Release Updates Week 08

Workspace ONE Web for iOS 23.02
- What’s New in this App Version
- IBRW-174651: Enable shift-based access control
This feature enables the admins to put shift based access on Web which restricts the end users to access Web application on their mobile devices if they are not in their shift hours.
- IBRW-174651: Enable shift-based access control

Workspace ONE Web for Android 23.02
- What’s New
- ABRW-174651: Support Enable shift-based access control
- This feature enables the admins to put shift-based access on the Web which restricts the end users to access Web applications on their mobile devices if they are not in their shift hours.
- ABRW-174655: Ability to open and view PDF files in Kiosk mode
- This feature allows users to open and view PDF files within Workspace ONE Web in Kiosk mode.
- ABRW-174923: Modify Web user-agent to work with CWS
- This feature allows the Web admin to use a new modified user agent for Workspace ONE Web which enables the VMware Cloud Web Security policies and restrictions to work within the Web.
- ABRW-174651: Support Enable shift-based access control
- Bug fixes
- ABRW-174979: Share link action from another app to WS1 Web doesn’t load intended link

Workspace ONE Content for Android 23.02.
- What’s New
- KVP to disable Edit PDF page for organising pages
- Improved experience of image and video capture from camera with flash support
- Improved navigation experience
- Bugs Fixed
- ASCL-178576 – Unable to load PDF at/after page 6 with watermark enabled and 2-byte characters specified as values

Workspace ONE Intelligent Hub for Android 23.02 (staged rollout)
- Add Access Point Name configurations to any Android 9+ Work Managed device
- Workspace ONE Intelligent Hub 23.02 and onward supports adding Access Point Name configurations to any Work Managed devices on Android 9.0 and higher. Previously, this was only supported for Samsung Work Managed devices. This will be supported through Custom Settings Profiles as of Intelligent Hub 23.02. Future releases of the Workspace ONE UEM Console will support configuration of this Profile via a dedicated payload. Please see Android – Access Point Name Custom Settings Profile for more details.
- Bug Fixes
Important KB Articles and Announcements
Please note: KBs may get updated after being referenced here. Please always follow the link to the original post in kb.vmware.com
Microsoft Store for Business retirement by Microsoft (90945)
- Microsoft has announced that the Microsoft Store for Busines will be end of life on March 31, 2023. Customers that are using the Microsoft Store for Business to deploy applications with VMware Workspace ONE will be impacted.
- This EOL will only affect customers who are using the Microsoft Store for Business integration in VMware Workspace ONE.
After March 31, 2023, customers will not be able to add new applications from Microsoft Store for Business in the Workspace ONE console. Workspace ONE will not enable the Microsoft Store for Business in any new environments. Current deployments might be affected if the applications are paid apps or line of business applications.
Installation of Windows applications causes UAC prompt to be displayed in User Context (90938)
- Customers that are using PS App Deployment Toolkit (PSADT), or similar products, to deploy applications to devices, may cause the user to be prompted by the UAC prompt.
- This UAC prompt will block the application installation and will disrupt the end user.
- Starting with Windows 11 22H2 Microsoft changed the default setting for the LSA “runasppl” to enable.
- This setting will require administrator UAC login for the installation, if the application installation context is “User” and the Admin Privileges selection is “YES”.
Recommended practices when uploading large-size applications in Workspace ONE UEM Console (89076)
- In adoption of modern management and software distribution, the team has noticed an increase of size for in-house application/software, new sets of challenges are presented when trying to upload large application files to Workspace ONE UEM Console.
- This article will discuss the settings/configs for SaaS Workspace ONE UEM console.
Note:
Large-size application upload experience is improved for Workspace ONE UEM 2210 and above. Console now uploads files to FileStorage (FS) and Content Delivery Network (CDN) in the background, decoupled from UI. Admin will not encounter any timeout errors. For detail, please refer to Workspace ONE UEM 2210 release notes .
iOS/iPadOS 14: Crash seen during launch of Workspace ONE Web 23.02 (91006)
- It has been observed that some users who are on iOS 14 and iPadOS 14 are observing a crash on launch of Workspace ONE Web 23.02 when the Workspace ONE Web app is pushed as managed app from AppStore or deployed via VPP method.
“Allow No Location Access” Restriction not working on devices with Android OS 11 and above (91005)
- A Restrictions Profile with Allow Location Service Configuration (Managed devices only) set to Allow No Location Access does not get enforced on the Android OS 11 and above devices.
Windows Update Profile Support (91032)
- The VMware Workspace ONE profile for Windows Update is, due to the changes that Microsoft did in the last years, outdated.
This means, if the profile gets deployed to Windows 10 20H2 or higher, or Windows 11 devices, Windows Update and/or Delivery Optimization might not be configured correctly.
It might also be possible that the profile installation will fail on those devices.
Devices that were enrolled via Autopilot Hybrid Join stay in machine mode (91033)
- Customers that are using Windows Autopilot Hybrid Join to enroll the devices into VMware Workspace ONE might face issues after the device is enrolled.
In the Device Troubleshooting event log the Event “Windows Device Check-in Mode” with the Event Data
Installation of Windows applications causes UAC prompt to be displayed in User Context (90938)
- Customers that are using PS App Deployment Toolkit (PSADT), or similar products, to deploy applications to devices, may cause the user to be prompted by the UAC prompt.
Deprecating In-Product Feedback Forms with WS1 UEM Console version 2302 (91036)
- What is In-Product Feedback?
In-Product Feedback is a form embedded in the Workspace ONE UEM Console that allows administrators to share feedback on their experience with Workspace ONE UEM Console. - What is changing?
We are deprecating In-Product Feedback Forms with Workspace ONE UEM version 2302+.
High Priority KBs
- [Action Needed] – Refresh Old Android Enrollment QR Codes
VMware is making changes to enhance the security posture of cloud-based endpoints related to this enrollment method on March 1st, 2023. As a result of this change enrollment using some older QR codes may fail. As a resolution, new QR codes will need to be generated as replacements for affected QR codes. - VMware Tunnel Proxy End of Support Life Announcement (87345)
VMware is announcing End of Support Life for the Tunnel Proxy component of the VMware Tunnel solution. This will be effective January 30, 2023. - VMware Workspace ONE UEM New Control Plane SaaS Deployment Schedule (86243)
Workspace ONE UEM has undergone a complete re-architecture to modernize the platform using microservices and containers to enable increased scalability and performance and increase the rate of innovation. Now after having conducted significant and careful testing, these architecture updates, including a new control plane, will be deployed to UEM SaaS environments over the next several weeks, with options available to on-premise customers after this roll-out (Later in 2022). - Support Access Policies for Customers with Expired SaaS EUC Licenses (89494)
In alignment with VMware’s Corporate Standards and those of the industry as a whole, VMware customers who have purchased SaaS (Software-as-a-Service) licenses for EUC (End-User Computing) products can expect the behavior outlined in the KB regarding Support access when their subscription has a status of Active Pending Cancellation or Expired/Cancelled.
Recently updated or added KBs (Links)
- Sporadic Deletion failure Fault Cause: vim.fault.GenericVmConfigFault An error occurred while reverting to a snapshot. Instant Clone Deletion Error (90984)
- VC_FAULT_FATAL: javax .xml .ws .soap.SOAPFaultException Error: The object ‘vim.dvs.DistributedVirtualPortgroup:’ has already been deleted or has not been completely created Instant Clone Creation Error (87962)
- Horizon Subscription License– Incorrect Expiration Information Shown in Horizon Console (91037)
- Horizon Secondary Crendential is getting locked in Horizon 8 (91007)
- Workspace ONE UEM Modernization – Tenant ID and Customer Organization Group requirements for Smart Groups (87464)
- Virtual Desktop Platforms Supported by Workspace ONE UEM (90624)
- SSL Certificate Renewal for Workspace ONE (WS1) UEM Dedicated SaaS Environments (50116922)
- Workspace ONE Managed AppConfig Sample – Android (2960752)
- Horizon Admin Portal stops loading after reboot (80242)
- VMware Horizon ports and network connectivity requirements (1027217)
- Known Issues with NVIDIA VGPU and Horizon View (90271)
- Incompatibility of the Management Pack for Horizon with Horizon 2209 and 2212 (90054)
Digital Workspace Techzone, Blog and YouTube Updates
- Microsoft Teams Optimization with VMware Horizon
- What is Digital Employee Experience (DEX) and who owns it?
- It pays to invest in your employee experience
- Boosting productivity with Workspace ONE Content
- Secure Remote Workforce using VDI
3rd Party Blog Updates & Industry News
- Mobinergy Blog: How to improve conditional Access with Workspace ONE Access
February Software Releases
Patch & Seed Script Updates Week 08-2023
- OS Updates Seed Script
- Most recent update: Most recent update: iOS 12.5.7 (16H81)
- https://resources.workspaceone.com/view/rywydmj6ghb9nmch4ywq/en
- Last Update: CW08
- Seed Script for latest Device Model Information
- Seed Script for latest Device Model Information … Seed new ipad pro models for 2022 … iPad Pro 11″ 4th gen iPad Pro 12.9″ 6th gen
- https://resources.workspaceone.com/view/x8kn6bslt67vwvlgx4ld/en
- Last update: CW01
- Workspace ONE UEM 21.05
- Patch Level: 21.5.0.67
- CMEM-186704: PowerShell failing: “User credential of the remote PowerShell server contains the special characters.”
- https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2105/rn/Workspace-ONE-UEM-2105-Release-Notes.html#21-5-0-66-patch-resolved-issues-resolved
- Last Update: CW39
- Workspace ONE UEM 21.09
- Patch Level: 21.9.0.47
- AMST-37313: Device Identifier and UDID mismatch for any reason should not unenroll device.
- AAPP-14928: Cannot enable Device Assignment for certain VPP applications.
- https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2109/rn/Workspace-ONE-UEM-2109-Release-Note.html#21-9-0-41-patch-resolved-issues-resolved
- Last Update: CW47
- Workspace ONE UEM 21.11
- Patch Level: 21.11.0.57
- AMST-38164: Location option missing in Bulk management for Windows devices
- ARES-24522: Internal app publish fails due to duplicate key inserted error.
- RUGG-11731: Android Enterprise Launcher profile folder names missing
- Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2111/rn/vmware-workspace-one-uem-powered-by-airwatch-2111-release-notes/index.html#resolved-issues-2111043-patch-resolved-issues
- Last Update: CW08
- Workspace ONE UEM 22.03
- Patch Level 22.3.0.41
- AGGL-13810: Microsoft Surface Duo (Android) enrollment is blocked even though Microsoft as Manufacturer is allowed.
- PPAT-13434: iOS VPN Profiles have the incorrect DTR ruleset getting applied for devices.
- https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2203/rn/vmware-workspace-one-uem-powered-by-airwatch-2203-release-notes/index.html#resolved-issues-223028-patch-resolved-issues
- Last Update: CW07
- Workspace ONE UEM 22.06
- Patch Level 22.6.0.26
- CRSVC-34854: The certificate along with the private key is not stored on the Windows CE 7 rugged device.
- AMST-38265: Improve products delivery for newly enrolled devices
- AMST-38171: Evaluate and update Enterprise Reset and DeviceGaurd check in the enterprise reset flow.
- AGGL-13791: Some Pixel models are inconsistently mapped to a different model causing incorrect Smart Group reconciliation
- https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2206/rn/vmware-workspace-one-uem-powered-by-airwatch-2206-release-notes/index.html#resolved-issues-226011-patch-resolved-issues
- Last Update: CW08
- Workspace ONE UEM 22.09
- Patch Level 22.9.0.17
- CRSVC-34839: Certificate revocation not working for OpenTrust.
- AMST-38172: Evaluate and update Enterprise Reset and DeviceGaurd check in the enterprise reset flow.
- AMST-38266: Improve products delivery for newly enrolled devices.
- AAPP-15352 : User-enrolled iPad devices are not showing device model details on the Device friendly name and under Device Model.
- https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2209/rn/vmware-workspace-one-uem-2209-release-notes/index.html#resolved-issues-22904-patch-resolved-issues
- Last Update: CW08
- Workspace ONE UEM 22.10
- Patch Level 22.10.0.12
- AMST-38173: Evaluate and update Enterprise Reset and DeviceGaurd check in the enterprise reset flow.
- AMST-38161: Seed 22.10.4 HUB to UEM console.
- AMST-38267: Improve products delivery for newly enrolled devices.
- CRSVC-34952: DeviceStateMigrationService leading to 100% CPU usage on the node.
- https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2210/rn/vmware-workspace-one-uem-2210-release-notes/index.html
- Last Update: CW08
- Workspace ONE UEM 22.12
- Patch Level 22.12.0.04
- AMST-38162: Seed 22.10.4 HUB to UEM console.
- ARES-24650: Unable to renew provisioning profile on internal iOS apps.
- FCA-204727: Incorrect alignment of app assignment columns.
- AAPP-15353: User-enrolled iPad devices are not showing device model details on the Device friendly name and under Device Model.
- CRSVC-34953: DeviceStateMigrationService leading to 100% CPU usage on the node.
- CMSVC-16771: Unable to load Assignment Groups list view and unable to load Assignment Groups in app assignments.
- https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2212/rn/vmware-workspace-one-uem-2212-release-notes/index.html#Resolved%20Issues-22.12.0.04%20Patch%20Resolved%20Issues
- Last Update: CW08