Important KB Articles and Release Updates
Please note: KBs may get updated after being referenced here. Please always follow the link to the original post in kb.vmware.com
- When enrolled into Workspace ONE UEM, the following device models may not be properly identified as their specific model. Any resources such as profiles, applications, sensors, etc., that are assigned to these devices may not properly be deployed.
- Mac Mini M2
- Mac Mini M2 Pro
- MacBook Pro 14″ M2 Pro
- MacBook Pro 14″ M2 Max
- MacBook Pro 16″ M2 Pro
- MacBook Pro 16″ M2 Max
- The Workspace ONE team is working on a patch to fully support these models. This KB will be updated as each patch is made available.
- Highlighting High Priority KBs
- [Action Needed] – Refresh Old Android Enrollment QR Codes
VMware is making changes to enhance the security posture of cloud-based endpoints related to this enrollment method on March 1st, 2023. As a result of this change enrollment using some older QR codes may fail. As a resolution, new QR codes will need to be generated as replacements for affected QR codes. - VMware Tunnel Proxy End of Support Life Announcement (87345)
VMware is announcing End of Support Life for the Tunnel Proxy component of the VMware Tunnel solution. This will be effective January 30, 2023. - VMware Workspace ONE UEM New Control Plane SaaS Deployment Schedule (86243)
Workspace ONE UEM has undergone a complete re-architecture to modernize the platform using microservices and containers to enable increased scalability and performance and increase the rate of innovation. Now after having conducted significant and careful testing, these architecture updates, including a new control plane, will be deployed to UEM SaaS environments over the next several weeks, with options available to on-premise customers after this roll-out (Later in 2022). - Support Access Policies for Customers with Expired SaaS EUC Licenses (89494)
In alignment with VMware’s Corporate Standards and those of the industry as a whole, VMware customers who have purchased SaaS (Software-as-a-Service) licenses for EUC (End-User Computing) products can expect the behavior outlined in the KB regarding Support access when their subscription has a status of Active Pending Cancellation or Expired/Cancelled.
- [Action Needed] – Refresh Old Android Enrollment QR Codes
- Security Related KBs
- HW-137959: VMSA-2021-0016 for Workspace ONE Access, VMware Identity Manager (CVE-2021-22002, CVE-2021-22003) (85254)
- HW-150533: VMSA-2021-0028, VMSA-2021-0030 for Workspace ONE Access Appliance (CVE-2021-44228, CVE-2021-45046, CVE-2021-22056, CVE-2021-22057) (87183)
- HW-150543: VMSA-2021-0028 for Workspace ONE and VMware Identity Manager Connector (CVE-2021-44228, CVE-2021-45046) (87184)
- HW-150541: VMSA-2021-0028, VMSA-2021-0030 for VMware Identity Manager (CVE-2021-44228, CVE-2021-45046, CVE-2021-22056) (87185)
- HW-146724: Users maybe be unable to authenticate on Workspace ONE Access with Active Directory over IWA and STARTTLS option (85921)
- Recently updated or newly added KBs
- MACOS-3545: New macOS models containing the M2 Pro or M2 Max chip are not properly characterized upon enrollment into Workspace ONE UEM (90675)
- AD_FAULT_FATAL – unable to create connection pool Instant Clone Creation Error (2147129)
- Disabling virtual printing (ThinPrint) in VMware Horizon Client for Windows (2003626)
- When connecting to a Horizon View Environment, you get the error: “You are not entitled to use this system” (2050600)
- Troubleshooting connectivity issues between the agent, client, and connection server in VMware Horizon View (1006734)
- Black screen when logging in to Horizon virtual desktop(VDI) over PCOIP in Windows 10 (1028332)
- Horizon Event DB Configuration Fails on a Non-English Operating System (85519)
- High CPU Utilization for VDI Instant clone desktop provisioning with CarbonBlack (80955)
- UAG shows grey question mark in the Horizon View Administrator Portal Dashboard (78501)
- Unable to login to Horizon Administrator with the password which includes the minus symbol (77068)
- Horizon Client for Mac OS – Numlock not working or syncing correctly with External Keyboard (80220)
- VMC SDDC Upgrade Impact Assessment (74599)
- Issues when Horizon View Servers when deployed with dissimilar FIPS mode configurations (67009)
- Mouse Stops Working on Mac OS Horizon Client for Horizon 7 and 8 (81937)
- DNS Related Troubleshooting With Unified Access Gateway (50120424)
- Virtual Desktop Platforms Supported by Workspace ONE UEM (90624)
- Legacy Windows Support Plan for VMware Horizon (76934)
- Microsoft Teams: Audio Quality can be substandard with Clients with inadequate hardware when optimized (86505)
- Digital Workspace Techzone, Blog and YouTube Updates
- Automating VMware Horizon 8 with VMware PowerCLI
- Announcing general availability of VMware Horizon with SDK for WebRTC redirection
- Horizon Configuration
- Network Ports in VMware Horizon
- VMware Workspace ONE SaaS and VMware Government Services IaaS are now Authorized for StateRAMP
- Horizon Cloud Service – next-gen Architecture
- Join VMware at IGEL Disrupt 23!
- Measuring Tenant Consumption for VMware Tanzu Services for Cloud Services Providers
- Third Party Blog and Technology Updates
- Week 04 Software Updates

- Component: Workspace ONE Boxer for Android
- New Release: 23.01
- Changes:
- Deprecation of Old Create and Edit Event Screen
- The feature flag of this feature is deprecated and users won’t be able to go back to the old version of these screens.
- Intelligence User Flows Integration
- SDK Upgrade to 22.11
- Support of device passcode for authentication
- This feature allows an end user to use device PIN for authentication instead of the SDK passcode or Username and Password.
- This feature is available when “useDevicePinForAuthentication”, type bool, is added as a custom SDK setting in the Workspace ONE UEM console (Groups & Settings > All Settings > Apps > Settings and Policies > Settings).
- It can be also enabled from Groups & Settings > All Settings > Apps > Settings and Policies > Use Device Pin for Authentication in the Workspace ONE UEM console
- By default, the feature is deactivated. To activate this feature, the value of the custom setting must be set to true.
- Compromise device protection
- This is SDK feature which will wipe Boxer in case user is enrolled on rooted device.
- This feature is available when Compromised Protection is enabled from Groups & Settings > All Settings > Apps > Settings and Policies in the Workspace ONE UEM console
- By default, the feature is disabled. To enable this feature, the value of the setting must be set to enabled.
- Accessibility improvements
- Quality improvements and crash fixes
- Deprecation of Old Create and Edit Event Screen
- Release Date: Week04-2023 (staged)
- Release Notes

- Component: Workspace ONE Boxer for iOS
- New Release: 23.01
- Changes:
- Accept Proposed New Time
- This feature is going to allow meeting organisers to answer with a single tap to new proposed times from the invitees of for the meeting they create
- When an invitee declines or replies tentatively to an invite and proposes new time for the corresponding meeting, it’s owner is going to receive an email with a prompt allowing him/her to accept or decline the proposed time
- The organisers are going to be able to see their own availability during the proposed slot before they answer to it
- If the organiser accepts the new proposed time the meeting will be moved to the proposed time slot, new meeting invites will be sent to all invitees and they are going to be prompted to answer to this new invites
- Out of Office Notification Improvements
- This feature improves the user experience when the users turn on automatic replies when they are out of office
- Instead of a pop-up message appearing every 24h when the application is opened when OOO setting is turned on a banner shall appear on top of the email list for the period the automatic replies are turned on.
- The setting can be turned off by a button on the banner.
- The banner disappears when the period of the automatic replies is over or when the setting for them is turned off manually.
- Email Draft Improvements
- Better error handling
- Delegated accounts use case improvements
- User experience improvements when there are attached files in the drafts
- Accept Proposed New Time
- Release Date: Week04-2023 (staged)
- Release Notes

- Component: Workspace ONE Intelligent Hub for Android
- New Release: 23.01
- Changes:
- Enhanced Prompt to Meet Device/Work Profile Passcode Requirements
- When the Device and/or Work Profile passcodes are not compliant with the organization’s requirements, Intelligent Hub shows a screen prompting end users to update these. This screen has been enhanced to better explain the order in which passcodes should be set in cases where separate Device and Work Profile passcodes are required.
- Prompt for Users to Enable Google Location Accuracy
- When administrators enable location data collection from Workspace ONE UEM, Intelligent Hub requests that end users enable any required, missing location permissions. With Intelligent Hub 23.01, Workspace ONE UEM will also request that end users enable Google Location Accuracy. Enabling Google Location Accuracy allows Workspace ONE UEM to more reliably sample location data from Android by expanding the location data sources to include cellular and WiFi networks.
- Enhanced failure scenarios for Hub Check Out flow
- Hub’s checkout flow now handles failure scenarios more gracefully by providing more information to the end user about what is happening and ability for the end user to take corrective actions in case of a failure.
- Enhanced Prompt to Meet Device/Work Profile Passcode Requirements
- Release Date: 19.01.2023 (staged)
- Release Notes

- Component: Workspace ONE UEM
- New Release: OS Updates Seed Script
- Changes:
- Most recent update: 0 (20D47),iOS 15.7.3 (19H307),tvOS 16.3.0 (20K650)
- Release Date: CW04
- Release Notes

- Component: Workspace ONE UEM
- New Release: Seed Script for latest Device Model Information
- Changes:
- Seed new ipad pro models for 2022 … iPad Pro 11″ 4th gen iPad Pro 12.9″ 6th gen
- Release Date: CW01
- Release Notes

- Component: Workspace ONE UEM
- New Release: 21.9.0.47
- Changes:
- AMST-37313: Device Identifier and UDID mismatch for any reason should not unenroll device.
- AAPP-14928: Cannot enable Device Assignment for certain VPP applications.
- Release Date: 22.11.22
- Release Notes

- Component: Workspace ONE UEM
- New Release: 21.11.0.56
- Changes:
- FCA-204432: Report name is randomized while downloading legacy reports.
- Release Date: Week03-23
- Release Notes

- Component: Workspace ONE UEM
- New Release: 22.3.0.38
- Changes:
- FS-2453: FS-1887 changes did not make it to Astro Air
- Release Date: Week03-23
- Release Notes

- Component: Workspace ONE UEM
- New Release: 22.6.0.23
- Changes:
- RUGG-11729: Product Provisioning File Upload
- CRSVC-34606: DB Upgrade Failure due to missing seed value in device manufacturer and device model detail
- CRSVC-34057: WS1 UEM – DB Installer script for 2209.9 fails on SQL Server Standard Edition
- AAPP-14534: Delay in OS seed script deployment is causing data inconsistency
- Release Date: Week04-23
- Release Notes

- Component: Workspace ONE UEM
- New Release: 22.9.0.12
- Changes:
- AAPP-15129: App details are not getting pre-filled when uploading internal app in UEM 22.09 or above.
- CRSVC-34056: DB Installer script for 2209.9 fails on SQL Server Standard Edition.
- Release Date: 10.01.23
- Release Notes