Experience Workspace ONE on Chromebook

VMware Workspace ONE is a digital workspace platform that simply and securely delivers and manages any app on any device by integrating access control, application management and multi-platform endpoint management. 

VMware Workspace ONE can essentially transform a Chromebook into a dedicated VMware Workspace ONE device.  

Follow the steps below to experience VMware Workspace ONE hands on with a Chromebook.

Overview


Before You Begin


In order to experience Workspace ONE on a Chromebook, you need the following:

Section 1: Enroll your Chromebook


Enrollment begins just after Chromebook startup.  Enrollment is a simple process that begins by initiating the enterprise enrollment prompt.  The enterprise enrollment prompt must be used, otherwise no enrollment will take place and the device will enter a consumer state.  After the enterprise enrollment authentication, the device is enrolled.

Use the following account for demoing the Chromebook:  

User:   John Backus
Username:   jbackus
Google email address:       jbackus@vmwdemo.com
Password   ExpWks1!


To enroll a Chrome OS device:

  1. Power on the Chromebook and connect to Wi-Fi.
  2. Press CTRL+ALT+E to proceed to enterprise enrollment at the 'Sign into the Chromebook' page. 
  3. Enter your Google account credentials (provided above).
  4. Select Done. 

    The Chromebook is now enrolled.  You are now ready to experience Workspace ONE!

Next, you should receive a Workspace ONE login screen. Sign-in to enter Workspace ONE on Chrome.

Section 2: Guided Work Experiences


After a successful device login, you'll notice the enterprise Chromebook user's experience is not like a typical Chromebook's.  

First, you'll notice that Chrome browser loads with Workspace ONE preconfigured for the user. 

Next, you should accept the managed Google Play Terms of Service.  After acceptance, Google Play will set up and pin managed Android apps on the Chromebook's taskbar. 

After agreeing to the Google Play Terms of Service, the following Android apps will silently install: Horizon and Workspace ONE. (Note: Android apps on Chrome OS is a BETA feature.)

Once you're logged into the Chromebook, Chrome will open with wsone.vmtestdrive.com preconfigured in a tab.  No authentication will be required thanks to VMware Identity Manager and Chrome OS integration.  The user will be able to access all of their entitled web and Horizon apps!

Within Workspace ONE you'll see a bookmarks and catalog tabs. Workspace ONE aggregates all the apps your employees need whether its a virtual app, web app or native app. Also, Identity Manager is providing single sign on and access policy controls to these apps regardless of what device type, enrollment status, or endpoint the user is attempting to access the app from.

On the bookmarks tab, bookmarks are set up for frequently used web and virtual apps.  You can navigate  the catalog page to search and bookmark an item from the search results.

Screenshot_2018-02-28_at_1.14.29_PM.png

On the catalog tab, you'll find the full list of apps entitled to the user. The user can add an app to their bookmarks, open the app, or install native apps.

Screenshot_2018-02-28_at_1.14.41_PM.png

Launch the Office 365 web app to demonstrate the user's seamless SSO access to organizational SaaS apps.  Navigate to Outlook within Office 365.

Screenshot_2018-02-28_at_1.17.32_PM.png

Now show the Workspace ONE user experience with a Horizon app.

Switch back to Workspace ONE and search for the Visio Horizon app that is closest to your region:

  • AMER-Visio 2016
  • APAC-Visio 2016
  • EMEA-Visio 2016

Workspace ONE will open Visio via HTML access. 

Screenshot_2018-02-28_at_1.18.00_PM.png

Section 3: Understanding Security Features


We can observe conditional access through Workspace ONE. In this case, we will open Workspace ONE, and attempt to open an app titled "Patient Records".

In Workspace ONE, search for "patient"...then attempt to open the Patient Records website.

Screenshot_2018-02-27_at_3.51.06_PM.png

A Workspace ONE conditional access policy blocks access to the site. 

Screenshot_2018-02-27_at_3.52.57_PM.png

 You'll also notice that our corporate device has a few managed restrictions:

  • The following websites have been blocked on the enterprise Chromebook:
    • netflix.com
    • facebook.com
    • twitter.com
    • instagram.com
    • youtube.com

      Screenshot_2018-02-27_at_4.13.45_PM.png

Section 4: Enterprise Wipe


The last step we will perform is to remove the corporate info from the device, in case, for example, the device was lost or stolen.

First, open a web browser and navigate to wsuem.vmtestdrive.com. Login with your TestDrive Workspace ONE UEM account (vmwdemo\username).

Using the Device Administrator at World Wide Enterprises role, navigate to devices. 

Find your Chromebook's serial number in the device list.  Select the device and from the more actions menu, issue an enterprise wipeAdmin PIN = 1111

Screen_Shot_2018-08-17_at_12.33.40_PM.png

Your device will deprovision (Deprovision time may be considerable).

For Additional Support


Review Our Knowledge Base

 

 

Have more questions? Submit a request

Article is closed for comments.