Service – Week 09-2022 Workspace ONE Updates

Important KB Articles and Release Updates

Please note: KBs may get updated after being referenced here. Please always follow the link to the original post in kb.vmware.com

  • Announcing VMware Workspace ONE Productivity Apps for all Workspace ONE Customers (87757)
  • VMware is excited to announce that the following VMware Workspace ONE Productivity Apps: VMware Boxer, Content, Notebook, Web and PIV-D are now included as part of Workspace ONE and available for all Workspace ONE customers.
  • What does this mean to me as a customer? 
    All existing customers who purchased productivity apps as a separate add-on will not need to renew them since their entitlement to these apps will be included as part of Workspace ONE at time of renewal.  
  • What types of deployments can use the Productivity Apps? 
    All Workspace ONE customers, SaaS or on-prem are entitled to Workspace ONE Boxer, Content, Web, Notebook and PIV-D as complimentary downloads from the Apple or Google Play stores. 
  • What is the benefit of using the Productivity Apps? 
    Our productivity apps, VMware Workspace ONE Boxer, Content, Notebook, Web and PIV-D empower users to get more done faster from anywhere on their mobile device. Visit our website here to learn how our Productivity Apps improve the way employees work on mobile.
  • How secure are the Productivity Apps? 
    We offer end-to-end data protection with control points at the user, device, app and network levels to help meet the security requirements of corporate-owned and BYOD use cases. 
  • How do we get started? 
    For information on how to set up, configure and get started from the Workspace ONE UEM Console, visit our docs site here.  
  • Who can I contact if I have a question?  
    For questions or concerns, please contact your VMware representative. 
  • KB-Reference: https://kb.vmware.com/s/article/87757?lang=en_US
  • Workspace ONE UEM iOS 15.3.1 devices incorrectly reported (87691)
  • iOS devices being falsely detected the following upgrade to iOS 15.3.1 and detected in Workspace ONE UEM 21.11+
  • The problem appears to affect only this current version and has not been detected in earlier versions at this time.
  • This issue may have the following impact:
  • iOS version on UEM console may be displayed as lesser than 15.3.1
    Enrollment restrictions targeted for iOS versions lesser than 15.3.1 will also affect iOS devices that are updated and report the latest OS update in the information sample when the device reports this to UEM.
    Device policies restricted to iOS versions other than 15.3.1 will not get published to iOS devices and may have an adverse impact on device management criteria.
  • KB-Reference: https://kb.vmware.com/s/article/87691?lang=en_US
  • Workspace ONE UEM Windows Software Distribution Agent fails to install (87801)
  • On freshly enrolling a Windows device, Software Distribution Agent (SFD) may fail to install on the device, further preventing the ability to deliver applications to devices from the UEM console.
    • Windows devices that have the MSFT update KB5010415installed. This patch is available for Windows 10 version 20H2 and onwards. More details on KB5010415 here​​​​​​.
    • Devices with Windows version 21H2, which has KB5010415 built in.This behavior can occur on the following devices:
  • To identify a machine which is impacted by this issue, check the value of the Status attribute for the registry keys depending on the version of the SFD agent deployed (More details in KB).
  • Our product team has been engaged and is actively working to resolve the issue.
  • Note: Until a fix is made available for the SFD issue, we recommend not installing the Microsoft update KB5010415 on the devices.
  • More details in KB https://kb.vmware.com/s/article/87801?lang=en_US
  • Introducing new “Contains” operator with wildcard search in Workspace ONE Intelligence (87715)
  • In Workspace ONE Intelligence, the “Contains” operator performed prefix search in widget, automation preview and report preview. Wildcard search was not previously available.
  • The new “Contains” operator will support wildcard search for string data type to improve usability.
  • A new “Contains” operator has been added. The former “Contains” operator in Workspace ONE Intelligence will be rebranded to “Contains (deprecated)”.
  • The new “Contains” operator now supports wildcard search for string data type.
  • For any of your filters in widget, automation and report using “Contains (deprecated)”, please test and move to the new “Contains” operator for string data type, and use “Contains Any of” or “Contains All of” for collection data type. This will help avoid any potential interruptions in future.
  • KB-Reference: https://kb.vmware.com/s/article/87715?lang=en_US
  • Horizon users are intermittently disconnected while in session (87822)
  • Users working in applications or desktops are disconnected
  • The disconnects do not have a set interval that matches any timeout (exactly 8hrs for every user for instance, Horizon Connection Server logs duration of sessions at disconnect so this can be verified) 
  • Similar log lines are observed in the Unified Access Gateway (UAG) esmanager log:
Too many connections opened for session: 9a56910b-df55-43f9-8f43-eb91866bb89a, max channels allowed: 
  • This behavior occurs because the latest versions of Unified Access Gateway (UAG) have implemented a security feature that limits the number of connections from each client. Load Balancing features that reuse http sessions are no longer supported. Some examples include:
    • Multiplexing
    • F5 OneConnect
    • Any feature that reuses HTTP or TCP sessions
  • Disable multiplexing or any applicable feature on the load balancer that reuses sessions that are presented to the UAG appliances. Please consult your load balancer vendor for guidance on what features would reuse sessions in this manner.
  • KB-Reference: https://kb.vmware.com/s/article/87822?lang=en_US
  • RUGG-10598: Copying/Adding/Editing the provisioning profile can cause profile removal from devices. (87754)
  • When Admins are looking to add/copy/edit the provisioning profile on the Workspace ONE UEM console UI, the profile is being copied/saved to a different location (Devices > Profiles) resulting in the removal of the profile added/edited/copied on the devices.
  • Starting with version 21.09 of Workspace One UEM, making changes (add/copy/edit) of Provisioning profiles is causing the respective profiles on the devices to be removed.
  • Our Product team is working to address this issue in a timely manner. Please subscribe to this article to receive updates when they are available.
  • VMware recommends leveraging API calls rather than using the UI screen. The API calls in the following order to replicate the copy scenario. More detail is mentioned here.
    • GET : https://{{url}}/api/mdm/profiles/<Profile ID>POST : https://{{url}}/api/mdm/profiles/platforms/android/create
  • KB-Reference: https://kb.vmware.com/s/article/87754?lang=en_US
  • [VMSA Alert] Moderate Severity – VMSA-2022-0007 – VMware Tools for Windows update addresses an uncontrolled search path vulnerability (CVE-2022-22943)
  • VMSA-2022-0007 – VMware Tools for Windows update addresses an uncontrolled search path vulnerability (CVE-2022-22943)
  • Please see the advisory here: https://www.vmware.com/security/advisories/VMSA-2022-0007.html
  • Impacted Products: VMware Tools for Windows
  • Week 09 Software Updates
  • Component: Workspace ONE Intelligent Hub for Android
  • New Release: 22.02
  • Changes:
    • Improved performance for installing Wi-Fi configurations on Android 10+ devices  This uses an updated API and is primarily to improve the experience for customers with a very large number of profiles who will directly see improvement during enrollment.
    • Since this functionality is core to the product it should be noted if you are using WiFi profiles.
    • Bug Fixes
  • Release Date: 24.02.22 (Rollout halted at 25%)
  • Release Notes
  • Component: Workspace ONE SDK SWIFT for iOS
  • New Release: 22.2
  • Changes:
    • SDK-175321: Optional withdrawal of Copy/Paste encryption in Web based on SDK settings configuration
    • ISDK-175551: All references of SDK developer docs are changed from code.vmware.com to developer.vmware.com
    • ISDK-175775: User credentials are missing in the Hub application soon after creating the Face ID / Passcode on the shared devices
    • ISDK-175348: Fixed CICO 3rd party app flips to HUB when the device is offline when offline access is Disabled
  • Release Date: 28.02.22
  • Release Notes
  • Component: Workspace ONE PIV-D Manager for iOS
  • New Release: 21.09
  • Changes:
    • 1. Registered mode support for PIV-D
    • 2. Standalone Enrolment support for PIV-D
    • 3. Sharing the credentials from PIV-D via Persistent Token Extension
    • 4. Bug fixes and stability improvements
  • Release Date: 28.02.22
  • Release Notes
  • Component: Workspace ONE SDK for Android
  • New Release: 22.2
  • Changes:
    • SDK module for In-app update experience for Play store apps
    • Updated Kotlin version to 1.5.31
    • Updated SDK gradle to 7.0.2
    • Bug Fixes
  • Release Date: 02.03.22
  • Release Notes
  • Component: Workspace ONE Assist for Android
  • New Release: 22.03
  • Changes:
    • Introducing Assist Service application version 3.0 to support remote control on Android 12 devices
    • For further details please refer to the Release Notes
  • Release Date: 02.03.22
  • Release Notes
  • Component: Workspace ONE Assist for Windows
  • New Release: 22.03
  • Changes:
    • Improved reliability of Assist connection in attended mode
    • For further details please refer to the Release Notes 
  • Release Date: 02.03.22
  • Release Notes
  • Component: Workspace ONE Assist for macOS
  • New Release: 22.03
  • Changes:
    • Improved reliability of Assist connection in attended mode
    • Support for M1 macOS devices without the need to separately install Rosetta2
    • For further details please refer to the Release Notes 
  • Release Date: 02.03.22
  • Release Notes
  • Component: Workspace ONE Tunnel for iOS
  • New Release: 22.01
  • Changes:
    • General quality and performance improvements
  • Release Date: 02.03.22
  • Release Notes
  • Component: Workspace ONE Content for iOS
  • New Release: 22.02.1
  • Changes:
    • General quality and performance improvements
  • Release Date: 03.03.22
  • Release Notes
  • Component: Workspace ONE UEM
  • New Release: 21.8.0.39
  • Changes:
    • CRSVC-26362: Implement PasswordMigration scheduler Job
  • Release Date: 01.03.22
  • Release Notes
  • Component: Workspace ONE UEM
  • New Release: 20.11.0.43
  • Changes:
    • CRSVC-26683: The Trust Service log does not output even though the log level is changed to “verbose”.
    • CRSVC-26648: Update the Claim “org_location_group_id” to use customer OrganizationgroupId where Opt in happens instead of Global OrganizationgroupId
    • CRSVC-26362: Implement PasswordMigration scheduler Job
  • Release Date: 01.03.22
  • Release Notes
  • Component: Workspace ONE UEM
  • New Release: 21.2.0.32
  • Changes:
    • CRSVC-26362: Implement PasswordMigration scheduler Job
  • Release Date: 01.03.22
  • Release Notes
  • Component: Workspace ONE UEM
  • New Release: 21.5.0.45
  • Changes:
    • FCA-201546: Console login failing for directory admin account with error “Invalid credentials” in CN135 environment
    • FCA-201418: Unable to delete IOS device record for OG with APNS not configuredCRSVC-26918: Remove the index IX_DeviceExtendedProperties_RowVersion
    • CRSVC-26674: Optimization of the sp CoreAndDefaultAttributes_Update
    • CRSVC-26362: Implement PasswordMigration scheduler Job
    • AMST-35269: The Kiosk profile takes a longer time to install on the devices and sometimes days even though the device is checking in.
    • AMST-35262: Newly enrolled Windows 10 devices install x86 version of AppDeploymentAgent
    • AMST-35247: Delay in processing windows install/removal commands for apps & profiles
  • Release Date: 01.03.22
  • Release Notes
  • Component: Workspace ONE UEM
  • New Release: 21.9.0.24
  • Changes:
    • CRSVC-26590: Device Details – Time Windows – List shows incorrect schedule date.
    • CRSVC-27369: Increase the SMTP username limit from 64 to 255 characters.
    • AMST-35263: Delay in processing windows install/removal commands for apps & profiles.
    • CRSVC-26678: Optimization of the sp CoreAndDefaultAttributes_Update.
    • CRSVC-26919: Remove the index IX_DeviceExtendedProperties_RowVersion.
    • AMST-35205: DM and HUB having race condition causing enrollment issues.
    • RUGG-10703: Copy and Edit of the existing provisioning profile creates the profile copy under Devices > Profiles & Resources section.
  • Release Date: 01.03.22
  • Release Notes
  • Component: Workspace ONE UEM
  • New Release: 21.11.0.13
  • Changes:
  • AAPP-13367: Issues Removing Apple Education Profile from iPads.
    • CMCM-189603: CN1108- DB Contention issue with multiple calls to EnterpriseContent schema.
    • AMST-35270: The Kiosk profile takes a longer time to install on the devices and sometimes days even though the device is checking in.
    • AGGL-11415 [Passcode] Unable to send Clear Device/Work App Passcode in COPE.
    • CMSVC-16026: Hub services – Unable to find the smart groups in the WS one hub services during assignment against templates
    • AAPP-13482: CN22 – VPP Auto Update not working for some applications.
    • AGGL-11382: Launcher orientation is set to locked in XML when its not selected in the UI.
    • AMST-35248: Delay in processing windows install/removal commands for apps and profiles.
    • CRSVC-27368: Increase the SMTP username limit from 64 to 255 characters.
    • CRSVC-26920: Remove the index IX_DeviceExtendedProperties_RowVersion.
    • RUGG-10704:Copy and Edit of the existing provisioning profile creates the profile copy under Devices > Profiles & Resources section.
    • FS-818: RB-2111-Freestyle Orchestrator is still tagged as Tech Preview.
  • Release Date: 01.03.22
  • Release Notes

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: