In this walkthrough we're going show you how to access and use the Workspace ONE Express Admin Console within the TestDrive Sandbox Environments.
Overview
Before You Begin
In order to complete this demo please make sure you have the following:
- A valid account in the VMware TestDrive environment, sign up here if you do not already have an account.
Background Info - Talking Points
Workspace ONE Express is simple and straightforward MDM, so you get exactly what you need without anything you don't. Workspace ONE Express provides an affordable solution to security concerns and accessibility inherent to enterprise mobility. WithWorkspace ONE Express organizations can:
- Manage small-scale deployments (500 device maximum) from a single console.
- Enroll devices in your enterprise environment quickly and easily.
- Configure and update device settings over the air.
- Secure mobile access to corporate resources by regulating applications, email and connectivity, and security policies.
- Remotely lock, send messages, and enterprise wipe managed devices.
When your organization needs mobile device management features beyond whatWorkspace ONE Express offers, you can upgrade to the full Workspace ONE UEM product at any time. For more information on Workspace ONE Express please visit workspaceoneexpress.com.
Logging In and Using the Workspace ONE Express Admin Console
First, open your favorite browser and navigate to the TestDrive portal at portal.vmtestdrive.com. Log in with your TestDrive username and password.
By default the TestDrive portal will open into the Empower Digital Workspace tab of the My Products page.
Scroll down to the Sandbox Experience section. Locate the Workspace ONE Express tile, and toggle the switch to the right to enable the product.
Once Workspace ONE Express is enabled, click the down arrow on the left side of the tile to expand it. Here you will find your unique Admin Credentials and Enrollment Details.
Click the Launch button to open the Workspace ONE Express Admin Console. Log in using the Admin Credentials from the previous step. Ensure your username is in the format td.awex.{username}.
Accept the EULA, then set your password recovery question and PIN.
Since this is the first time you've loaded the Workspace ONE Express console, you'll be brought through the setup wizard. First, you'll be shown the introduction and survey.
You'll see the process a customer goes through to setup their environment. You can choose 'yes' at these fields to setup your own AD, APNs and VPP. We will walk through the setup for APNs later in this guide. For documentation on setting up AD and VPP, visit docs.vmware.com.
For now, we'll select 'no' for each option.
Now, that you have completed the initial setup, you'll be brought to the blueprints page. Here you can add "Blueprints" for each of your users or groups of users. Within a blueprint you can define which apps, wifi configurations, security policies and more are assigned to your user's devices when they enroll.
When you're setting up a blueprint you'll be guided through a wizard to help you configure the settings which will apply to the user's devices.
When you get to the Users tab you'll need to select which accounts you'd like this blueprint to apply to. Since we will be enrolling a device into Workspace ONE Express later, let's go ahead and add a user account now. Start by clicking Add User.
Fill in the required fields and click Add User when finished.
Create Apple Push Notification Service Certificate
Since we are going to enroll an iOS device, we need to create an APNs certificate. Navigate to the Groups and Settings page by clicking the icon at the bottom of the left sidebar. Once there, click 'Apple' under the Devices and Users section.
Select APNs for MDM
Click the Generate New Certificate button
From this page, let's go ahead and download the plist file by clicking the link. Then click the Go to Apple button to be taken to the Apple Push Certificates Portal.
Sign in using your Apple ID
Click the Create a Certificate button
Read the Terms of Use, check the box, then click Accept.
Click Choose File to select the plist file we downloaded earlier, then click Upload.
Now that the push certificate has been successfully created, click the Download button to save it to your computer.
You can always return to the Apple Push Certificates Portal to renew, revoke, or re-download the certificate you created.
Switching back over the Workspace ONE Express Admin Console, click Next to continue the setup process.
Click the Upload button to select the APNs certificate (.pem file) then click Save.
Enter the email address associated with your Apple ID and click Save.
Review the information carefully, and if everything is correct scroll down and enter your security PIN that you created at the beginning of the walkthrough.
The APNs certificate has been successfully created. At this point you're all set to build out your test environment and start enrolling devices. Once you've configured a few blueprints and policies you're ready to enroll.
Enrolling Your Devices to Workspace ONE Express
You can enroll your devices to Workspace ONE Express through Apple's Device Enrollment Program or using the Workspace ONE Intelligent Hub. For the purposes of this guide we will use Hub enrollment. First, you'll need to identify the Group ID for your Workspace ONE Express instance. This information is found under Enrollment Details in the expanded Workspace ONE Express tile in the TestDrive portal.
Now that you have your unique URL and Group ID, power up your iOS device (or other) and download the Workspace ONE Intelligent Hub from the app store.
Open the Agent and choose the Server Details option.
Enter your URL in the Server field, and then enter the Group ID. Click Next when finished.
Next, you'll be brought to the User Credentials page. Enter the Username and Password for the user account you set up earlier in the Blueprint wizard. Click Next.
On the Device Ownership page, select Corporate - Dedicated then click Next.
At the bottom of the screen select Redirect and Enable, which will open up a browser to begin installing the management profiles to your device.
Click Allow.
Now, you'll be prompted to install the Device Manager profile. Click Install and continue through the prompts.
Next, you'll be redirected to the Hub. Click Done to proceed.
Click Done to continue.
You will be asked to create a more secure passcode for the Agent. Click Create when finished.
The data and privacy policies are displayed. Click I Understand to proceed.
Here you are given an opportunity to help us improve and develop new app features and functionality through anonymous data sharing.
Your device now reports as enrolled.
If you go back to the Workspace ONE Express Admin Console, you'll see the device now appears in the list view.
