Getting Ready for Apple Fall 2018 Releases

WWDC 2018 has just concluded and with it the anticipated announcement of iOS 12, macOS 10.14, and tvOS 12. This page will be the hub for preparing your devices and users for these updates as well as any further changes that may get announced until their expected general availability in Fall 2018. A lot of these updates were announced during the What’s New in Managing Apple Devices Session. For information regarding general features announced at WWDC, please review our summary from the different sessions on our public blog. 

Please subscribe to this page to get notified for all changes made so your VMware Workspace ONE environments are ready for these updates. 

 

General Information

As of June 4th, all initial beta downloads are available for Apple developers. It is highly encouraged to install these betas on several devices for each platform and test your organizations unique use cases in your VMware Workspace ONE UEM environments. It is also recommended to review the Release Notes for each release to be aware of any known issues with these platform betas. Our teams will be testing our applications and supported versions against these betas as well and provide updates for Known and Resolved Issues on this page.  

Last year, Apple announced the updates that came to Apple School Manager for adding locations to VPP purchaser accounts. This year this same capability is available to the full enterprise with the release of Apple Business Manager. This is a new portal for managing your DEP and VPP accounts in a single view. Just like its support for Apple School Manager, VMware already supports Apple Business Manager and all accounts migrated will continue to function as expected. Please reference the knowledge base article here to use recommended practices when migrating to ensure optimal setup of your accounts.

 

iOS

S/MIME 

The first is with SMIME encryption for Exchange and Email payloads. This is new collection of keys to provide enhanced customization options for the native mail client. Some of these keys are replacements to existing keys. It is important to know that no keys previously released will break on iOS 12 devices so existing profiles will continue to function. If both the legacy key and the new key are sent down to the same configuration on an iOS 12 device, the mail client will use the new key’s value and ignore the legacy key. 

Modern Auth for Native Mail 

Another change to the Exchange payload is to allow the option to specify the connection to use OAuth for authentication to the mail server. If this is enabled, do not specify a password to use. 

Notifications 

The second update is with the Notifications payload to provide the option to hide notifications in CarPlay or disallow critical notifications to ignore Do Not Disturb and ringer settings.  

Restrictions 

As is customary, there were several new restrictions announced this year for iOS 12. The first prevents users from editing the Date & Time settings so that the date and time is always set automatically based on location. It is important to note that the date and time can only be set automatically if the device has access to cellular data or Wi-Fi with location enabled). Also, there were restrictions added around allowing password sharing, auto filling passwords, and requiring authentication prior to a password share. 

DEP Skip Screens 

There is also an additional key for skipping Setup Assistant screens for iMessage and FaceTime. Upon support for this key, be sure to enable skipping this screen during setup. 

Proxy Changes 

Another change to iOS 12 is that FTP and File URL schemes for Proxy Automatic Configuration (PAC) are deprecated. HTTP and HTTPS are the only supported URL schemes for PAC. This includes PAC URLs configured by a user in Settings, or by a configuration profile. 

 

macOS

Consistent DEP onboarding experience 

macOS 10.14 or macOS Mojave is expected to provide a more iOS-like enrollment approach especially for devices that are part of DEP. Please monitor this page for updates regarding this change as more information is uncovered. 

Restrictions & Modern Auth for Native Mail 

It’s great to see parity with configuration options with iOS, where macOS also the gets the ability to can force the managed account to authenticate with OAuth as well as the password autofill restrictions with macOS 10.14 

 

tvOS

Managed Software Updates 

tvOS 12 continues Apple’s trend of adding existing iOS functionality into the tvOS platform. With tvOS 12, devices can now be updated using the scheduleOSUpdate command implemented for iOS and macOS. It appears that with the initial beta that the new capability to target a specific OS version to upgrade a device to is not available. This means sending a scheduleOSUpdate command will update the device to the latest supported version. As a reminder, the defer OS update restriction to hide updates from a user for up to 90 days is not supported on tvOS. 

VPP for tvOS 

Also, with tvOS 12, there is support for the installation of VPP apps. It is expected that this will include all current device & user based VPP functionality currently on iOS. Please check the VMware release notes for when this will be available. 

 

Workspace ONE UEM Applications

Below is a list of VMware’s supported app suite and the latest version tested with no critical issues detected (Note: Testing is currently in progress; the table will be updated with specific versions in the near future)

Application Version

iOS AirWatch Agent

 

AirWatch Container

 

iOS Workspace ONE

 

VMware Boxer

 

VMware Content Locker

 

VMware Browser

 

VMware PIV-D Manager

VMware Tunnel

 

 

Known Issues

  • You may not be able to complete setup after restoring a backup from a managed iOS device to a different device. The current workaround is to restart the device.
  • Skype may crash on launch after logging in
  • Your time zone may not update automatically. The current workaround is to set the Time Zone manually in Settings > General > Date & Time.
  • You cannot generate a sysdiagnose using the Analytics menu item in AssistiveTouch and Switch Control. The Feedback Assistant should automatically generate a sysdiagnose when you file feedback.

 

Resolved Issues

  • Mail processes Exchange push notifications more reliably.
  • MDM will correctly report when an update is available for an app that was assigned using the Volume Purchase program.

 

Support Contact Information

To receive support, either submit a ticket via the My Workspace ONE portal or call your local support line.

 

Best Regards,

The VMware Workspace ONE Team  

Other Languages: 日本語

Have more questions? Submit a request

0 Comments

Article is closed for comments.