Getting Ready for Apple Spring 2019 Updates

Overview

Apple recently released the beta for iOS 12.2, macOS 10.14.4, and tvOS 12.2. There are several important updates related to these versions. This page will be the hub for preparing your devices and users for these updates as well as any further changes that may get announced until their expected general availability in Spring 2019.

 

iOS 12.2

One of the announced changes in the iOS 12.2 beta is a new experience for profile installations called “manual profile installation”. This change results in enrollments no longer automatically redirecting from Safari to the iOS Settings to install the MDM or configuration profile. The user must now manually navigate to system settings to install the profile.

These changes are part of the iOS platform and not the Workspace ONE platform. See the video below for an example.

iOS_Image.gif

 

Beta Details

VMware Workspace ONE is preparing to beta test the updated enrollment experiencing using iOS 12.2 (currently in beta) and is looking for customers and partners who are committed to providing product feedback. This beta is expected to launch during the week of February 25th and will run for 3 weeks. This beta will also feature new enrollment screens for non-DEP, iOS 12.2+ devices using Safari's web view, and Intelligent Hub.

If interested, please sign up using the link here.

     

Customer Impact

This occurs for enrollments initiated from Safari (web enrollment) or a client app (Workspace ONE Intelligent Hub or Workspace ONE app). Devices receiving the MDM profile through DEP and the installation of other configuration profiles (passcode, restrictions, Wi-Fi, etc.) are unaffected.

 

Workspace ONE Platform Updates

VMware is making changes to Workspace ONE UEM as well as Intelligent Hub App to include instructions and navigation links where possible in the enrollment flow assisting users to complete enrollment successfully.

While VMware does not provide active support for beta features for Apple platforms, it is important to know that our product team is working with Apple to provide feedback and update our applications and services as needed to accommodate this change.

Workspace ONE UEM will release updates to our iOS enrollment screens as part of our 1903+ console version and via a patch update to our 1811 and 1902 consoles with versions 18.11.0.24 and 19.02.0.6, respectively.

All Shared SaaS environments will be automatically upgraded. For Dedicated SaaS, please schedule an upgrade for a supported version. For on-premise deployments, please use the following links to download and install updates:

For customers not on these console versions, enrollment will continue to work, but users will not see the newest instructional screens explaining how to complete the iOS 12.2+ enrollment and return the user back to the Intelligent Hub app.
 

App Support

VMware validates their applications to ensure your devices will be successful upon upgrading. To optimize the success of your devices, users are encouraged to update to the specified versions of each iOS application below to fully support iOS 12.2. Note that some of these applications may not yet be available, but they will be released in the coming weeks and updated in the chart below.

 

Dynamic Compromised Detection

Dynamic Compromised Detection is a new feature which allows SDK applications to securely update the compromised detection algorithm over-the-air. This will allow for a faster turnaround when false positive issues are found. Customers and developers with apps using these new SDK versions which support dynamic compromised detection will no longer have to update and/or re-release their apps.

Application iOS 12 Supported Version Dynamic Compromised Version

Boxer

5.4.1

5.4.1

Content

4.17

4.17.1

Intelligent Hub

19.3

19.3

PIV-D

 

1.4.1

SDK (Obj-C)

5.9.9

5.9.9

SDK (Swift)

19.2

19.2

Send

1.2

N/A

Tunnel

3.2.1

N/A

Web

7.4

7.4

Workspace ONE

3.3.5

3.3.5

 

Restrictions

Lastly and unrelated to the enrollment changes announced, Apple also released two new restriction keys for iOS 12.2+ devices. The first prevents users from modifying the personal hotspot setting and the second prevents Siri from logging data to its backend server. Workspace ONE UEM already supports these restrictions via our Custom payload.

Please see our page for Custom XML payloads available here.

 

macOS 10.14.4

Restrictions

Apple also released a new restriction keys for macOS 10.14.4+ devices. Workspace ONE UEM already supports these restrictions via our Custom payload.

Please see our page for Custom XML payloads available here.

 

Commands

There are several new MDM commands available in macOS 10.14.4. These commands allow admins to enable/disable Remote Management on the client. This does require enrollment in Apple Business Manager or user approved MDM.

Enable

<dict>

     <key>RequestType</key>

     <string>EnableRemoteDesktop</string>

</dict>

Disable

<dict>

     <key>RequestType</key>

     <string>DisableRemoteDesktop</string>

</dict>

 

tvOS 12.2

Restrictions

Lastly and unrelated to the enrollment changes announced, Apple also released new restriction keys for tvOS 12.2+ devices. These restrictions allow admins to defer OS updates on tvOS devices similar to how this is done for iOS. Workspace ONE UEM already supports these restrictions via our Custom payload.

Please see our page for Custom XML payloads available here.

 

Other Languages: 日本語

Have more questions? Submit a request

0 Comments

Article is closed for comments.