Release Updates Week 42
Workspace ONE Intelligent Hub for Android 23.09
- [Limited Availability] Support to perform Certificate Based Authentication (CBA) into Access/Hub Services: Hub now supports the ability to perform certificate based authentication (CBA) into Access to use various Hub Services features (e.g. app catalog, notifications, support, etc.) natively. So far, it has been supported using Workspace Access Mobile SSO feature and requires Tunnel app to be installed and configured on the device to perform the CBA. With the new native capability, there is no dependency on Tunnel for CBA. The new native CBA in Hub is currently supported for only 3rd party CAs, support for AirWatch CA will be coming soon. The feature is currently controlled through an admin configuration (by default it is disabled) and supported only for Android 10+.
- Bug Fixes
Workspace ONE Intelligent Hub for iOS 23.09
- Support for iOS 17
- Accessibility Improvements
- Improvements to Workspace ONE Mobile Threat Defense background execution and threat detection mechanisms
- Bug fixes and general improvements
- Customize the Dark Mode Navigation Bar Background and Font Color for Workspace One Intelligent Hub
Admins can customize the Dark Mode navigation bar background and font color from the Branding tab in the Hub Services admin console. When the Workspace ONE Intelligent Hub Web is set to dark mode, it will reflect the colors defined in the console.
Note: This feature is currently supported only on the Hub Web platform. For other Workspace ONE Intelligent Hub platform support, please refer to their release notes.
VMware Workspace ONE Access | OCTOBER 2023
- Workspace ONE Access Connector 23.09Workspace ONE Access connector 23.09 is compatible with Workspace ONE Access Cloud and Workspace ONE Access for FedRAMP.
- Resolved Issues:
- HW-180874: The Default Launch Client setting for Horizon virtual apps collections is ignored
- HW-170798: Unable to sync Horizon Enterprise virtual apps collections when using a connection via a proxy
- HW-174051: Updating a virtual apps collection resets the network range
- HW-172671: Citrix App launch fails on Firefox browser
- HW-171435: Citrix App launch fails when the first connector in the virtual apps collection is down
- HW-170576: Unable to sync virtual apps collections when using a connection via a proxy
- HW-174269: Workspace ONE Access Connector 22.09.1 fails to install when the domain name has a ‘_’ character
- HW-181989: Saving or syncing a Horizon virtual apps collection when a Horizon server is down removes existing metadata
- HW-170576: When a proxy is configured, the Virtual App service is unable to fetch metadata from a Horizon Cloud Service Single-Pod Broker setup
Workspace ONE Content for iOS 23.10
- Integrated Authentication for on-prem repositories – This will allow users to login seamlessly into on-prem repositories with the certificates set in the Workspace ONE SDK profile.
Important KB Articles and Announcements
Please note: KBs may get updated after being referenced here. Please always follow the link to the original post in kb.vmware.com
- Custom data entered in the auto-complete fields in the DDUI for iOS Profile payloads, like Restrictions and Home Screen Layout, does not get saved in the UEM console UI, leading to the policy not being applied as expected when the profile is deployed to the device.
Workspace ONE Access: Deprecation of Cipher Suites and Hash Algorithm Support (94409)
- We would like to inform you of an upcoming change in the security protocols of Workspace ONE Access that is planned to take effect in January 2024. This change is part of our ongoing commitment to maintaining the highest standards of security and data protection.
Windows Update settings are still configured after Profile removal (94961)
- Removing the Windows Updates profile restores the default configuration, but does not remove the MDM configuration completely. As a result, end users do not regain access to configure Windows Updates on their device despite the absence of an installed profile.
Removing the Windows Updates profile replaced device-side configurations with the Microsoft default values rather than explicitly deleting them, restoring the Windows Updates values to what was present before deploying the profile. The motivation for handling removal in this manner was to avoid a potential failure when an admin triggers the removal of the same node from multiple sources. - The downside is that because the affected nodes are still technically managed by MDM, the settings UI continues to show the corresponding Windows Updates options as managed and thus disabled. End users do not regain the functionality to configure Windows Updates on their device, despite no active profile being installed.
High Priority KBs
- Workspace ONE UEM – Updated requirements for on-premise cumulative patches (94706)
- The base GA version for current Workspace ONE UEM releases is being revised through updated installers. On-premise customers will need to consume a revised installer for a given major version before any future cumulative patches can be deployed for that major version. These revised installers are required to address compatibility issues with regular cumulative patches.
- Introducing Workspace ONE (WS1) UEM Next-Gen SaaS
- VMware is excited to announce that the resource management & tracking improvements, the first major feature-based milestone in the Workspace ONE UEM Modernization Journey, is now available for customer testing. These improvements will be enabled in limited testing environments (CN135) starting on Thursday August 24, 2023.
- [Resolved] SINST-176145 – Multiple Workspace ONE UEM application pools and services may not start once stopped (93877)
- Workspace ONE UEM services and application pools may fail to start once stopped. This issue is typically observed alongside the following error message in the service’s log[RESOLVED] SINST-176160 – Workspace One UEM – Unable to edit existing or create new DDUI profiles. (93911)
- Upon deploying the patches noted in KB 93877, you may experience an error when creating or editing DDUI device profiles (iOS, macOS, Android Enterprise) in the Workspace ONE UEM Console.
- Getting Ready for Android 14 (2023)
- Getting Ready for Apple Major OS Releases 2023
Recently updated or added KBs (Links)
- Workspace ONE UEM enrolled devices are intermittently getting enterprise wiped when upgraded to iOS 17 (94814)
- ARES-26458 – Custom data entered in the auto-complete fields in the DDUI for iOS Profile Payloads fails to save (95190)
- Following an upgrade to Workspace One Access v22.09 or VIDM 3.3.7, the main dashboard and reports appear blank when performing searches. (91559)
- vGPU enabled Instant clone desktops throw exception of unknown vGPU profiles (59271)
- Workspace ONE UEM – Updated requirements for on-premise cumulative patches (94706)
- Horizon Administrator: Error message: InvalidPipeArgument: ‘Missing locale data for the locale “en”.’ for pipe ‘e’ in User Interface after a browser update (94667)
- Workspace ONE Access: Deprecation of Cipher Suites and Hash Algorithm Support (94409)
- VMware Horizon View 7 Composer help center (2087379)
- Performing an end-to-end backup and restore for Legacy Releases of VMware Horizon View (1008046)
- Horizon 8: Intel Flex Series GPUs do not support Windows Server 2019 Desktop Mode (95143)
- Horizon environment trigger “Update option values” tasks every 5 minutes in vCenter Web Client Recent Tasks (56982)
- Enhanced Security Status is stuck in PENDING ENHANCED after changing Message Security Mode from Enabled or Mixed to Enhanced in Global Settings in Horizon (91923)
- Force HID Device USB reconnection from Horizon Client (76596)
- Automated Device Enrollment fails on macOS 14 Sonoma if Custom Enrollment is disabled (94577)
- ChromeOS EMM Registration Updates (92439)
- Google Play Inactive Account Policy Updates (2023) (94382)
- Windows Update settings are still configured after Profile removal (94961)
- Horizon Mac Client : PostScript (PS) and Encapsulated PostScript (EPS) printing may not work after upgrading to macOS 14. (94729)
- How to show the correct time format for the Workspace ONE Intelligence report (95079)
- Addressing Immediate Logout Problem in VMware Horizon Universal Console when login to ‘https://cloud.horizon.vmware.com‘ (95074)
- After updating Windows 10 or 11 with KB5030219, Windows Start Menu stops working, when any App Volumes volume is attached. (94634)
Digital Workspace Techzone, Blog and YouTube Updates
- Horizon 8 Architecture
- Barcelona bound: A deep dive into digital employee experience sessions at VMware Explore 2023
- Compliance Integration with MS Office 365 using Intelligence and Graph APIs
- The power of data and intelligence in the modern workplace: The VMware Anywhere Workspace vision at Explore Barcelona
- Behind the Screens: Digital Workspace Mastery with Pavitra Nagendrappa | VMware Hands-on Labs
- Announcing the Evaluation Guide for VMware Horizon Cloud – Next-Gen
3rd Party Blog Updates & Industry News
- Google: Read this year’s Android Security Paper for the latest on mobile protections
- Android Enterprise Customer Community: Clarification on inactive account policy
- Okta: The State of Zero Trust Security 2023
- Patrick Zoeller: Digital Workspace – Workspace ONE Intelligence – Video Series: Getting started with Workspace ONE Intelligence
- Mobile Jon: Okta Desktop Password Sync Delivers Platform SSO to MacOS
- CMTY Podcast #665: Streamline Windows OS Updates with VMware Workspace ONE w/ Guest Grischa Ernst
October Software Releases
System | Component | Release | Announcement | Release Date |
Android | Boxer | 23.09 | Release Notes | 02.10.23 |
Backend | Console DSAAS | 23.06 | Release Notes | 03.10.23 |
iOS | VM Tunnel | 23.06.2 | Release Notes | 03.10.23 |
Android | Hub | 23.09 | Release Notes | 17.10.23 |
macOS | Hub | 23.09 | Release Notes | 10.10.23 |
iOS | Content | 23.10 | Release Notes | 18.10.23 |
iOS | Hub | 23.09 | Release Notes | 19.10.23 |
Backend | WS1 Access SaaS | October 2023 | Release Notes | 20.10.23 |
Backend | Hub Services SaaS | October 2023 | Release Notes | 20.10.23 |
Upcoming EUC Events
Event | Start Date | Details |
VMware EUC TechInsight – Revolutionize ITSM with Workspace ONE Intelligence | Sander Noordijk (Solution Engineer Digital Workspace) will walk you through this process using an example for an ITSM Solution. [REGISTER HERE] | 31 October 2023 |
EUC Customer Success Quarterly Webcast Series | Next EUC Customer Success Quarterly Webcast Coming Soon!Watch our latest webcasts: •Managing, Automating, and Supporting a Frontline Device Fleet •What’s New with Horizon Cloud Service next-gen and Improving VMware Horizon User Experience with Workspace ONE Intelligence •Windows 10 Multi-User Support for UEM & Revolutionize your IT Environment with Freestyle OrchestratorWatch all additional previous webcasts On-Demand here. | |
VMware Digital Workspace Virtual Customer Success Roundtable | Next VMware Digital Workspace Virtual Customer Success Roundtable Coming Soon! | |
VMware Explore 2023 | VMware Explore US Watch 2023 EUC session replays here. VMware Explore Europe Barcelona | Fira Gran Via Register Now Watch replays from VMware Explore Europe 2022 here. | 6-9 November 2023 |
VMUG | Watch On-Demand webcasts here.Register for upcoming live webcasts here.Register for Regional VMUG events here. | |
End User Computing Webinars | Sign up for upcoming webcasts and watch VMware On-Demand webcasts here. |
EUC UX Research Opportunities
- Our goal is to gather insight into user behaviors, motivations, and goals, so we can use those insights to inform and strengthen product and design decisions.
- Interested in giving your opinion and making your voice heard? Check out what’s available!
- Bonus: We give VMWare swag to Customers who participate
EUC Product / Feature | Topic | Opportunity Time | Signup Link |
Horizon Next-Gen (V2) | EUC Design wants to improve the experience when onboarding the new Next-Gen Horizon Cloud Service Console. Whether you’ve partially or fully onboarded, we want to better understand areas of challenge specifically with Pools, Pool Groups, and Entitlements. | 45-minute, 1×1 conversation via Zoom where we will walk through the onboarding flow via a staging environment and discuss the experience. | Interviews begin the week of Oct 16. SIGN UP HERE |
WS1 Intelligence | Sneak peek at a new data query feature, which would allow Admins to iteratively draft a query to explore the data within Intelligence, so that they can better understand the data and answer questions on demand. | You’ll be shown 4 images and asked to pick which you like best – it can take up to 5 minutes. | PICK THE WINNER HERE |
Latest Patch & Seed Script Versions
- OS Updates Seed Script
- Most recent update: Apple seed script for iOS 16.7.1 (20H30)
- Last Update: CW41
- Seed Script for latest Device Model Information
- Seed data for iPhone 15 models
- Last update: CW40
- Workspace ONE UEM 22.03
- Patch Level 22.3.0.53
- SINST-176173: Fixed issues with DDUI profile screen.
- CMEM-186886: PowerShell script and Workspca eONE UEM side changes for EXO V3 module.
- AGGL-15441: Unable to create Android profile with a TimeSchedule, whose ScheduleListUUID is Null.
- CRSVC-40042: Only save public key component of certificate to database.
- AGGL-15324: Remove EFOTA sample from microservices.
- PPAT-14514: .NET core version upgrade to 6 for Tunnel microservice.
- CRSVC-39362: Memcached uses only one server.
- CRSVC-40107: Private key not exportable in manual flow.
- CRSVC-37822: Migrate invalidate refresh token flow from AAD to Microsoft graph API.
- CRSVC-37515: Update token refresh Azure AD graph API call.
- Last Update: CW40
- Workspace ONE UEM 22.06
- Patch Level 22.6.0.45
- MACOS-4059: macOS 14 ADE enrollment fails if Custom Enrollment is off.
- CMCM-190725: Status of document in content detail report was not corrected.
- CRSVC-41707: Tunnel Gateway unreachable from newly enrolled iOSdevices.
- AAPP-16439: Update Device Information query Cellular keys.
- AGGL-15529: Google seems to have increased oAuthToken length (AndroidWorkSetting AccessToken got truncated).
- Last Update: CW40
- Workspace ONE UEM 22.09
- Patch Level 22.9.0.40
- MACOS-4060: macOS 14 ADE enrollment fails if Custom Enrollment is off.
- CMSVC-17277: Custom Script – Legacy to Reusable smart group.
- CMCM-190726: Status of document in content detail report was not corrected.
- ARES-23912: TOU page crashes in Workspace ONE UEM console.
- AAPP-16440: Update device information query cellular keys
- Last Update: CW40
- Workspace ONE UEM 22.12
- Patch Level 22.12.0.34
- ENRL-3856: Windows devices within the customer OG were shown as being enrolled to the users from a different tenant in the same console.
- RUGG-12445: Multi user CICO was failing for Android AOSP device.
- ARES-26621: Device logs were not uploaded to the Workspace ONE UEM console.
- AGGL-15635: Android manufacturer and model auto-seeding issues.
- RUGG-12355: Unable to get the launcher speed lock down feature working.
- CRSVC-40903: Conditional access logs (Kibana logs) were not working when the device was enrolled to the child OG and conditional access was configured at the parent OG.
- CRSVC-41710: Tunnel gateway unreachable from newly enrolled iOS devices.
- INTEL-52990: Database patch failing on upgrade.
- Last Update: CW41
- Workspace ONE UEM 23.02
- Patch Level 23.2.0.26
- FS-4534: Seed Mac Workflow Host in canonical 23.02 release.
- FS-4501: Fix performance and workflow status reporting issues in workflow for profile installation.
- AAPP-16470: Create a script to delete DEP Enrollment Profile on Global Organization Group with expired token.
- FCA-206100: Unable to send template message to device from public app details device tab.
- AAPP-16461: Database patch upgrade is failing with patch 23.2.0.21.
- AMST-39761: Workaround for OEM update profile fails to install on device.
- CRSVC-42584: Errors related to AWDeviceSampleData private queue still present after patching the environment.
- AAPP-16539: VPN profile values are changing after publishing profile.
- AMST-39845: WNS disconnected for multiple Windows devices.
- ARES-26706: App details view page crashes when filters are selected.
- MACOS-4088: All workflows show status: In Progress.
- Last Update: CW42
- Patch Level 23.6.0.5
- FS-4302: Step to purge orphan Workflow Status records fails in “Purge Expired Sample Data” job.
- AMST-39764: WNS disconnected for multiple Windows devices.
- ARES-26473: Windows Intelligent Hub and OMADM Client reporting different versions for the same application.
- FCA-206095: Spaceman error when accessing Organization Group List View page from customer Organization Group.
- FCA-206048: Banner is not seeded into BannerFeature table.
- AAPP-16513: High CPU and Memory usage by RestrictionsSampleLatest_Load.
- FCA-206084: Unable to send the Push Notifications/Email notifications using Bulk Management.
- Last Update: CW40
Leave a comment