Weekly digest of new Knowledge Base Articles from The Workspace ONE Team in the My Workspace ONE Portal
New KB articles published for the one week period starting on 05/13/19 and ending on 05/17/19
Posted on May 20th, 2019
Customers utilizing (Legacy) ENSv1 required to update CNS pinning certificate expiring on June 22, 2019
Customers using an On Premises instance of ENSv1 are required to update CNS pinning certificate. Current CNS certificates set to expire on June 22, 2019. If the certificate is not updated, end-users will stop receiving email notifications after June 22, 2019. More information about the customer impact and mitigation steps can be found in the full article.
- IPIVD-215, ISDK-169476: Added support for
dynamiccompromisedrules updates to allow for over-the-air updates to the compromised detection algorithm in the SDK.
- IPIVD-189, IPIVD-190, IPIVD-200: Security improvements and updates.
- Introducing additional widget templates for the following use cases:
- App Adoption and Popularity - Track the adoption of a single application or a list of applications.
- App Deployment - View the state of your application inventory and the application installment life cycle.
- Device Health - Get a quick insight into the desired state of devices, including available storage and battery health.
- Device Refresh - Focus on devices that need to be refreshed.
- Device User Adoption and Usage - Use additional metrics to determine how devices are used across your environment.
- Device Utilization - Understand specifics that make-up your device deployment.
- Workspace ONE Catalog Adoption and Behavior - Determine how far your adoption of Workspace ONE Catalog has progressed and identify common errors.
- Automation activity logs are now available as a dashboard widget category in Intelligence > Automation Run History under My Dashboards.
- Use the Automation Run History category data to track success and failures when an automation runs.
- Added widget templates for the Automation Run History category to provide a sample starting point.
- Enabled Sensors for Reporting and Dashboards.
Windows devices have hundreds of attributes that you can track beyond the ones tracked by Workspace ONE UEM, including hardware, OS, certificates, patches, and apps. To track all these attributes, we created Sensors. Now you can create a sensor in the VMware Workspace ONE UEM console to monitor a specific attribute and use this as a filter in both reports and widgets in both Workspace ONE UEM and Workspace ONE Intelligence. Sensors are written in Powershell, so whatever you can do in Powershell you can do with Sensors.
Reminder: Upcoming End of General Support for Email Notification Service (ENS) v1 (Legacy) Installer
VMware Email Notification Service (ENS) v1 (Legacy) will be removed from the My Workspace ONE portal on July 1, 2019 and will reach End of General Support on October 1, 2019. After October 1, 2019, VMware cannot guarantee full support for ENS. We first announced the end of support for ENS in a separate product announcement article in the fall of 2018. More information including the customer impact and benefits of migrating to ENS2 can be found in the full article text.
AAGNT-184382: "Set as active network" not enabled after being pushed to Samsung devices
A Wi-Fi profile created by providing SSID name (Enter Wi-Fi SSID other than one device is already connected), password, security type and also enabling "Set as active network" option will not connect to a new Wi-Fi AP even though "set as active network" option is enabled once pushed to the device.
[Resolved] CMSVC-9328: ObjectGUID required in Workspace ONE UEM SAML response during authentication
Previously, Administrators could bypass the SAML authentication flow and access the UEM Console by entering their Active Directory credentials. Workspace ONE UEM 1811 enforced SAML authentication flow if it was configured at the Organization Group where the Administrator’s account exists. Now, however, in order to truly support SAML authentication in a multi-domain setup, the ObjectGUID attribute must be configured on the Identity Provider settings page. This attribute will allow Workspace ONE UEM to uniquely identify Administrators, even in a multi-domain configuration and enable their secure access to the console. More information including mitigation steps and fix version details can be found in the full article text.
Configuring Okta LDAP for use with VMware Workspace ONE UEM
VMware Workspace ONE UEM offers the ability to integrate with existing corporate user management infrastructure via LDAP or SAML protocols. Customers using both Okta and Workspace ONE can leverage Okta as the source of truth for user management and take advantage of existing user groups in Workspace ONE by integrating with Okta through LDAP.
Maintenance Notification for Workspace ONE Deployments using Stage Now EMM Connect
All OS maintenance activity for the Stage Now API Server was performed on Saturday, May 18, between 2:00 PM and 5:00 PM EST (1 hour outage) for all regions.