Important KB Articles, Announcements and Release Updates
Please note: KBs may get updated after being referenced here. Please always follow the link to the original post in kb.vmware.com
- When enrolled into Workspace ONE UEM, the following device models may not be properly identified as their specific model. Any resources such as profiles, applications, sensors, etc., that are assigned to these devices may not properly be deployed.
- Mac Mini M2
- Mac Mini M2 Pro
- MacBook Pro 14″ M2 Pro
- MacBook Pro 14″ M2 Max
- MacBook Pro 16″ M2 Pro
- MacBook Pro 16″ M2 Max
- The following patches are available to resolve this issue. This KB will be updates as any additional patches are released:
- UEM 2203 – 22.3.0.40
- UEM 2204 – 22.4.0.29
- UEM 2206 – 22.6.0.24
- UEM 2209 – 22.9.0.15
- UEM 2210 – 22.10.0.10
Upcoming Change for Workspace ONE UEM Basic Administrator Password & Session Policies (90067)
- VMware will be modifying the following configurations related to Basic Console Administrators:
- Maximum failed login attempts lowered to 6
- Password complexity level will be enabled by default and set to letters and numbers
- Minimum password length will be increased to 7 characters
- Maximum password expiration period (age) will be lowered to 120 days
- Idle Session Timeout will be lowered to 15 minutes
iOS/iPadOS 14: Crash seen during launch of Intelligent Hub 23.01 (90871)
- It has been observed that some users who are on iOS 14 and iPadOS 14 are observing a crash on launch of Intelligent Hub 23.01 when the intelligent hub is pushed as managed app from AppStore or deployed via VPP method.
- The Product team is looking into solutions to remedy this crash.
Discontinuation Notice for Unsupported VMware Identity Manager Connector (90808)
- This article is intended to be a notice for an upcoming change that will discontinue the functionality of all unsupported VMware Identity Manager Connectors that are versions 19.03.0.1 and earlier.
- This will be a two phased approach. In the first phase, a change will take place on or immediately after March 15, 2023 in all Workspace ONE Access hosted tenants.
- When the first phase takes effect in March, Workspace ONE Access tenants with 19.03.0.1 and earlier Connectors no longer will be able to create, edit, or delete directories.
- The second phase will happen on or immediately after April 15, 2023 and this change will completely cease all functionality of legacy VMware Identity Manager Connectors.
- Highlighting High Priority KBs
- [Action Needed] – Refresh Old Android Enrollment QR Codes
VMware is making changes to enhance the security posture of cloud-based endpoints related to this enrollment method on March 1st, 2023. As a result of this change enrollment using some older QR codes may fail. As a resolution, new QR codes will need to be generated as replacements for affected QR codes. - VMware Tunnel Proxy End of Support Life Announcement (87345)
VMware is announcing End of Support Life for the Tunnel Proxy component of the VMware Tunnel solution. This will be effective January 30, 2023. - VMware Workspace ONE UEM New Control Plane SaaS Deployment Schedule (86243)
Workspace ONE UEM has undergone a complete re-architecture to modernize the platform using microservices and containers to enable increased scalability and performance and increase the rate of innovation. Now after having conducted significant and careful testing, these architecture updates, including a new control plane, will be deployed to UEM SaaS environments over the next several weeks, with options available to on-premise customers after this roll-out (Later in 2022). - Support Access Policies for Customers with Expired SaaS EUC Licenses (89494)
In alignment with VMware’s Corporate Standards and those of the industry as a whole, VMware customers who have purchased SaaS (Software-as-a-Service) licenses for EUC (End-User Computing) products can expect the behavior outlined in the KB regarding Support access when their subscription has a status of Active Pending Cancellation or Expired/Cancelled.
- [Action Needed] – Refresh Old Android Enrollment QR Codes
- Security Related KBs
- HW-137959: VMSA-2021-0016 for Workspace ONE Access, VMware Identity Manager (CVE-2021-22002, CVE-2021-22003) (85254)
- HW-150533: VMSA-2021-0028, VMSA-2021-0030 for Workspace ONE Access Appliance (CVE-2021-44228, CVE-2021-45046, CVE-2021-22056, CVE-2021-22057) (87183)
- HW-150543: VMSA-2021-0028 for Workspace ONE and VMware Identity Manager Connector (CVE-2021-44228, CVE-2021-45046) (87184)
- HW-150541: VMSA-2021-0028, VMSA-2021-0030 for VMware Identity Manager (CVE-2021-44228, CVE-2021-45046, CVE-2021-22056) (87185)
- HW-146724: Users maybe be unable to authenticate on Workspace ONE Access with Active Directory over IWA and STARTTLS option (85921)
- Recently updated or newly added KBs
- Supported Windows 10 and Windows 11 Guest Operating Systems for Horizon Agent and Remote Experience, for VMware Horizon 8.x (2006 and Later) (78714)
- Microsoft Teams: Unoptimized fallback mode calls fail with a “Sorry we couldn’t connect you” error (84205)
- VMware Horizon and Horizon Cloud readiness for Microsoft Windows 11 (85960)
- Supported Guest Operating Systems for Horizon Linux Agent for Horizon 8 2103 and Later (87277)
- Horizon on VMware Cloud on AWS Support (58539)
- How to use VMware Workspace ONE API Explorer (2960676)
- Digital Workspace Techzone, Blog and YouTube Updates
- App Volumes Architecture
- Introducing VMware Identity Services: Centralizing your Workspace ONE End-User Management
- Workspace ONE for Frontline Workers: Demo Video
- VMware Identity Services: Intro to Centralized User Management
- VMware Identity Services: Okta Integration – Feature Walk-through
- VMware Identity Services: Azure AD Integration – Feature Walk-through
- VMware Workspace ONE Digital Employee Experience (DEX) Delights Employees and IT
- Delivering Horizon Published Apps on Demand with VMware App Volumes
- Third Party Blog and Technology Updates
- Mobile-Jon: Filling the Gaps in Workspace ONE Access Audit Logs
- Mobile-Jon: Workspace ONE Marketplace: Freestyle, Templates, and More!
- Patrick Zöller: Android No Touch Work Profile Enrollment for BYOD via Link/QR-Code
- Simon Elberts: Azure AD Conditional Access with VMware Workspace ONE
- Week 06 Software Updates
- Component: Workspace ONE UEM
- New Release: OS Updates Seed Script
- Changes:
- Most recent update: macOS 11.7.3 (20G1116) and macOS 12.6.3 (21G419)
- Release Date: CW05
- Release Notes
- Component: Workspace ONE UEM
- New Release: Seed Script for latest Device Model Information
- Changes:
- Seed new ipad pro models for 2022 … iPad Pro 11″ 4th gen iPad Pro 12.9″ 6th gen
- Release Date: CW01
- Release Notes
- Component: Workspace ONE UEM
- New Release: 21.9.0.47
- Changes:
- AMST-37313: Device Identifier and UDID mismatch for any reason should not unenroll device.
- AAPP-14928: Cannot enable Device Assignment for certain VPP applications.
- Release Date: 22.11.22
- Release Notes
- Component: Workspace ONE UEM
- New Release: 21.11.0.56
- Changes:
- FCA-204432: Report name is randomized while downloading legacy reports.
- Release Date: Week03-23
- Release Notes
- Component: Workspace ONE UEM
- New Release: 22.3.0.40
- Changes:
- MACOS-3567: macOS – add support for new hardware released.
- AMST-38165: Location option missing in Bulk management for Windows devices.
- Release Date: Week06-23
- Release Notes
- Component: Workspace ONE UEM
- New Release: 22.6.0.24
- Changes:
- AMST-38167: Location option missing in Bulk management for Windows devices.
- MACOS-3569: macOS – add support for new hardware released.
- AMST-38006: Unable to modify and save the install command for Windows app.
- Release Date: Week06-23
- Release Notes
- Component: Workspace ONE UEM
- New Release: 22.9.0.15
- Changes:
- MACOS-3559: Rocket space man error when tried accessing Security tab for macOS devices.
- MACOS-3570: macOS – Add support for new hardware released.
- AMST-38168: Location option missing in Bulk management for Windows devices.
- FCA-204671: General search returns ASCII value for apostrophe in the device friendly name.
- CRSVC-34124: Unable to save SYSLOG settings with hostname with error “Save failed Invalid Host name”.
- Release Date: Week06
- Release Notes
Julius Lienemann 