Release Updates Week 31

Workspace ONE Tunnel for Windows 23.07

  • In this release, we have made updates containing general quality and performance improvements with no new features.
    • PPAT-14647: Tunnel setup will not timeout in Registered mode.
    • PPAT-14428: Files can now be copied via RDP over the UDP channel.
    • PPAT-14047: Improvements were made to the memory footprint during high throughput scenarios.
    • PPAT-12265: Improvements were made to DNS parser logic to handle certain DoS attack scenarios.

Workspace ONE Tunnel 22.04.2 for macOS

  • In this release, we’ve made a few updates containing general quality and performance improvements with one new feature that introduces support for IP/ CIDR in the Device Traffic Rules.
    • This macOS 22.04.2 client supports all existing MDM and Per-App Tunnel features and installation on a Workspace ONE managed device. This client does not support Standalone enrollment.
    • For Standalone enrollment feature, please use the macOS Tunnel client 23.01 application delivered through the Workspace ONE Resources Portal.
  • PPAT-13873: Fixed Tunnel DTR evaluation logic for Block Action.
  • PPAT-12963: Improved the connection management to optimize battery consumption.

Workspace ONE SDK for Android 23.07

  • We updated third-party libraries.
  • We’ve made improvements to SDK diagnostics.
  • We’ve made bug fixes and stability improvements.

Workspace ONE Intelligent Hub for Windows 23.02.5

  • In this release, we have updated the DEEM agent (DEEM 23.06) in the Workspace ONE Intelligent Hub. 
  • Resolved Issues
    • DCP-4390: Updated the way the network adapters are numbered for devices.
    • DCP-4423: Fixed issues from the dynamic change Log.
    • DCP-4544: Fixed issue where Publisher was missing in the app hang events.
    • DCP-4566: Added support on Window Server OS for the deem service with the Horizon client.
    • DCP-4588: Resolved an issue that was causing the DEEM services to stop after Hub was uninstalled.
    • DCP-4600: Fixed an error that was causing vmwetlm and vmwosqext to stop.
    • DCP-4654: Crash reports for Windows can now be collected.
    • DCP-4732: Resolved an issue that was blocking the Workspace ONE Intelligence Hub from obtaining system properties.
    • HUBW-10224: Fix a script issue that caused some scripts to not process the status of some devices.
    • HUBW-10387: Updated the logs to prevent an invalid password exception error in the database.
    • HUBW-10390: Fixed the Hub UI so that no blank screen is shown when navigating to Favorites/Apps tabs.

Workspace ONE Launcher for Android 23.07

  • ALAU-172605: Launcher device details now correctly shows device name after it has been changed by the user
  • ALAU-172405: Launcher now updates device password changes even if the device was idle
  • ALAU-172488: Fixed an issue where updating Launcher would remove a user created widget
  • ALAU-172420: Fixed an issue where enrollment username and Hub App folder would disappear after applying the profile
  • ALAU-172602: Fixed an issue where Launcher Title Bar icons would fail to load in closed networks
  • ALAU-172452: Improved clear app data retry mechanism
  • ALAU-172458: Android 14 Support

Horizon 8 2212.1

  • This release resolves CVE-2023-34037 and CVE-2023-34038. For more information on these vulnerabilities and their impact, see https://www.vmware.com/security/advisories/VMSA-2023-0017.html
  • Security configuration setting balancedHost can now accept a list for those with more than one load balancer. The syntax is exactly the same as portalHost.

Important KB Articles and Announcements

Please note: KBs may get updated after being referenced here. Please always follow the link to the original post in kb.vmware.com


Moderate Severity – VMSA-2023-0017

[IBRW-175287]: WS1 Web for iOS crashes when bringing it back from background (93338)

  • WS1 Web for iOS crashes when bringing it back from the background.
  • WebApp reports a crash when the user switches the screen. 
  • Our product team has been engaged and is actively working to resolve the issue.
  • Fix will be available in upcoming release of Web, tentatively 23.08.

WS1 Email Management – Update to WS1 PowerShell module to support Exchange Online Management v3 (93167)

  • Microsoft has announced deprecation of Remote Powershell (RPS) protocol for Exchange Online. It is recommended to upgrade to the new EXOv3 module. More details on this change can be found on the Microsoft website.
  • At the time of KB publication, Microsoft has announced the final RPS disablement for customers in other Microsoft cloud environments as well as WW cloud is scheduled for October 2023. There will be no extension given to customers post September 2023 and RPS will be disabled for all tenants starting October 1st.
  • This information is subject to change. Please visit the Microsoft website for up to date information.
  • Starting Workspace ONE UEM 23.02.0.10, UEM PowerShell Email integration will use the new EXOv3 module for all PowerShell workflows.
  • New environment upgrades to UEM 2302.02.0.10 or later will include this change by default. 

VMware Horizon Client for macOS: Cannot auto-install a Zoom/Cisco plugin after uninstalling the same version of plugin (93818)

  • After uninstalling a plugin such as Zoom manually, rather than a dialog appearing for reinstall on an attempt , no dialogue prompt appears / pops-up and the original plugin reports as still installed in the Plugin Updates section of the VMware Horizon Client for macOS .
  • When uninstalling a plugin manually, this may not clear the data in the pkgutil receipt database, the Horizon macOS client will verify against the receipt database to check if a plugin is already installed.
  • You can run a pkgutil –Forget command to clear any manual remnants from the receipt database after an appropriate backup:

High Priority KBs


Recently updated or added KBs (Links)


Digital Workspace Techzone, Blog and YouTube Updates


3rd Party Blog Updates & Industry News


August Software Releases

SystemComponentReleaseAnnouncementRelease Date
WindowsTunnel Win1023.07Release Notes28.07.23
AndroidSDK23.07Release Notes31.07.23
macOSmacOS Tunnel22.04.2Release Notes02.08.23
WindowsHub23.02.5Release Notes02.08.23
AndroidLauncher23.07Release Notes03.08.23
HorizonServer2212.1Horizon Server03.08.23

Upcoming EUC Events

EventStart DateLink
VMUG Webcast – Intel: VMware Virtual Desktop Infrastructure (VDI) with Intel09-08-2023https://my.vmug.com/s/community-event?id=a1Y4x000002cVRFEA2
VMware Explore US21-08-2023https://www.vmware.com/explore/us.html
VMware Empower Frontline Workers Webinar19-09-2023https://www.vmware.com/learn/2140000_REG.html
Apps on Demand: Mastering the Eight Activities of Modern App Management20-09-2023UPCOMING: Look out for your invitation to the next VMware EUC Tech Insight Session!
VMware Explore EU06-11-2023https://www.vmware.com/explore/eu.html

EUC UX Research Updates & Opportunities:

Our goal is to gather insight into user behaviors, motivations, and goals, so we can use those insights to inform and strengthen product and design decisions.

Upcoming Opportunities – Who Wants To Join?

Interested in giving your opinion and making your voice heard? Check out what’s available!

  • Help Improve WS1 UEM and Intelligence (MULTIPLE opportunities available)!
    • This includes giving feedback on refreshed designs of existing features, sneak peek’s at new features, and changes to the menu and navigation.
    • Take this short questionnaire to let us know you’re interested in being invited. This will take less than 5 minutes to complete.

Latest Patch & Seed Script Versions

  • Workspace ONE UEM 21.09
    • Patch Level: 21.9.0.50
    • MACOS-3666: Decouple code changes to seed new MAC models.
    • Last Update: CW16
  • Workspace ONE UEM 21.11
    • Patch Level: 21.11.0.63
    • AAPP-15873: Rapid Security Response support – Phase 1.
    • PPAT-14131: Tunnel Configuration Page does not load post migration to AWS CloudFront.
    • Last Update: CW23
  • Workspace ONE UEM 22.03
    • Patch Level 22.3.0.48
    • AAPP-15992: Renewed VPP stoken(ASM) does not sync the app details on the console
    • Last Update: CW26
  • Workspace ONE UEM 22.06
    • Patch Level 22.6.0.39
    • ARES-25868: Deploying internal apps is getting stuck in “Pending Release” status.
    • CRSVC-38592: Move Invalidate All Refresh Tokens Migration feature flag back to production.
    • Last Update: CW30
  • Workspace ONE UEM 22.09
    • Patch Level 22.9.0.34
    • CRSVC-38593: Enable migration of invalidate refresh token flow from AAD to Microsoft Graph API.
    • FCA-205617: No new data is syncing to Intelligence from the UEM console.
    • FCA-205651: Unable to send the Push Notifications/Email notifications using Bulk Management.
    • MACOS-3984: MacOS profile repeatedly encounters “Device Profile Corrupted” error.
    • Last Update: CW31
  • Workspace ONE UEM 22.12
    • Patch Level 22.12.0.26
    • AAPP-15108: SIM Card Change Compliance Policy is being falsely marked as non-compliant for some devices.
    • AGGL-14962: Android Tunnel incorrectly reports ”No Managed Applications” even when present.
    • AGGL-15033: Android Enterprise Wi-Fi profile (WPA/WPA2 Enterprise) is unable to save Domain field.
    • ARES-25829: Profile installation status is not loading for profiles deployed to the entire environment.
    • ARES-25935: Increased stored proc timeout as temporary fix until the epic is complete.
    • CRSVC-38595: Enable migration of invalidate refresh token flow from AAD to Microsoft Graph API.
    • MACOS-3983: MacOS profile repeatedly encounters “Device Profile Corrupted” error.
    • Last Update: CW31
  • Workspace ONE UEM 23.02
    • Patch Level 23.2.0.16
    • AGGL-14826: Clicking “Add version” at Assignment page of an Application Control profile reverts App control profile to default settings.
    • AMST-39297: Seed 23.02.5 patch to UEM console.
    • RUGG-12243: Android device staging fails as cached sideload package is downloaded instead of new config.
    • ARES-25573: App publish not being retried due to a catch block and sync SP deadlock issue.
    • CRSVC-38596: Enable migration of invalidate refresh token flow from AAD to Microsoft Graph API.
    • Last Update: CW31

Leave a comment

Trending