EUCService Learning Reinhart / SanderROC VMware WeekChapter 3: WorkspaceOne Hub Enrollment

Chapter 3: WorkspaceOne Hub Enrollment

Part 1: Pre-Requirement for Enrollment

There are some pre-requirements on the Workspace ONE UEM console before you enroll your device. for getting the Intelligence Hub application to work well. VMware is moving away from the AirWatch Agent and Workspace One application and consolidating under a single application referred to as the Workspace ONE Hub. We have to configure Workspace ONE Access and Workspace ONE UEM to provision applications, we will configure the Hub Services for additional features.

  1. Login to your WorkspaceOne UEM Admin Console
    • Select to Groups & Settings > All Settings > Device & Users > General > Enrollment
  1. Under the Authentication Tab
    • Select ENABLED next to "Require Intelligence Hub Enrollment for iOS"
    • Select SAVE at the bottom right corner.
  1. You will now have to enable the catalog service in the Hub application
    • Select All Settings > Apps > WorkspaceOne > AirWatch Catalog > General
  1. Under the Publishing tab ensure the following are ENABLED next to
    • "Intelligence Hub Catalog (iOS)"
    • "Intelligence Hub Catalog (Android)"
    • "Intelligent Hub Catalog" (Windows Desktop)
    • Select Save at the bottom right.
  1. We will enable Hub Services and People Search inside of  Workspace ONE Access   
    • Navigate to your unique Workspace ONE Access SaaS Tenant Admin Console
      • Authenticate using your Admin credentials. (Select Domain as System Domain)
      • Select the TA icon and select Administration Console
    • On the Workspace ONE Access Console,
      • Select the Catalog tab
      • From the drop-down, select Hub Configuration
      • Select LAUNCH
  1. In the Introducing Templates page
    • Select NEXT
    • Select GOT IT
    • In the Discard all App Catalog settings area
      • select DISCARD
      • When prompted , select DISCARD
  1. In the Workspace ONE Hub Services inventory
    • Select People,
      • Enable People by turning the toggle green. Select SAVE.
    • In the Inventory, above People, select the Custom Tab.
      • Enable by turning the toggle green.
      • In the Title area type:
        • ROC (Best practice is not use a label longer than 6 characters).
      • URL:
      • Next to Position, ensure the First radio button is selected.
      • Select SAVE
    • On the left menu, select App Catalog,
      • Ensure Enable App Ratings toggle is on (default is ON)
      • Leave the rest as default
    • Select SAVE
  1. Enabling Employee Self-Service,
    • In left navigation panele select Employee Self-Service .
    • This is enabled by default. No action needed. Take note of the configurable options. For example Helpful Links or how to guides. This might be helpful for onboarding as one example


  1. In Workspace ONE Hub Services, To the right of the page
  1. Select the Catalog tab ,
    • From the dropdown select Settings.
  1. Select People Search
    • Select the check box next to Enable People Search
    • Select NEXT
  1. Select the Directory  LivefireSync
  1. Note the following with the associated dropdown
    • distinguishedName,  checkbox is enabled
    • managerDN, checkbox is enabled
    • title, checkbox is enabled
    • select Next
    • Validate the associated attributes are associated in the Attribute Name Directory
      • distinguishedName = distinguishedName
      • managerDN = manager
      • title = title
    • Select Next
  1. On the People Search page
    • Under the Specify the user DNs edit the default  CN=Users,DC=euc-livefire,DC=com
      • OU=Corp,DC=euc-livefire,DC=com
      • Select Save & Sync

  1. On your Laptop / Desktop
    • Open an Incognito window on your browser and navigate back to your Workspace ONE Access tenant
      • Under Select Your Domain,
        • select,
        • select Next
      • Login using your custom Active Directory Account custom user and VMware1!  e.g. demale.striteo
      • Select   Sign in
  1. Select People
    • In the search interface type Mar
      • Notice the search results
      • Select an individual user and notice you can see information related to the user.
        • Notice we have limited information regarding the users
  1. Switch to your ControlCenter server
    • On the ControlCenter server Desktop,
      • Select the START button,
      • To the right, select the Windows Administrative Tools icon
      • Select and open Active Directory Users and Computers
  1. In Active Directory Users and Computers
    • Expand the Corp > Marketing OU
  1. In the Marketing OU
    • Select and right-click Tom Marios, select Properties
    • In the Properties, select the Organization tab and enter the following:
      • Next to :
        • Job Title: Director of Marketing
        • Department: Marketing
        • Company: Livefire
      • Select OK to close Your custom user Properties
  1. In the Marketing OU
    • Select and right-click YOUR unique CUSTOM ACCOUNT , select Properties
    • In the Properties, select the Organization tab and enter the following:
      • Next to :
        • Job Title: Solution Specialist
        • Department: Marketing
        • Company: Livefire
      • In the Manager area, select the Change button
      • In the Select User or Contact window, under Enter the Object name to select enter: Tom Marios
        • Select Check Names
        • Select OK
    • Select OK to close the Tom Marios Properties
  1. On your Laptop / Desktop
    • Switch to your Workspace ONE Access Admin Console
    • Select the Identity & Access Management tab
      • Select Manage
      • Under Directories, Select LivefireSync
      • Select Sync
        • Select Sync without Safeguards
  1. On your Laptop / Desktop
    • Switch to your Incognito session
    • If necessary, Log out and the log back in with your Custom User Account
    • Select the People Tab,
      • Note your Manager
    • In the Search People area, enter your Custom user
      • Note, the associated attributes and structure in the People Area
  1. On your Laptop / Desktop
    • Switch to your Workspace ONE UEM Console
      • Select GROUPS & SETTINGS > Configurations
      • Under Configurations type Hub
      • Under Name select Intelligent Hub
  1. In the Workspace ONE UEM Console
    • In the Intelligent Hub window, select GET STARTED
    • In the Activate Hub Services, select YES
      • You are now ready to configure Hub Services

Part 3  Intelligence Hub Enrollment

Windows 10 Intelligent Hub Enrollment

In this Lab we will Enroll a Windows 10  VM using the latest WorkspaceOne Intelligence Hub

  1. On your  ControlCenter server
    • On the Desktop open the Remote Desktop folder.
    • Select the W10Client01 RDP client and
      • Sign-in with username administrator
      • Password VMware1!
    • To the right of the Start button in the search area, start typing intel
    • Select the Workspace ONE Intelligent Hub
      • Please Note! If the Workspace ONE Intelligent Hub does not load,
        • From the RUN > Services.msc > Start the Airwatch service
        • Attempt to re-launch the hub
  1. Under Email or Server Address,
    • Enter
    • Select Next
  1. Under Group ID unique enter your unique your Workspace ONE UEM tenant Group ID
    • To get your unique Workspace ONE UEM Group ID, revert back to your Workspace ONE UEM tenant and look for the following next to the Workspace ONE UEM logo, select your Organization Group and note your Group ID
    • Select NEXT
  1. In the Workspace ONE Intelligent Hub under
    • Under Select Your Domain
      • Select
        • Select Next
    • Under the Username area
      • Enter your custom Active Directory Username
    • Under the Password area
      • Enter VMware1!
    • Select Sign in
  1. In the Workspace ONE Intelligent Hub
    • Select I Agree
  1. On the Congratulations window,
    • Select Done
    • Notice the Enrolled status of W10Client01


Add your comment

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.