streaming and controls for Android devices during a screen share session by leveraging hardware acceleration and efficient adaptation algorithms.
    • Improved Remoting Experience includes:
      • Hardware accelerated video codec.
      • Dynamic video codec negotiation.
      • Adaptive bitrate based on measured network parameters.
    • Troubleshooting module for Android
    • Workspace ONE Assist now generates and stores log files and health indicators, which aid in troubleshooting any product related issues.
  • Windows
    • Troubleshooting module for Windows
    • Workspace ONE Assist now generates and stores health indicators, which aid in troubleshooting any product related issues.


Workspace ONE Intelligence 24.04.08

  • We made updates to Freestyle Orchestrator.

    • We made an update to the View Test Result section in the Freestyle Workflow Action Test wizard, to provide high level information like Execution Status and HTTP Status Code.

    • We also added detailed HTTP Responses to help with troubleshooting. This is especially helpful when the overall HTTP Status Code is a 200 series, but in the HTTP Response, there are details of certain failures or errors.

  • We're happy to announce the Workspace ONE Intelligence SDK 24.1.0 for iOS release.

    • With this new release for iOS, we are going beyond app analytics and adding the capabilities to collect advanced device, network, and battery telemetry.

    • This collection provides comprehensive insights into device performance, empowering IT teams to proactively enhance the digital experience for mobile device users.

  • We've add State Change events in Experience Management > Employee Experience.

    • Activate state change events to create historical reports or dashboards on hardware and driver update and driver issue events.

    • Create a widget that "overlays" system crashes with driver updates from various driver publishers to see if system crashes were caused by driver issues or updates.

  • We've added User and Organization Scores for macOS in Experience Management.

  • We’ve removed the API key environment variable from the Workspace ONE UEM integration OAuth2 configuration


VMware EUC Security Advisories: 

---no new VMSA this week---


EUC UX Research Opportunities: 

  • Our goal is to gather insight into user behaviorsmotivations, and goals, so we can use those insights to inform and strengthen product and design decisions.
  • Interested in giving your opinion and making your voice heard? Check out what’s available!

Opportunity #1

  • NEW ServiceDesk and ITSM Connector Dashboards
    • About: Where Admins can access performance data about Helpdesk and ServiceNow Incidents, leveraging the capabilities of DEEM. See ticket status widgets, top device issues, and Insights like 300 Windows Desktop OS crashes.
    • What: Variety of focus groups and 1x1 conversations via Zoom.
    • When: The week of 4/29 and 5/06.
    • SIGN UP HERE

Opportunity #2

  • Build Custom Alerts in Workspace One

    • What: Play with a clickable prototype and tell us what you think.

    • How: On your own time in Maze, a user testing tool. It will record your audio and computer screen.
    • Time: It can take up to 10 minutes.
    • TEST LINK HERE


KB Highlights & Announcements Week 15-24:

VMware Support Transition to Broadcom (97304)

  • The process of transitioning to Broadcom systems and the necessary migration of VMware systems will begin at approximately 5:00 p.m. PDT on Tuesday, April 30, 2024, and conclude at approximately 8 a.m. PDT on Monday, May 6, 2024. 
  • Starting 6-May-24, End User Computing (EUC) customers should contact EUC support at https://customerconnect.omnissa.com for any technical needs.


[Resolved] APNS Signature Verification failed error (97542)

  • Customer may face an issue with renewing the Apple Push Notification service (APNs) certificate. The error encountered is "Certificate Signature Verification failed because the signature is invalid." 
  • This issue has been resolved by Apple.  APNS Certificate renewals that previously failed should be retried. If further issues persist please open a support ticket. 


Capturing new teams as a package in App Volumes 4.x (97141)

  • The new Teams uses MSIX packages therefore it is not possible to capture in app volumes using the standard procedure of capturing a package. Using the app volumes tools, the new teams can be captured as a package in App Volumes.
  • Find detailed instructions how to resolve in the [KB].


Hub fails to install the app if a corrupt package with same name is already present in munki cache folder. (97661)

  • Customer experiences issues where Hub fails to install the app if a corrupt package with same name is already present in munki cache folder. The installation of Hub will not progress or retry.
  • Root cause:
    Munki downloads the package but since a corrupt package was already present in munki cache folder (/Library/Application\ Support/AirWatch/Data/Munki/Managed\ Installs/Cache) hub failed to move the new downloaded package to cache folder which further interrupted the installation process


Workspace ONE Assist Windows Application displays 2 shortcut icons in start menu (v24.03) (97669)

  • With the release of version 23.02 Workspace One Assist introduced WNS support to enhance connection reliability. This was achieved by leveraging MSIX packaging, where Assist team introduced an application packaged in MSIX format to support WNS. However, an issue is identified with this support “Assist application displays 2 shortcut icons in start menu”.


How to Avoid "Duplicates" in Custom Attribute Reporting in Workspace ONE Intelligence (96727)

  • Custom attributes in Workspace ONE UEM enable you to extract specific values from a managed device (for example, IMEI, location, and many others) and use it as assignment criteria for products. It is a very valuable field, and many customers want to add it in their device report.
  • Workspace ONE Intelligence is a modern data platform that allows customers to build and run a custom report. When customers include custom attributes in their report, however, they often discover the so called “duplicates” that impact their experience. In this article, we will explain why there are “duplicates” and how to avoid them.


Sometimes instant clone VDI gets stuck in customizing state during image push. It shows Boot Manager screen (EFI diagnostics). (97494)

  • ModeB is selected as the provisioning scheme for the instant clone pool.
  • When opening the affected VDI in the vSphere Client console, Boot Manager screen (EFI diagnostics) is displayed.
  • The issue sometimes occur only in some unspecified VDIs.
  • You can see errors similar to the below in Connection Server's debug log:Location of Horizon View log files (1027744)
    [EventLogger] Error_Event:[BROKER_PROVISIONING_ERROR_VM_CUSTOMIZATION_TIMEOUT] "Provisioning error occurred for Machine VDI-1: Customization operation timed out": MachineId=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx, MachineName=vdi-1, Node=cs.test.local, Severity=ERROR, Time=Mon Jan 01 01:00:00 JST 2024, Module=Broker, Source=com.vmware.vdi.desktoptracker.VmInformation, Acknowledged=true


High Priority KBs: 

  • VMware Support Transition to Broadcom (97304)
    The process of transitioning to Broadcom systems and the necessary migration of VMware systems will begin at approximately 5:00 p.m. PDT on Tuesday, April 30, 2024, and conclude at approximately 8 a.m. PDT on Monday, May 6, 2024. 
    Starting 6-May-24, End User Computing (EUC) customers should contact EUC support at https://customerconnect.omnissa.com for any technical needs.

  • End of Life Announcement for the Legacy App Catalog in Workspace ONE UEM for SaaS UEM Customers (95774)
    We are announcing the End of Life (EOL) for the UEM Legacy Catalog for UEM SaaS customers only at this time. If you are a On-Premises UEM Customer, this notice does not impact you at this time, further communications will follow for timelines on migrating On-Premises UEM Customers to the Intelligent Hub App Catalog.
  • Workspace ONE UEM - Updated requirements for on-premise cumulative patches (94706)
    The base GA version for current Workspace ONE UEM releases is being revised through updated installers. On-premise customers will need to consume a revised installer for a given major version before any future cumulative patches can be deployed for that major version. These revised installers are required to address compatibility issues with regular cumulative patches.
  • Introducing Workspace ONE (WS1) UEM Next-Gen SaaS
    VMware is excited to announce that the resource management & tracking improvements, the first major feature-based milestone in the Workspace ONE UEM Modernization Journey, is now available for customer testing. These improvements will be enabled in limited testing environments (CN135) starting on Thursday August 24, 2023.


Recently updated or added KBs (Links) 


Digital Workspace Techzone, Blog and YouTube Updates 


3rd Party Blog Updates & Industry News 


Beta, Lab and Tech Preview Updates 

New Offering - Workspace ONE Tunnel Container

  • The Workspace ONE team is updating the deployment options for Tunnel and replacing the standalone Linux Tunnel installer. This new deployment method provides significant orchestration and security improvements over the previous RPM artifact and installer, and leverages a secure container version of the Tunnel gateway software. There is no requirement for container or Kubernetes expertise to make use of the new tools.
  • The new deployment methods provide the following benefits:
    • Deploy multiple Tunnel servers at one time.
    • Increased support and flexibility for the host operating system, beyond RHEL 7.
    • Simplified package dependencies on the host.
    • Improved diagnostic tools for monitoring your Tunnel deployment.


Sign up or LogIn [HERE] to get access to the latest Beta versions.


April Software Releases  

System

Component

Release

Announcement

Release Date

WindowsTunnel Win1024.01Release Notes01.04.24
iOSContent24.02.1Release Notes03.04.24
AndroidContent24.02.1Release Notes03.04.24
macOSHub24.01.1Release Notes03.04.24
LinuxHub24.03Release Notes08.04.24
BackendAssist Installer24.03Release Notes10.04.24
AndroidAssist24.03Release Notes10.04.24
WindowsAssist24.03Release Notes10.04.24
macOSAssist24.03Release Notes10.04.23
LinuxAssist24.03Release Notes10.04.24
BackendWS1 Intelligence24.04.08Release Notes05.04.24










 

Patch & Seed Script Updates Week 15-24


 

 

 

 

  • Workspace ONE UEM 23.10
    • Patch Level: 23.10.0.10
    • AMST-38952: Windows BIOS profile missing custom BIOS Attributes after saving.

    • LUEM-835 Latest Hub version from server should contain build version.

    • AMST-38933: Reduce unnecessary calls between UEM and OEM Provisioning Service.

    • ARES-28244: When we add two or more Geofencing locations to the profile, only one Geo location displays in UI.

    • AMST-40955: Unable to save iOS SDK profiles.

    • AMST-40972: Profile with multiple Credential payloads is failing while adding new version.

    • MACOS-4368: Environment unable to automatically install Intelligent Hub macOS application.

    • RUGG-12568: Create additional logging for Smart Group removal flows.

    • FS-5031: Cannot use negative integers in WorkFlow condition checks.

    • CMCM-190922 Localization blocks upload of managed content.

    • https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2310/rn/vmware-workspace-one-uem-2310-release-notes/index.html#Resolved%20Issues
    • Last Update: CW14


  • Workspace ONE UEM 24.02
    • Patch Level: 24.2.0.2
    • AAPP-17107: DST Cutover for is_roaming and SubscriberCarrierNetwork in ServiceSubscription.

    • AAPP-17214: iOS Hub repeatedly prompts to update.

    • AMST-40984: Profile sample is not getting updated until query.

    • ARES-27829: "EVALUATED_DEVICES_LIST" and "PROFILE_EVALUATED_DEVICE_LIST" API call throwing error in response.

    • ARES-26772: Status tool tip logic not updated with Gumdrop response.

    • ARES-28471 Hide the export button in DLV screens of Apps / Profile until the functionality is complete.

    • ARES-28613: Fix localization issue in P2P chart.

    • ARES-28550: Excluded tab And device list counts issue.

    • ARES-28511: Installed count Exceeds Assigned count in Apps and Profiles.

    • ARES-28430: Implement Force Check-in action for Apps and Profiles deployment tracking.

    • ARES-28611: App details page is crashing for apps that are workflow assigned.

    • ARES-28558 : Profile/Apps tab does not show all profiles/apps.

    • ARES-28583: Remove assigned configuration column for public apps.

    • ARES-28574: Identifier missing from sample causing the entire sample to be dropped for mobile platforms.

    • ARES-27948: Assignment Source filter redirection is not working.

    • ARES-28470: DT view rendering issue for child Organization Groups admins with apps deployed from parent Organization Group.

    • ARES-28763 Profiles tab crashes while making call to RMS.

    • ARES-28775: On adding exclusion profile DT assigned count shown is incorrect.

    • CRSVC-47567: Deleted stale devices not getting handled from migration status table.

    • CRSVC-47525: Resources API throws exception when multiple actions present for same resource.

    • CRSVC-47813: Compliance-DSM does not honor current occurrence field for compliance action evaluation.

    • CRSVC-47774: Sample failure updates to DeviceMigration table failing with exception.

    • CRSVC-47845: Troubleshooting tab errors out on specific device.

    • CRSVC-46772: Only remove Noop overrides if all policies with resource based actions have been evaluated.

    • CRSVC-47881: DeviceStateCleaup Job trigger state is paused.

    • CRSVC-47935: Trigger offline check-in flow in DSM on CP while dual read mode is activated.

    • ENRL-4193: Terms of Use acceptance failure on device check-out.

    • FCA-207458: Deactivate device List View and Global Search in Mod Stack.

    • FCA-207510: Available OS updates not listed on the Device Details summary page.

    • FCA-207537: Summary page broken for macOS device.

    • FS-5410: Device State Sample processing failure during workflows.

    • MACOS-4353: Scheduled samples should only be processed on Native check-in not for Hub.

    • MACOS-4016: Fix security segment disk_encryption data mismatch.

    • PPAT-16512: Deactivate multiple Tunnel Gateway in Tunnel configuration.

    • RUGG-12972: Remove application action returned from PRM for provisioning apps after mod enablement.

    • https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2402/rn/vmware-workspace-one-uem-2402-release-notes/index.html
    • Last Update: CW15

Comments