GUIDE – NOVEMBER 2018

PRINTED 9 JANUARY 2019

INSTALLATION AND SETUPVMware Workspace ONE

INSTALLATION AND SETUP

GUIDE | 2

Table of Contents

Installation and Setup

– Introduction

– Prerequisites

– Signing Up for a Free Trial

– Launching the Workspace ONE UEM Console

– Navigating the Getting Started Wizard

– Generating the Apple Push Notification Service Certificate

– Registering Android Enterprise Mobility Management (EMM)

– Downloading the Employee Email Template

INSTALLATION AND SETUP

GUIDE | 3

Quick-Start Tutorial for Cloud-Based VMwareWorkspace ONE

Installation and SetupIntroductionThis exercise helps you set up a cloud-based Workspace ONE environment. The procedures are sequential and build upon oneanother, so make sure that you complete each procedure in this section before going to the next procedure.

PrerequisitesBefore you can perform the procedures in this exercise, you must have the following components installed and configured:

On-premises Active Directory with users available to add to the Workspace ONE UEM tenantWindows Server machine to access Workspace ONE from a web browser

Signing Up for a Free TrialComplete the following steps to begin a 30-day trial version of Workspace ONE, that includes a cloud-based deployment ofWorkspace ONE UEM and VMware Identity Manager.

1. Access Free Trial

INSTALLATION AND SETUP

GUIDE | 4

Navigate to http://www.air-watch.com and click 30 DAY FREE TRIAL.1.Enter the required information and click Start Your Free Trial.2.Allow 24 hours for your request to process.3.

2. Record Environment DetailsCheck your email for two activation email messages that contain environment details and access credentials. Note this information inthe following tables.

VMware Identity Manager Account Information

User name

Password

VMware Identity Manager server host name

VMware Workspace ONE UEM Information

User name

Password

VMware Workspace ONE UEM server host name

Now that you have signed-up for a cloud-based Workspace ONE trial and noted your environment details, you are ready to log in tothe Workspace ONE UEM Console and launch the Getting Started Wizard.

INSTALLATION AND SETUP

GUIDE | 5

Launching the Workspace ONE UEM ConsoleThe Workspace ONE UEM Console allows you to view and manage every aspect of your Mobile Device Management (MDM)deployment. With this single, web-based resource, you can quickly and easily add new devices and users, manage profiles, andconfigure system settings.

This exercise helps you to log in to the Workspace ONE UEM Console and launch the Getting Started Wizard.

1. Log In to Workspace ONE UEM ConsoleNavigate to your Workspace ONE UEM tenant and enter your Workspace ONE admin account information to authenticate.

In the browser of your choice, Navigate to https://<WorkspaceONEHostname> where WorkspaceONEHostname is the1.host name of the Workspace ONE UEM tenant.For User name – Enter the name provided in the activation email.2.For Password – Enter the password provided in the activation email.3.Click the Login button.4.

INSTALLATION AND SETUP

GUIDE | 6

2. Accept License Agreement

Review the End User License Agreement, and click Accept.

3. Configure Security Settings

INSTALLATION AND SETUP

GUIDE | 7

Configure the settings for the Password Recovery Question:

You may need to scroll down to see the Password Recovery Questions and Security PIN sections.1.Password Recovery Question – Keep the default question selected.2.Password Recovery Answer – Enter VMware1!3.Confirm Password Recovery Answer – Enter VMware1!4.

Configure the Security Pin, which protects certain administrative functions in the Workspace ONE UEM Console.

Security PIN – Enter 1234.1.Confirm Security PIN – Enter 1234. 2.Click Save.3.

4. Launch Getting Started Wizard

INSTALLATION AND SETUP

GUIDE | 8

On the dialog box that appears, click Begin Setup to launch the Getting Started Wizard.

Now that you have successfully logged in to the Workspace ONE UEM Console and launched the Getting Started Wizard, you areready to Navigate the Getting Started Wizard.

Navigating the Getting Started WizardSplit into four modules, the Getting Started Wizard facilitates the initial configuration of Workspace ONE. For ease of use, it tracksprogress and can be started, paused, and restarted later. You can also review and change previous settings.

This exercise helps you to navigate the Getting Started Wizard.

1. Explore the Getting Started Wizard

Open the Workspace ONE module and note the following buttons and icons:

Incomplete – Displays next to steps that have not been configured.1.Configure – Click to begin defining settings.2.Complete – Displays next to a completed step.3.Edit – Click to review or change a completed step’s settings.4.Scroll down and open the remaining modules to review their sections and steps.5.Use the percentage counter in the upper-right corner to track your configuration progress.6.

INSTALLATION AND SETUP

GUIDE | 9

Now that you have navigated the Getting Started Wizard, you are ready to Generate the Apple Push Notification Certificate.

Generating the Apple Push Notification Service CertificateApple Push Notification service (APNs) is the messaging protocol created by Apple to manage mobile devices. To manage iOSdevices, Workspace ONE UEM requires a valid APNs certificate.

To watch a video demonstrating this procedure, click Creating an Apple APNs Certificate.

1. Configure Apple Push Notification Service (APNs)

In Workspace ONE UEM Console, navigate to the Workspace ONE Getting Started Wizard.

Select Getting Started.1.Select Workspace ONE.2.Navigate to SETUP > Apple Push Notification Service (APNs).3.Click Configure.4.

2. Download Certificate Request

Under Download Certificate Request, click MDM_APNsRequest.plist.1.Click Continue.2.

3. Enter Corporate Apple ID

INSTALLATION AND SETUP

GUIDE | 10

Enter your Corporate AppleID email address that you will use to manage all Apple devices for your organization.If you do not have a Corporate Apple ID, Create Account with Apple.

4. Create Certificate

Navigate to the Apple Push Certificates Portal and use your Corporate Apple ID credentials to authenticate.

Complete the following steps to create the APNs certificate.

Enter your corporate Apple ID.1.Enter your Apple ID password.2.Click Sign In.3.Click Create a Certificate.4.

5. Upload Certificate Signing Request

INSTALLATION AND SETUP

GUIDE | 11

Click Choose File and select the MDM_APNsRequest.plist file you previously downloaded.1.Click Upload.2.

6. Download Certificate

Click Download.

7. Complete Certificate Generation

INSTALLATION AND SETUP

GUIDE | 12

Return to the Getting Started Wizard in the Workspace ONE UEM Console, and click Next.

7.1. Upload PEM Certificate

Click Upload.

7.2. Select the PEM Certificate

INSTALLATION AND SETUP

GUIDE | 13

Click Choose File and select the previously downloaded .pem file.1.Click Save.2.

7.3. Complete Request

Enter your Apple ID.1.Click Save.2.

Now that you have generated the Apple Push Notification Certificate, you are ready to Configure Android EMM Registration.

Registering Android Enterprise Mobility Management (EMM)Enabling Android for Work on devices separates personal data from the work data at the operating system level. Android for Workcreates a clear separation between work and personal apps.

To use Android for Work inside the Workspace ONE UEM Console, you need to register your enterprise with Google. This createsyour Android for Work admin account which connects with Workspace ONE UEM to manage your enterprise devices. Users can notuse Android for Work features from their devices until registered with Workspace ONE UEM. The Android for Work setup wizardsimplifies the process.

1. Navigate to Getting Started Wizard

INSTALLATION AND SETUP

GUIDE | 14

In Workspace ONE UEM Console, navigate to the Workspace ONE Getting Started Wizard.

Select Getting Started.1.Select Workspace ONE.2.Navigate to SETUP > Android EMM Registration.3.Click Configure.4.

2. Register Google Admin Account

INSTALLATION AND SETUP

GUIDE | 15

Click Register with Google.

3. Provide Google Admin Account

Confirm you are logged into your Google Admin Account that you want to associate with your Android for Work configuration.1.

Note: After you register a Google Admin Account to Android for Work, you cannot disassociate your Google Admin Accountfrom that Organization. Ensure the Google Admin Account shown is the account you want to associate with your Organization.

Click Get Started.2.

INSTALLATION AND SETUP

GUIDE | 16

4. Provide your Organization Details

Enter your Organization name.1.Select the Google Play agreement check box.2.Click Confirm.3.

5. Complete Registration

Click Complete Registration to return to the Android for Work configuration.

6. Confirm Android for Work Integration

INSTALLATION AND SETUP

GUIDE | 17

On the Android for Work Settings page, scroll down until you see the Google Admin Console Settings and Google API1.Settings sections.Under Google Admin Console Settings, note that the account information you provided during the Android for Work2.configuration step is displayed here.Confirm that Android for Work Registration Status is shown as Successful.3.

Note that the Client ID and Google Service Account Email Address have been created and configured for you automatically. Noadditional configurations with Android for Work or the Google Developers Console are required.

Your Organization Group is now successfully configured with Android for Work.

For more information about Android EMM, see the blog posts:

Android Enterprise: Front & CenterVMware Workspace ONE & AirWatch Enhancements Expand the Digital Workspace

Downloading the Employee Email TemplateDownload an email template to introduce employees to Workspace ONE and how to get started.

1. Download Email Template

In Workspace ONE UEM Console, navigate to the Workspace ONE Getting Started Wizard.

Select Getting Started.1.Select Workspace ONE.2.Navigate to SETUP > Employee Email Template.3.Click Download.4.

2. Copy Email Template

INSTALLATION AND SETUP

GUIDE | 18

Copy the email template provided in the PDF document.

Now that you have downloaded the email template, the Installation and Setup section is complete.

VMware, Inc. 3401 Hillview Avenue Palo Alto CA 94304 USA Tel 877-486-9273 Fax 650-427-5001 www.vmware.comCopyright © 2017 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listedat http://www.vmware.com/go/patents. VMware is a registered trademark or trademark of VMware, Inc. in the United States and/or other jurisdictions. All other marks and names mentioned herein may betrademarks of their respective companies.