Upcoming EUC Events
Event | Link and description | Speakers | Date |
EUC TechInsights - Unlock the Possibilities of Android Management with Workspace ONE | Registration link: https://broadcom.zoom. Unlock the Possibilities of Android Management with Workspace ONE Join us for our monthly EUC TechInsights webinar, “Unlock the Possibilities of Android Management with Workspace ONE,” where we delve into advanced topics such as Android management, enrollment options, and device management modes. Learn how to enhance productivity with Workspace ONE’s powerful features like OEM Config, remote support, and OS update management. This webinar will equip you with the knowledge to optimize your Android device management strategy using Workspace ONE. | Patrick Zoeller | 25th of June |
VMware Digital Workspace Virtual Customer Success Roundtable | Next VMware Digital Workspace Virtual Customer Success Roundtable Coming Soon! | ||
VMUG | Watch On-Demand webcasts here. Register for upcoming live webcasts here. Register for Regional VMUG events here. | ||
End User Computing Webinars | Sign up for upcoming webcasts and watch VMware On-Demand webcasts here. |
Release Updates Week 24-24:
Apple Business Manager and Apple School Manager:
- Domain Capture and Account Transfer: Organizations can now ensure all Apple Accounts using their domain are managed. Users can transfer their personal accounts to Managed Apple Accounts or rename them to free up the domain.
- Activation Lock Management: Admins can now turn off Activation Lock for organization-owned devices without needing AppleCare support.
- Support for Apple Watch and Apple Vision Pro: These devices can now be managed within Apple Business Manager and Apple School Manager.
- SIS Synchronization Updates: Improved synchronization with additional vendors and options to prevent duplicate entries during data import.
Device Management:
- Safari Extensions Management: Organizations can now manage Safari extensions on supervised devices.
- Software Update Management: Declarative device management replaces MDM profiles for software updates, offering more resilient management.
- Beta Software Management: Organizations can now remotely enroll devices into beta programs and manage beta software installations.
- Apps and Books API: Enhanced API capabilities for retrieving information about apps and books.
- Provisioning and Managing Users: New APIs for enterprise app developers to automate tasks like provisioning profile generation.
New Hardware Requirements for Managed Device Attestation:
- Attestations will be issued only to devices meeting specific hardware requirements (A11 Bionic chip or later for iPhone, iPad, Apple TV; Apple silicon for Mac).
Security Improvements:
- Push Notifications: CSRs for Apple Push Notification service must now be signed with the SHA2 algorithm.
macOS Management:
- Passkey and Hardware Security Key Support: Support during enrollment for ASWebAuthenticationSession.
- Platform Single Sign-On: Extended to require IdP authentication across various macOS security points.
- External and Network Storage Access: New configuration to manage external or network storage access.
- Local Network Access: Apps and agents must now request permission to interact with local devices.
- Virtual Machine Updates: iCloud sign-in and Erase All Contents and Settings are now supported on macOS virtual machines.
iOS and iPadOS Management:
- Hiding and Locking Apps: New options to require authentication to open apps and hide them from the Home Screen.
- In-House App Installations: Device restart is now required to complete the trust of provisioning profiles for manually installed apps.
- eSIM Updates: New restrictions to prevent eSIM removal during device erase and control eSIM transfers.
tvOS Management:
- Return to Service: New management capabilities for Apple TV devices.
visionOS Management:
- Automated Device Enrollment for Apple Vision Pro: Enhanced enrollment capabilities.
Apple Configurator for Mac Updates:
- New actions and improved status reporting for Shortcuts.
Education-Specific Updates:
- Calculator on iPad: New addition.
- Multiapp Assessment Mode for iPad: Improved capabilities for educational assessments.
- Schoolwork 3.0: New features for the Classroom app.
- Support for Entra ID MFA as additional authentication method
Workspace ONE Access now enables integration with Microsoft Entra ID MFA as an additional authentication method. Users can log in to Workspace ONE Access using their existing authentication methods, and then be prompted for the Entra ID MFA without an additional Entra ID login prompt. This feature simplifies the user experience while adding the feature-rich Entra MFA capabilities to Workspace ONE Access authentication.
- Device Enrollment Terms of Use support in Workspace ONE Intelligent Hub
Workspace ONE Intelligent Hub app users can now view and act on updates to the Terms of Use (TOU) for any of their enrolled devices directly within the Workspace ONE Intelligent Hub app. Previously, this functionality was only available through the Self-Service Portal (SSP), requiring users to log in separately, often delaying critical actions on TOU updates. By integrating this feature into the Intelligent Hub app, we streamline it into the regular employee workflow, allowing for more immediate responses to TOU updates.
This functionality is currently available on Hub Web and Windows.
- Application Terms of Use support in Workspace ONE Intelligent Hub
Users of the Hub native applications (i.e. Hub iOS, Android and Windows) can now view and act on updates to the Terms of Use (TOU) associated with any applications installed on their devices. Previously, Intelligent Hub prompted users for TOU action (acceptance or rejection) only during the initial app installation via the Hub catalog, with no way to address subsequent TOU updates. This new feature enables users to stay updated and respond to TOU changes at any time.
This functionality is currently available on Windows on all Intelligent Hub app versions. For iOS and Android, please refer to the iOS and Android Hub release notes for the Intelligent Hub version which adds support for this feature.
NOTE: This was the last significant parity gap between the Hub Services app catalog and the legacy UEM app catalog, which is already scheduled for end-of-life See KB article 95774
- Increase in limit for Employee Self-Service Helpful Links from 10 to 20
Hub Services admins can now configure up to 20 Helpful Links in the Employee Self-Service section of the Hub admin console, doubling the previous limit of 10 links. This increased capacity allows admins (UEM and Horizon) to provide more self-service content, such as knowledge bases (KBs), for end users in the Intelligent Hub Self-Support tab.
- Device Enrollment Terms of Use support in Workspace ONE Intelligent Hub
Workspace ONE Intelligent Hub app users can now view and act on updates to the Terms of Use (TOU) for any of their enrolled devices directly within the Intelligent Hub app. Previously, this functionality was only available through the Self-Service Portal (SSP), requiring users to log in separately, often delaying critical actions on TOU updates. By integrating this feature into the Intelligent Hub app, we streamline it into the regular employee workflow, allowing for more immediate responses to TOU updates.
This functionality is currently available on Hub Web and Windows. Workspace ONE UEM version 24.2.0.8 and later supports this feature.
- Application Terms of Use support in Workspace ONE Intelligent Hub
Users of the Hub native applications (i.e. Hub iOS, Android and Windows) can now view and act on updates to the Terms of Use (TOU) associated with any applications installed on their devices. Previously, Intelligent Hub prompted users for TOU action (acceptance or rejection) only during the initial app installation via the Hub catalog, with no way to address subsequent TOU updates. This new feature enables users to stay updated and respond to TOU changes at any time.
This functionality is currently available on Windows on all Intelligent Hub app versions. For iOS and Android, please refer to the iOS and Android Hub release notes for the Intelligent Hub version which adds support for this feature.
Workspace ONE UEM version 24.2.0.8 and later supports this feature.
NOTE: This was the last significant parity gap between the Hub Services app catalog and the legacy UEM app catalog, which is already scheduled for end-of-life See KB article 95774
- Increase in limit for Workspace ONE Intelligent Hub Employee Self-Service Helpful Links from 10 to 20
Hub Services admins can now configure up to 20 Helpful Links in the Employee Self-Service section of the Hub admin console, doubling the previous limit of 10 links. This increased capacity allows admins (UEM and Horizon) to provide more self-service content, such as knowledge bases (KBs), for end users in the Intelligent Hub Self-Support tab.
Workspace ONE Tunnel for iOS 24.05
- In this release, we have made a few updates containing general quality and performance improvements with no new features.
- Introducing Full-Device Tunnel mode for the iOS Tunnel client on MDM enrolled devices.
- This is in addition to existing support for Per-App Tunnel mode.
- See ‘How to configure the iOS Tunnel MDM Profile for Full-Device Tunnel mode’ for setup instructions.
Workspace ONE Tunnel for Android 24.05 (staged)
- New workflow to allow Tunnel to be exempt from battery optimization.
Workspace ONE Content for iOS 24.06
- Show file and folder path in search results
- Bug fixes
VMware EUC Security Advisories:
--No new Security advisories this week--
EUC UX Research Opportunities:
- Our goal is to gather insight into user behaviors, motivations, and goals, so we can use those insights to inform and strengthen product and design decisions.
- Interested in giving your opinion and making your voice heard? Check out what’s available!
Workspace One: Filter Redesign
- About: The placement of filters and where they’re located on the page is getting refreshed.
- What: Play with a clickable prototype on your own time in Maze, a user testing tool. It will record your audio and computer screen while you tell us what you think.
- SIGN UP HERE
KB Highlights & Announcements Week 24-24:
Multi-Factor Authentication for Workspace ONE Mobile Threat Defense Tenants (6000034)
- Multi-Factor Authentication (MFA) is now supported for local administrators accessing Workspace ONE Mobile Threat Defense tenants. MFA applies to Mobile Threat Defense console local admin accounts only. External accounts authenticated via an Identity Provider (IDP) use the IDP provided MFA. Starting June 17, 2024, MFA will be a requirement for all local administrators on all Workspace ONE Mobile Threat Defense tenants.
- MFA augments password authentication by adding one-time passcodes generated by a mobile authenticator app. All local administrators accessing Workspace ONE Mobile Threat Defense tenants will be required to set up MFA in order to login starting from June 17, 2024. Any authenticator that generates standard time-based one-time passwords (TOTP) codes such as Hub Verify or Google Authenticator can be used. MFA applies to Mobile Threat Defense console local admin accounts only and not external accounts authenticated via an Identity Provider (IDP).
Upcoming changes to APNs for Applications for On-Premises Workspace ONE UEM (91116)
- Workspace ONE Productivity apps on iOS receive push notifications using APNs through Workspace ONE UEM. The certificates necessary to deliver these notifications need to be renewed every year that requires administrators of On-Premises environments to run a database script provided by VMware, before the expiry to avoid any disruption
Workspace ONE Productivity Applications that are part of this process flow are:
- Workspace ONE Intelligent Hub
- Workspace ONE Boxer
- Workspace ONE Content
- Workspace ONE Web
APNs for Application certificate renewal for On Premise environments (50121242)
- Please review the instructions below to learn what actions are required when the Apple Push Notification service (APNs) for Application certificate expires in an On Premise environment.
- APNs for Application is the certificate that you are required to renew so that all enterprise applications continue to communicate with the Workspace ONE UEM Console.
If the APNs for Application is not renewed, the existing applications on the devices will lose communication with Workspace ONE. The applications will not function on the device and will lose communication with the console. This means the applications will not receive new commands and any new changes made in the console.
In order to prevent downtime associated with the iOS versions of Boxer, Content, Web, and Intelligent Hub, all On Premise customers who are utilizing these applications must execute a script on their Workspace ONE database.
This APNs for Application certificate needs to be renewed every year and the script is available in the My Workspace ONE portal.
Multi Tab Kiosk Mode Enhancements (6000033)
- In Workspace ONE Web 24.06 for iOS and Android, there are enhancements been made in Multi tab kiosk mode. As part of this, URL bar is non-editable and Scan QR code is not accessible by default. This enhancement advances security feature of multi tab kiosk mode which is in line with Single tab kiosk mode. If customers want to enable URL bar and Scan QR code in Multi tab kiosk mode, they can achieve it by enabling KVP in the UEM. There are no changes in Single tab kiosk mode functionality.
List of Public Portal URLs after VMware EUC transition
Service | Old Link | New Link |
CustomerConnect | ||
CSP | ||
Documentation | ||
KB | ||
Techzone | ||
MyLearn | ||
MyWorkspaceONE | ||
Horizon Launcher | ||
Horizon ControlPlane | tbd | |
EUC Beta Portal | tbd | |
Aha! Feature Requests | ||
Status WorkspaceONE | ||
Omnissa PartnerConnect | ||
Product Lifecycle Matrix | docs.omnissa.com/bundle/ | |
Omnissa Community Forum |
| |
Developer Portal | ||
ConfigMax
|
| |
Interoperability Matrix |
High Priority KBs:
- System Migration Changes Impacting Workspace ONE and Horizon Customers (97841)
The end-user computing (EUC) division of Broadcom will transition from VMware-hosted systems to EUC-hosted systems in April and May 2024. This transition is part of our preparation to become a standalone entity following the pending acquisition of EUC by KKR. - End of Life Announcement for the Legacy App Catalog in Workspace ONE UEM for SaaS UEM Customers (95774)
We are announcing the End of Life (EOL) for the UEM Legacy Catalog for UEM SaaS customers only at this time. If you are a On-Premises UEM Customer, this notice does not impact you at this time, further communications will follow for timelines on migrating On-Premises UEM Customers to the Intelligent Hub App Catalog. - Workspace ONE UEM - Updated requirements for on-premise cumulative patches (94706)
The base GA version for current Workspace ONE UEM releases is being revised through updated installers. On-premise customers will need to consume a revised installer for a given major version before any future cumulative patches can be deployed for that major version. These revised installers are required to address compatibility issues with regular cumulative patches. - Introducing Workspace ONE (WS1) UEM Next-Gen SaaS
VMware is excited to announce that the resource management & tracking improvements, the first major feature-based milestone in the Workspace ONE UEM Modernization Journey, is now available for customer testing. These improvements will be enabled in limited testing environments (CN135) starting on Thursday August 24, 2023.
Recently updated or added KBs (Links)
- Multi-Factor Authentication for Workspace ONE Mobile Threat Defense Tenants (6000034)
- Upcoming changes to APNs for Applications for On-Premises Workspace ONE UEM (91116)
- APNs for Application certificate renewal for On Premise environments (50121242)
- How to configure the iOS Tunnel MDM Profile for Full-Device Tunnel mode (6000032)
- Multi Tab Kiosk Mode Enhancements (6000033)
- Engaging Workspace ONE
Professional Services (50104664) - EUC Issue Type Definitions and Top Issues (6000031)
- [AGGL-16565] HTTP 400 error from Google during Android Enterprise registration (6000030)
- EUC Support Phone Numbers (6000004)
- Logoff after disconnect setting for published desktop is not working as expected in certain scenarios. (88417)
- VMware Horizon combined offerings with vSphere and vSAN will continue post divestiture (14804)
Digital Workspace Techzone, Blog and YouTube Updates
- Securing your Windows PCs against Recall with Workspace ONE UEM
- Inventorying Workspace ONE Devices for Windows 10 End of Life
- Windows 11 Readiness Operational Tutorial
- Guided Tour: Sensors for Collecting Data from Windows Devices
3rd Party Blog Updates & Industry News
- Android Enterprise Blog: How we’re making Android Enterprise signup and access to Google services better
- Rorymon.com: Apple Announces New AI Features! New VMware Deals! Patch Tuesday News!
- msandbu.org: What does the future workspace look like?
June Software Releases
System | Component | Release | Announcement | Release Date |
iOS | Hub | 24.04 | 03.06.24 | |
Android | Hub | 24.04 | 04.06.24 | |
Windows | Tunnel Win10 | 24.05 | 06.06.24 | |
Horizon | Horizon Cloud Service Next Gen | May 30 | 30.05.24 | |
Backend | WS1 Intelligence | 24.05.20 | 04.06.24 | |
iOS | Tunnel | 24.05 | 11.06.24 | |
Android | Tunnel | 24.05 | staged | |
iOS | Content | 24.06 | 13.06.24 |
Patch & Seed Script Updates Week 24-24
- Most recent update: Android 15
- Last Update: CW24
Seed Script for latest Device Model Information
- Seed Script for latest Device Model Information Seed Script to support new MacBook Air M3 model Mac15,2 models
- Last update: CW11
- Patch Level 22.12.0.46
- UM-8939 - VIS to UEM unlink is not removing the UEM user from the UEM group.
- Last Update: CW22
- Patch Level 23.02.0.45
- UM-8940 - VIS to UEM unlink is not removing the UEM user from the UEM group.
- CRSVC-46414 - CellTrust integration was not working.
- AMST-41258 - Arm64 hub was not getting published to device.
- Last Update: CW23
- Patch Level 23.06.0.33
- LUEM-858 - All the Linux devices get the same lookup value for sensors.
- AGGL-16970 - Redirect to Google in EMM registration fails.
- AAPP-17407 - Refreshing sToken for a VPP v2 enabled OGs, resets migration flag.
- AAPP-17404 - Fix duplicate asset identifiers in an asset management V2 API call.
- ARES-27837 - Add FedRamp system code for identifying FedRamp customers
- Last Update: CW24
- Patch Level: 23.10.0.19
- UM-8842 - Unable to view User Groups for certain User Accounts regardless of the admin role.
- FCA-207737 - Physical memory values missing in Workspace ONE UEM devices or search API call.
- AMST-40244 - Actual file version is not updating when adding new version for Windows app.
- AGGL-16985 - Not able to publish public app with SG having devices.
- AAPP-17051 - VPP failures for asset management due to duplicate assets in request to V2 endpoints.
- Last Update: CW24
- Patch Level: 24.2.0.6
- AGGL-16822: Capability enrichment sample failing post the patch update in environment to update enterprise version.
- AGGL-16827: Android Device delete intermittently takes 4 hours to wipe the device.
- FCA-207587: DLV tooltip for friendly name is broken.
- FCA-207603: Device List view Export is not producing export to download.
- AMST-40616: Device state to capture new status for pause.
- AMST-40654: Pause status to be displayed in List view.
- AMST-41111: Bulk Management settings throwing error.
- FS-5414: Matches Found count is incorrect whenever adding/removing Application Versions/Names in Conditions.
- Last Update: CW18
Comments
Post a Comment