Workspace ONE Intelligent Hub is a digital workspace platform that simply and securely delivers and manages any app on any device by integrating access control, application management and multi-platform endpoint management. Follow the steps below to experience Workspace ONE Intelligent Hub hands on with a macOS device.
Before You Begin
Before you begin this walkthrough ensure you have the following:
- A valid account in VMware TestDrive. Sign up here.
- An updated macOS device.
Enrolling your macOS Device
Start with an unenrolled macOS device. Navigate to https://getwsone.com and download the Workspace ONE Intelligent Hub application on the device.
Open the macOS PKG file and follow the prompts to install the application. After a successful Intelligent Hub installation, the Workspace ONE enrollment window should appear on your desktop.
If it doesn't appear, on the macOS menu bar, use the running Intelligent Hub to start enrollment.
To begin enrollment, enter your TestDrive enrollment email address.
Your TestDrive email address follows the shown format.
If you're unsure what your TestDrive email address is, you can verify this in the TestDrive portal by following the steps below:
- Login to portal.vmtestdrive.com with your username and password
- Click on the dropdown next to Workspace ONE in the Ready to Use Experiences section to view your credentials
- Here you will find your TestDrive email address
Continue enrollment using your TestDrive credentials.
Select Enterprise - BYOD Demo from the dropdown menu.
Workspace ONE UEM will commence device management.
Next, follow the prompts from settings to install Workspace Services.
When prompted by the OS, enter your local credentials.
When prompted, be certain to click install until enrollment is completed.
Soon after enrollment is completed, you should notice the machine taking on profiles, such as a user certificate and dock changes, managed Workspace ONE UEM.
Guided Work Experiences
Open the Intelligent Hub and view the left pane. Apps, People Search, For you, and an admin-customizable website are available on the left side of the app.
In the default apps view, notice the categories of all entitled apps: all, virtual, web (SaaS), and native Mac apps. This default view displays apps in configureable sections: featured apps (top), favorites, recommended, and new apps. Each section can be enabled or disabled as needed by the admin.
Clicking on an app category takes you to another screen where all apps for that category are available.
Back in the Hub, click on the Mac Apps category to view and install any assigned desktop apps.
Now, show the Hub's user experience with a Horizon app. Search for Visio 2016, a Horizon app.
When launched, the Hub will open Visio via either, user's choice, Horizon Client or HTML access.
| Kim Johnson | Priti Patel | Alexander Mogilny | Jake Tabasco | Don Martin | |
| Diane Brown | Kit Meadows | Ramesh Shah | Ron Gooden | Susan Britt |
Back on the left, click the magnifying glass for People Search. Click in the search field. Type in a few characters of a person from the demonstration organization. The names are as follows:
The selected user's detail will show up along with their organizational relationships. People Search enables rapid access of not only organizational contact information, but also internal teams' structure.
Next, click the bell icon for Intelligent Hub's notifications. This is the place for any administrative, recommended app, and Mobile Flows notifications are displayed. Hub n otifications are not just informative, but more importantly, are actionable. It's a single pane for essential, on the go, job-related communications!
Understanding Security Features
Workspace ONE brings conditional access to users and devices. We can observe Workspace ONE conditional access through the Intelligent Hub.
Next, we will open the Hub and attempt to access the "Patient Records" app, an app that can be only accessed when the device is on a secure internal network.
In Apps, search for "patient". Note the Hub's fast indexing, enabling rapid access to the needed app.
...then attempt to open the Patient Records. A Workspace ONE conditional access policy blocks access to the site because the device is not on the defined network.
Next, let's take a quick look at a key system restriction that has been applied.
Try to access the App Store. Nope, it's not available. A Workspace ONE UEM restriction profile has prevented the installation of unapproved apps. Only approved apps from the Intelligent Hub can be installed.
Section 4: Enterprise Wipe Your Device
The last step to perform is to remove the corporate info from our device similar to how an organization could remove
The last step we will perform is to remove the corporate info from our device similar to how an organization could remove this info if the device was lost or stolen.
First, open a web browser and navigate to testdrive.awmdm.com. Log in with your TestDrive username and password.
Note: Your admin console username must be in the format vmwtd.com\username.
Next, ensure you're using the "Device Administrator at World Wide Enterprises" role by checking your account settings in the top right.
Next, navigate to Devices > List View in the left column. You can search for your username in the right side of the screen to find your device in the list. Click the name of your device to open the device details.
Next, click More Actions > Enterprise Wipe to wipe your device only of its managed settings, apps, and content. Personal data is never touched.
Also, you can delete your device record from the console by choosing Delete Device. If re-enrolling, deleting the device record is recommended.