Service – Week 26-2021 Workspace ONE Updates

Important Releases and KB Updates

  • Register Now for VMworld 2021
    • ONLINE AROUND THE GLOBE, 6-7 Oktober 2021
    • With thousands of peers from around the globe, you’ll explore how to:
      • Deliver modern apps and secure them
      • Manage clouds in any environment
      • Seamlessly support an anywhere workspace 
      • Accelerate business innovation from all your apps in a multi-cloud world
    • General Pass for free – Tech+ Pass $299 / 4 Credits
  • Device’s compliance and management status not updating in Azure when using Microsoft Conditional Access feature (84312)
    • The iOS and Android devices are not reporting the compliance and management status to the Azure portal for environments leveraging the Microsoft Conditional Access feature. You see the ‘Unable to sync Azure services. Please try again.’ error when clicking on ‘Sync’ under Groups & Settings > All Settings System > Enterprise Integration > Directory Service.
    • Devices failing to update the compliance status and management status to Azure will throw an error in verbosed ‘AW.IntegrationService.log’ that is found under console server.
    • Microsoft has been responding to customer requests to provide finer-grained permissions and roles in the Azure Active directory. As part of the effort, the team reviewed the delegated and application permissions for the endpoints. It will require one of the four permissions for an API call that ISV integrated solutions often use. 
    • VMware updated the ‘Workspace ONE Conditional Access’ multi-tenant app to include the new permission. 
      • Microsoft Graph API permission – Application.Read.All 
    • Microsoft rolled out a hotfix for any other affected customers, which finished deploying at 5:20 PST on 6/15.
    • To add further resiliency to this integration, Microsoft provided VMware with guidance on how to move to the newer ‘/serviceEndPoint’ APIs (graph.microsoft.com) for which Workspace ONE Conditional Access multi-tenant app already has the Microsoft Graph permission.
    • Further information in KB: https://kb.vmware.com/s/article/84312?lang=en_US
  • ESC-26736 – Android Permissions Profile installation may delay enrollment (83773)
    • When install-time permissions are specified in an Android Permissions Profile, users may see:
      • Enrollment of Android devices is delayed significantly. Android Intelligent Hub may display “Please wait while we apply enterprise settings” screen for an unexpectedly long time. As a result, installation of applications and other profiles is also delayed at time of enrollment.
      • Installation of Permissions Profile after enrollment takes considerably longer than expected.
    • This issue can only occur if the Permissions Profile:
      1. Includes Exceptions for specific applications, OR
      2. Was custom-built for Internal and/or System applications. See Grant Permissions to Android Internal and System Apps (78590)
    • Cause: Most permissions for Android applications are either runtime or install-time. For more information, see Google’s Permission Overview developer article.
    • We are investigating this issue and will keep this article updated as we continue.
    • As a short-term fix, you may create a new Permissions Profile where you remove all known install-time permissions. Doing so will require building a custom Permissions Profile as is usually done for Internal and System apps. See Grant Permissions to Android Internal and System Apps (78590).
    • Further information in KB: https://kb.vmware.com/s/article/83773?lang=en_US
  • Scoped Storage Affecting Third Party Custom Attributes on Android 11 (84306)
    • On Android Work Managed devices, third-party or customer-developed apps can create XML files which contain custom key-value pairs (custom attributes).  When these XML files are placed in a specific folder on the device, Workspace ONE Intelligent Hub will automatically collect and report these attributes to the console. The folder where these files are currently located is /sdcard/Android/data/com.airwatch.androidagent/files/attributes/.
    • This particular feature does not work for Android 11 due to the new file storage restrictions enforced as part of Scoped Storage changes.
    • On Android 11, the /Android/data/ directory is restricted, which means no apps can access files within this directory, unless they are owned by that application.  Because of that limitation, 3rd party apps are no longer able to drop the XML files into the above folder to be consumed and reported by Hub.
    • Workaround: The admin can use a File/Action in Product Provisioning to get around the storage restriction.
    • More information in KB: https://kb.vmware.com/s/article/84306?lang=en_US
  • The set device language changes upon applying a Restrictions profile on Samsung devices (84260)
    • On a Work Managed Samsung device, if the device language is set to a non-default language (example: Catala) upon applying a Restrictions profile, the language of the device reverts to the default language (example: English, French, Spanish etc.) and the non-default language will be removed from the list of available languages on the device under Settings > General Management > Language
    • This behavior has been identified as bug with Samsung.
      • The behavior occurs only when the Samsung Knox restriction ‘Allow Developer Options’ is disabled in the Restrictions profile
      • The behavior does not occur when the set language is one of the default languages on the device
    • We have informed Samsung of this issue and the fix will be addressed with a firmware release from Samsung. This article will be updated once we confirm the resolution.
    • More information in KB: https://kb.vmware.com/s/article/84260?lang=en_US
  • Older PPKGs incompatible with Windows 10 v2004+ (84395)
    • Devices running Windows 10 v2004+  cannot be provisioned using the Drop Ship Provisioning (Offline) process using older PPKGs. Older PPKGs cause a reboot loop during the provisioning process.
    • PPKGs generated using the Factory Provisioning Service v2011.1 and older are not compatible with Windows 10 v2004+. Devices that attempt to apply older PPKGs run into a reboot loop and do not complete provisioning.
    • This issue also applies when attempting to restore a device to factory settings after upgrading to Windows 10 v2004+, since the original PPKG is backed up to the folder location: C:\Recovery\Customizations. The Enterprise Reset & Device Reset actions will also attempt to reapply the backup PPKG and will cause the device to enter a reboot loop.
    • VMware has released Factory Provisioning Service v2011.02 to resolve this issue. SaaS customers do not need to take any action to update their service, since the hosted service will be upgraded automatically. On-premises customers can download the installer from My Workspace ONE to update the service in their environment.
    • KB-Reference: https://kb.vmware.com/s/article/84395?lang=en_US
  • Updating a System Extension profile version on macOS 11 cause some extensions to unload (84403)
    • Updating the version of a profile with a System Extension payload may cause the corresponding extensions to unload on macOS 11.
    • Applications using System Extensions may not properly work until a restart is performed. The reboot will reload the System Extension.
    • VMware is actively working with Apple to determine the appropriate resolution
    • Users can remediate unloaded extensions by restarting the Mac.
      To prevent the extensions from unloading, do not make any changes or profile version increases to existing System Extension profile configurations. If you need to add an additional extension, instead create a new profile with a new System Extension payload.
    • KB-Reference: https://kb.vmware.com/s/article/84403?lang=en_US
  • Lookout Causes Intermittent Connectivity Issues for Android Tunnel (84320)
    • On Android devices, the Workspace ONE Tunnel client is connected to Tunnel VPN, but users see intermittent issues when connecting to internal resources. For example, user may intermittently see failures when browsing to internal sites.
    • This issue covered in this article only addresses issues on Android devices where the Lookout Safe Browsing VPN application is installed and enabled in “Always On” mode. To check if this is enabled on a device:
      • On the Android device, open Settings
      • Open the VPN Settings sub-menu
      • Next to Lookout, tap on the gear icon
      • Check if “Always On” is enabled
    • The Lookout Safe Browsing VPN application may be preinstalled on Android devices. It enables Safe Browsing by acting as a VPN client. If “Always On” is enabled for Lookout on a device that uses Workspace ONE Tunnel, Lookout may intermittently interfere with Tunnel VPN.
    • Disable “Always On” for Lookout Safe Browsing in the VPN Settings menu of the device. To find this setting, please see steps in the Symptoms section.
    • KB-Reference: https://kb.vmware.com/s/article/84320?lang=en_US
  • [Resolved] ISDK-174593: SDK applications that use Tunnel (Web, HUB and 3rd party applications) are crashing on iOS 14.5 Beta (82695)
    • We have identified that SDK applications that use SDK Tunnelling are crashing on iOS 14.5 beta, the crash is observed on certain devices, potentially newer devices and architectures only. This is related to the proxy portion of our Network library.
    • We have identified that SDK application that uses SDK Tunnelling is crashing on iOS 14.5 beta, the crash is observed on certain devices, potentially newer devices and architectures only. This is related to the proxy portion of our Network library.
    • All SDK application that uses SDK Tunnelling will be affected.
    • Please upgrade all your SDK applications using SDK Tunnelling to the latest Swift SDK 21.2
    • KB-Reference: https://kb.vmware.com/s/article/82695?lang=en_US
  • Week 26 Software Updates
  • Component: ENS v2 OnPrem
  • New Release: 21.06
  • Changes:
    • Performance improvements
  • Release Date: 30.06.21
  • Release Notes
  • Component: WS1 Intelligence
  • New Release: 21.06.23
  • Changes:
    • We’ve added App Hang trends to the Apps dashboard in our DEEM Solution.
  • Release Date: 25.06.21
  • Release Notes
  • Component: Factory Provisioning Service
  • New Release: 20.11.2
  • Changes:
    • PPKG triggers boot loop on Windows 2004+
  • Release Date: 01.07.21
  • Release Notes
  • Component: WS1 Access SaaS
  • New Release: June 2021
  • Changes:
    • Magic Link Feature Is Configured from the Workspace ONE Access ConsoleYou can now configure the magic link feature used for day zero onboarding from the Workspace ONE Access console. Creating this API is no longer required.
  • Release Date: 29.06.21
  • Release Notes
  • Component: WS1 Hub Services SaaS
  • New Release: June 2021
  • Changes:
    • Enable Dark Mode for Workspace ONE Intelligent Hub
      • Admins can enable dark mode on the Branding page of the Hub Services console for the Workspace ONE Intelligent Hub app. When dark mode is turned on, admins can also define a dark mode theme by uploading a company logo and selecting an accent color suitable for dark mode. 
  • Release Date: 29.06.21
  • Release Notes
  • Component: WS1 Boxer for iOS
  • New Release: 21.05
  • Changes:
    • View and set high priority email:
      • Pre-req: Exchange server – On Premises or Office 365
      • When composing, replying, or forwarding an email, users will be able to set high priority flag
    • High priority flag is displayed in email list view and email detail view
  • Release Date: 28.06.21
  • Release Notes
  • Component: WS1 Content for iOS
  • New Release: 21.06
  • Changes:
    • Updates to activities section badging
    • Updates to save file workflow
      • User will have option to add new file name and select the repository.
      • User will not be able to save the file to non-writable repository.
    • User will be able to delete, rename the files available on the OAuth SharePoint and OneDrive for Business cloud repositories on upcoming supported UEM console versions if the administrator allows it
    • Updated PDF and Microsoft Office Viewers
  • Release Date: 28.06.21
  • Release Notes
  • Component: WS1 Tunnel for iOS
  • New Release: 21.04.0
  • Changes:
    • Implemented a new, consolidated user experience.
    • Added the ability to view the configured applications directly within the Tunnel client. You can enable this feature by adding the key-value pair DisplayAppAccessList = true to the application configuration while pushing the application.
  • Release Date: 01.07.21
  • Release Notes
  • Component: WS1 Intelligent Hub for Android
  • New Release: 21.06
  • Changes:
    • Send sample to Workspace ONE UEM Console on change of Passcode stateWhen the user of an Android device changes their passcode, Intelligent Hub will now trigger a new sample to report the status to the Workspace ONE UEM Console to ensure the most up to date information is available for Compliance or Reporting.
    • App Size and Version for mobile appsIntroducing the ability to see the size and version of mobile apps available in the list view and overflow menu.
    • NOTE: Workspace ONE UEM Console 2102+ are required for this feature.
  • Release Date: 01.07.21
  • Release Notes
  • Component: WS1 Web for Android
  • New Release: 21.06
  • Changes:
    • Bug fixes and improvements.
  • Release Date: 28.06.21
  • Release Notes
  • Component: WS1 Launcher for Android
  • New Release: 21.06
  • Changes:
    • Workspace ONE Intelligence support
      • Admins can now track the usage of Launcher through Workspace ONE Intelligence. 
      • Admins can track user count and metrics related to check-in check-out. This includes different CICO. 
      • We will continue to add more metrics to track through WS1 Intelligence, giving admins a complete view of their device fleet.
    • You can now use weblinks to deep link into Hub features like the Apps and People Tab. 
  • Release Date: 29.06.21
  • Release Notes
  • Component: WS1 Intelligent Hub for Windows 10
  • New Release: 21.05.2
  • Changes:
    • In this release, we’ve made a few updates containing general quality and performance improvements with no new features.
  • Release Date: 28.06.21
  • Release Notes
  • Component: Mac OS Admin Assistant
  • New Release: 3.0.1
  • Changes:
    • In this release, we’ve made a few updates containing general quality and performance improvements with no new features.
  • Release Date: 25.06.21
  • Release Notes
  • Component: Workspace ONE UEM
  • New Release: 20.11.0.31 + 32
  • Changes:
    • Patch Release
  • Release Date: 29.06.21
  • Release Notes
  • Component: Workspace ONE UEM
  • New Release: 21.2.0.15
  • Changes:
    • Patch Release
  • Release Date: 29.06.21
  • Release Notes

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: