Welcome to the anywhere workspace

Week 50-2023 VMware Enduser Computing Updates

🎯 Blog: A New Exciting Era for EUC 🎯 Week of new releases for Intelligent Hub 🎯 Lots of new KBs, Techzone and Blog Posts

JuliusLienemann
11 minutes
, , ,

Release Updates Week 50

Workspace ONE Launcher 23.11 for Android

  • New Features
  • Block Launcher until Tunnel is readyIn our continued efforts to provide excellent on-device user experience, we have introduced a configuration that once applied will block access to Launcher canvas until Tunnel is ready. This ensures that once the user logs into the device they are only able to interact with applications when all dependent components and configurations are ready.
  • Enhance Guest and Vendor ModeWe have made two notable enhancements to Guest and Vendor Mode to make them more standalone. First, we have changed the terminology from ‘Login’ to ‘Logout’ when logged into one of these modes. Previously, when a user was logged to either Guest or Vendor mode, they had an option within this mode to ‘login’ to the regular Check-in Check-out (CICO) mode. Now, instead they will see ‘logout’ and have the option to login to other modes, once they have successfully logged out of either of these modes.Secondly, we have added a configurable option that emphasizes to the device user that they are in one of these modes. This is to ensure that if one of these modes is being used in a supplemental or temporary manner, that the user is acutely aware and is able to easily discern this with a message that is front and center on the Launcher canvas that highlights that they are in one of these modes. 
  • Logout Shared device on Device InactivityThis feature allows the admin to configure a timeout for the device that matches the screen timeout of the device. Once the screen times out, the shared device session also logs the user out ensuring whoever picks up the device next is not able to view previous session and requires to re-authentication to establish a new shared device session.

Workspace ONE Content for iOS 23.11.2

  • General Improvements

Workspace ONE Intelligent Hub for Linux 23.10

  • Device Wipe – In addition to Enterprise Wipe which unenrolls, uninstalls the Hub and removes any content pushed down with Workspace ONE UEM, this new functionality, device wipe, provides a more extensive wipe, typically in response to a lost or stolen device. Device wipe emulates a factory reset on the Linux device when invoked by the admin. This removes apps, users, the user’s files/data, Wi-Fi connections, and other items to make the device unusable, requiring a new install of Linux.
  • Device Reboot – This command reproduces the effect of powering the device off and on again.
  • More ws1HubUtilenhancements
    • Added a symbolic link to ws1HubUtil such that the device side user no longer needs to change directory in order to execute.
    • We removed the sudo requirement for status & version commands
    • Additionally, ws1HubUtil now explicitly checks for the commands that require sudo, providing more security and better error handling.
  • Bug Fixes

Workspace ONE Intelligent Hub for macOS 23.10

  • Updates to Hub Health feature
  • Improvement to Logs – removal of unnecessary entries
  • Drop support for macOS 10.15
  • Upgrade to Sparkle and JWTDecode
  • Upgrade Python to 3.11.6 along with openssl and sqlite
  • Bug Fixes

Workspace ONE Intelligent Hub for iOS 23.11

  • HUBI-10310: Device Name in UEM for iOS 16+
    • Apple removed the ability for apps to know what the device name was in iOS 16, we are bringing some of that functionality back for MDM devices.
    • This is specifically useful for customers using Check-in/Check-out and identifying their devices
  • Known Issue: The device name may not show up automatically if the Hub App is deleted and reinstalled, it will show the generic name. The current workaround is to sync the device and the device name will appear.

Workspace ONE Intelligent Hub for Android 23.11

  • New Non-critical Device Action in Hub to Lock Device: Hub is introducing a new non-critical action, Lock Device, which can be executed by the user remotely on any of the enrolled devices like other device actions. It enables users to protect a device from an unauthorised user access if it is lost or stolen without requiring any help from the IT/Service desk team.
  • Resolved Issued
    • HUB-10041: Access denied with Certificate-based authentication enabled on Android 9 and below devices
    • HUB-10233: Microsoft Authenticator app is prompting for device registration

Workspace ONE ITSM Connector for ServiceNow 4.5

  • Introduced workflows and scripts.
    We’ve added the ability for a Service Desk Engineer to run Freestyle Orchestrator workflows and Workspace ONE UEM scripts on Windows and macOS devices from within ServiceNow Incidents. The new Workflow feature is found in an incident on the Workspace ONE UEM tab > Additional Details > Workflows.
  • Added Search by Serial Number.
    Enhanced the ITSM Connector by providing a Search by Serial Number option for cases where the Configuration Item information in ServiceNow is not populated correctly to have the Serial Number for devices. The search feature can be managed from the Application Default Configuration > Workspace ONE Device Search.
  • Removed the dependency on Incident Status.
    We enhanced the ITSM Connector by showing the Device information regardless of the ticket status
  • Removed Notes if the device is not found.
         We removed the functionality of adding Notes to the incident when a device is not found in Workspace ONE UEM.

New Apple Builds Are Now Available

Deployment and mobile device management (MDM) introduce new features for iPhone, iPad, Mac, Apple TV, and Apple Watch devices. These updates include the following operating systems:

  • iOS 17.2
  • iPadOS 17.2
  • macOS 14.2
  • tvOS 17.2
  • watchOS 10.2

For more information, see MDM restrictions for iPhone and iPad devices and MDM restrictions for supervised Apple devices.

What’s new in managing Apple devices.

New Beta Builds:

  • iOS 17.3 Beta 1 (21D5026f)
  • iPadOS 17.3 Beta 1 (21D5026f)
  • macOS 14.3 Sonoma Beta 1 (23D5033f)
  • tvOS 17.3 Beta 1 (21K5625e)
  • watchOS 10.3 Beta 1 (21S5625c)

Important KB Articles and Announcements

Please note: KBs may get updated after being referenced here. Please always follow the link to the original post in kb.vmware.com

An exciting new era for End-User Computing

  • Broadcom completed its acquisition of VMware on November 22, and on December 7 announced its intent to divest the End-User Computing Division. We view this as a powerful benefit for our customers and an opportunity for our partners. We’re excited to share why.
    • The EUC Division is financially strong with healthy growth and profitability.  
    • We have an innovation engine that continuously delivers market-leading solutions — Workspace ONE and Horizon.
    • Our newly expanded EUC Division covers all critical business functions from IT to Customer Support.
    • The EUC business is led by an experienced team with deep domain expertise.
    As we prepare for this next phase, we’ll bolster our investment in R&D, delivering mission-critical solutions and supporting our customers.

VMware EUC related Security Advisories:

Moderate Severity – VMSA-2023-0027

  •  VMSA-2023-0027 – VMware Workspace ONE Launcher updates addresses privilege escalation vulnerability. (CVE-2023-34064)

High Priority KBs

Recently updated or added KBs (Links)

Digital Workspace Techzone, Blog and YouTube Updates

3rd Party Blog Updates & Industry News

December Software Releases

SystemComponentReleaseAnnouncementRelease Date
HorizonServer Components and Clients2212.2Horizon Server01.12.23
HorizonHorizon Cloud Service Next Gen2311Release Notes01.12.23
AndroidContent23.10.1Release Notesstaged
AndroidHub23.11Release Notes14.12.23
iOSContent23.11.2Release Notes08.12.23
LinuxHub23.11Release Notes11.12.23
macOSHub23.10Release Notes11.12.23
iOSHub23.11Release Notes12.12.23
AndroidLauncher23.11Release Notes12.12.23
BackendITSM Connector for ServiceNow4.5Release Notes14.12.23

Upcoming EUC Events

EventStart DateDetails
EUC Customer Success Quarterly Webcast SeriesNext EUC Customer Success Quarterly Webcast Coming Soon!Watch our latest webcasts:
•Managing, Automating, and Supporting a Frontline Device Fleet
•What’s New with Horizon Cloud Service next-gen and Improving VMware Horizon User Experience with Workspace ONE Intelligence
•Windows 10 Multi-User Support for UEM & Revolutionize your IT Environment with Freestyle OrchestratorWatch all additional previous webcasts On-Demand here.
Mware EUC TechInsights, Windows 10multi-user supportRegistration: Link 19 December
VMUGWatch On-Demand webcasts here.Register for upcoming live webcasts here.Register for Regional VMUG events here.
End User Computing WebinarsSign up for upcoming webcasts and watch VMware On-Demand webcasts here. 

EUC UX Research Opportunities  

  • Our goal is to gather insight into user behaviors, motivations, and goals, so we can use those insights to inform and strengthen product and design decisions.
  • Interested in giving your opinion and making your voice heard? Check out what’s available!
  • Bonus: We give VMWare swag to Customers who participate  
EUC Product / FeatureTopicOpportunity TimeSignup Link
Horizon Next-Gen (V2)EUC Design wants to improve the experience when onboarding the new Next-Gen Horizon Cloud Service Console. Whether you’ve partially or fully onboarded, we want to better understand areas of challenge specifically with Pools, Pool Groups, and Entitlements.45-minute, 1×1 conversation via Zoom where we will walk through the onboarding flow via a staging environment and discuss the experience.
Interviews are still fielding! SIGN UP HERE

Latest Patch & Seed Script Versions

  • OS Updates Seed Script
    • Most recent update: Seed Script for tvOS 17.2.0 (21K365), macOS Sonoma 14.2.0 (23C64), macOS Ventura 13.6.3 (22G436) and macOS Monterey 12.7.2 (21G1974), iOS 17.2.0 ..
    • Last Update: CW50
  • Seed Script for latest Device Model Information
    • Seed Script to support macOS model – MacBook Pro (14-inch, M3, Nov 2023) – Mac15,3
    • Last update: CW49
  • Workspace ONE UEM 22.06
    • Patch Level 22.6.0.48
    • AMST-40091: UEM console fails to edit windows profiles the day after they were created onwards.
    • CRSVC-42820: Secure Channel – Cannot find the original signer issue.
    • CRSVC-43551: Increased CPU usage by CiscoISE App pool.
    • SINST-176235: UEM Patch installer 22.12.0.31 fails at Cert Installer execution.
    • UM-8411: Unblock the Auto/Manual syncs during Advanced Ldap Sync cycle failure
    • Last Update: CW48
  • Workspace ONE UEM 22.09
    • Patch Level 22.9.0.45
    • CRSVC-43327: Increased CPU usage by CiscoISE App pool.
    • AGGL-16159: Android VPN profile shows “Failed to save profile” error when trying to modify the profile or add a version to the profile.
    • Last Update: CW50
  • Workspace ONE UEM 22.12
    • Patch Level 22.12.0.39
    • CRSVC-43329: Increased CPU usage by CiscoISE App pool
    • Last Update: CW48
  • Workspace ONE UEM 23.02
    • Patch Level 23.2.0.31
    • ARES-26866 DDUI – Incorrect records are getting fetched due to ordering of duplicate payload templates.
    • ARES-26576: Auto purge for device application logs and move threshold on percentage basis.
    • Last Update: CW49

Workspace ONE UEM 23.06

  • Patch Level 23.6.0.14
    • ARES-27142: Profile is showing out of date status on installation after adding the version.
    • ARES-27151: Workspace ONE UEM API endpoint continually failing with error “Collection cannot be null or empty.”
    • ARES-27168: Remove Wi-Fi credentials data from view XML for profile type WPA/WPA2 Enterprise Wi-Fi configuration.
    • PPAT-15811: Tunnel server traffic rule with Pac Reader does not work.
  • Last Update: CW50

Leave a comment

Trending