Week 03-2023 VMware Enduser Computing Updates

Posted byJuliusLienemannPosted inWeekly ServiceTags:, , ,

Important KB Articles and Release Updates

Please note: KBs may get updated after being referenced here. Please always follow the link to the original post in kb.vmware.com

VMware Cloud Services Status for Workspace ONE Subscriptions (90633)

  • As of December 2020, new Workspace ONE SaaS subscriptions come with access to a new platform called VMware Cloud Services (console.cloud.vmware.com). An onboarding invite will be sent out for these subscriptions, with instructions on how to onboard and access your Workspace ONE services through this platform. Once you redeem the invite, your services will then be active. 

Workspace ONE Web – Issue loading websites with improper cookie handling (90619)

  • Workspace ONE Web is based on Android’s System WebView component which in turn is based on Chromium, the open source project that powers Google’s Chrome browser. Chromium introduced changes to the handling of third-party cookies to provide more security and privacy and offer users more transparency and control. These changes were included in Android System WebView version 89.0.4385.0+.

Discrepancy in Encryption Status for certain Workspace ONE UEM managed Windows Devices (90631)

  • Certain Windows Devices are reported as Not Encrypted on Device Details page even though they are fully encrypted.
  • Upon checking Hub and DeviceServices (DS) logs, noticing Workspace ONE Intelligent hub is only sending older version of DiskEncryptionSamples (DiskEncryptionV2).
  • Workspace ONE UEM 2101+ and Workspace ONE Intelligent Hub 2101+
  • From Workspace ONE UEM 2101 (Workspace ONE Intelligent Hub 2101), we have introduced a new sample (DiskEncryptionV3) for enhanced support on Bitlocker Encryption and Sampling.
    There was a known issue when using newer Workspace ONE Intelligent Hub (2101 and above) with older Workspace ONE UEM console (2011 and earlier versions), console could not handle the new samples properly resulting in Encryption Profile installation failure. You were advised at that time to manually disable the BitlockerEnhancementMode feature on the device to improve compatibility for UEM console that is below 2011.
    However, turning the feature off after device already sends the new sample to console could lead to device stuck at “Not Encrypted” state.
  • For currently supported Hub and UEM versions, BitlockerEnhancementMode (HKEY_LOCAL_MACHINE\SOFTWARE\AIRWATCH\Feature, BitlockerEnhancementMode) is by default enabled. We recommend not modifying the feature toggle and keep it on (true) on your devices.

AMST-37302 – Compromised status change for Mac Devices are flooding Event Logs table (90065)

  • Upon upgrading to Workspace ONE UEM 2203/2206, your environment may exhibit one or all of the following symptoms:
    • MacOS Compromised Status events are flooding the event logs in the UEM console (Monitor > Reports and Analytics > Events > Device Events).
  • This causes event log table/data to balloon up in size.
  • This can cause a number of performance issues with components that use the event log / data tables.
  • This issue is addressed through cumulative patch:
    • Workspace ONE UEM 2206 (22.6.0.11 or higher)
    • Workspace ONE UEM 2203 (22.3.0.31 or higher)
  • These patches are now available for all customers through the myWorkspace ONE Resources Portal. In addition, the Workspace ONE UEM 2206 installer is now available for consumption for On-premise environments.
  • Highlighting High Priority KBs
    • [Action Needed] – Refresh Old Android Enrollment QR Codes
      VMware is making changes to enhance the security posture of cloud-based endpoints related to this enrollment method on March 1st, 2023. As a result of this change enrollment using some older QR codes may fail. As a resolution, new QR codes will need to be generated as replacements for affected QR codes.
    • VMware Tunnel Proxy End of Support Life Announcement (87345)
      VMware is announcing End of Support Life for the Tunnel Proxy component of the VMware Tunnel solution. This will be effective January 30, 2023.
    • VMware Workspace ONE UEM New Control Plane SaaS Deployment Schedule (86243)
      Workspace ONE UEM has undergone a complete re-architecture to modernize the platform using microservices and containers to enable increased scalability and performance and increase the rate of innovation. Now after having conducted significant and careful testing, these architecture updates, including a new control plane, will be deployed to UEM SaaS environments over the next several weeks, with options available to on-premise customers after this roll-out (Later in 2022).
    • Support Access Policies for Customers with Expired SaaS EUC Licenses (89494)
      In alignment with VMware’s Corporate Standards and those of the industry as a whole, VMware customers who have purchased SaaS (Software-as-a-Service) licenses for EUC (End-User Computing) products can expect the behavior outlined in the KB regarding Support access when their subscription has a status of Active Pending Cancellation or Expired/Cancelled.
  • Week 32 Software Updates
  • Component: Workspace ONE Intelligent Hub for Android
  • New Release: 23.01
  • Changes:
    • Enhanced Prompt to Meet Device/Work Profile Passcode Requirements
      • When the Device and/or Work Profile passcodes are not compliant with the organization’s requirements, Intelligent Hub shows a screen prompting end users to update these. This screen has been enhanced to better explain the order in which passcodes should be set in cases where separate Device and Work Profile passcodes are required.
    • Prompt for Users to Enable Google Location Accuracy
      • When administrators enable location data collection from Workspace ONE UEM, Intelligent Hub requests that end users enable any required, missing location permissions. With Intelligent Hub 23.01, Workspace ONE UEM will also request that end users enable Google Location Accuracy. Enabling Google Location Accuracy allows Workspace ONE UEM to more reliably sample location data from Android by expanding the location data sources to include cellular and WiFi networks.
    • Enhanced failure scenarios for Hub Check Out flow
      • Hub’s checkout flow now handles failure scenarios more gracefully by providing more information to the end user about what is happening and ability for the end user to take corrective actions in case of a failure.
  • Release Date: 19.01.2023 (staged)
  • Release Notes
  • Component: Workspace ONE UEM
  • New Release: OS Updates Seed Script
  • Changes:
    • Most recent update: macOS Big Sur 11.7.2 (20G1020)
  • Release Date: CW01
  • Release Notes
  • Component: Workspace ONE UEM
  • New Release: Seed Script for latest Device Model Information
  • Changes:
    • Seed new ipad pro models for 2022 … iPad Pro 11″ 4th gen iPad Pro 12.9″ 6th gen
  • Release Date: CW01
  • Release Notes
  • Component: Workspace ONE UEM
  • New Release: 21.9.0.47
  • Changes:
    • AMST-37313: Device Identifier and UDID mismatch for any reason should not unenroll device.
    • AAPP-14928: Cannot enable Device Assignment for certain VPP applications.
  • Release Date: 22.11.22
  • Release Notes
  • Component: Workspace ONE UEM
  • New Release: 21.11.0.56
  • Changes:
    • FCA-204432: Report name is randomized while downloading legacy reports.
  • Release Date: Week03-23
  • Release Notes
  • Component: Workspace ONE UEM
  • New Release: 22.3.0.38
  • Changes:
    • FS-2453: FS-1887 changes did not make it to Astro Air
  • Release Date: Week03-23
  • Release Notes
  • Component: Workspace ONE UEM
  • New Release: 22.6.0.22
  • Changes:
    • CRSVC-34055: Certificate revocation not working for OpenTrust.
    • FCA-204551: Unable to edit Device Asset Number.
    • FCA-204433: Report name is randomized while downloading legacy reports.
  • Release Date: Week03-23
  • Release Notes
  • Component: Workspace ONE UEM
  • New Release: 22.9.0.12
  • Changes:
    • AAPP-15129: App details are not getting pre-filled when uploading internal app in UEM 22.09 or above.
    • CRSVC-34056: DB Installer script for 2209.9 fails on SQL Server Standard Edition.
  • Release Date: 10.01.23
  • Release Notes

Advertisement

Leave a Reply

Fill in your details below or click an icon to log in:

Gravatar
WordPress.com Logo

You are commenting using your WordPress.com account. ( Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. ( Log Out /  Change )

Cancel

Connecting to %s

%d bloggers like this: