VMware Workspace ONE is a digital workspace platform that simply and securely delivers and manages any app on any device by integrating access control, application management and multi-platform endpoint management.
VMware Workspace ONE can essentially transform a Chromebook into a dedicated VMware Workspace ONE device.
Follow the steps below to experience VMware Workspace ONE hands on with a Chromebook.
- Section 1: Enroll your Chromebook
- Initiate the enterprise enrollment prompt
- Enroll the Chromebook
- Sign-in to the desktop
- Section 2: Guided Work Experiences
- Horizon Apps
- SaaS Apps
- Section 3: Understanding Security Features
- Conditional Access
- Policies and Profiles
- Section 4: Enterprise Wipe
- Login to the AirWatch Console
- Enterprise Wipe your Device
Before You Begin
In order to experience Workspace ONE on a Chromebook, you need the following:
- Demo account provided in this guide.
- Chromebook: Chrome OS version 61 (required for Android app support beta feature). Verify/update Chrome OS.
- Your Chromebook's serial number.
Section 1: Enroll your Chromebook
Enrollment begins just after Chromebook startup. Enrollment is a simple process that begins by initiating the enterprise enrollment prompt. The enterprise enrollment prompt must be used, otherwise no enrollment will take place and the device will enter a consumer state. After the enterprise enrollment authentication, the device is enrolled.
Use the following account for demoing the Chromebook:
|Google email address:||email@example.com|
To enroll a Chrome OS device:
- Power on the Chromebook and connect to Wi-Fi.
- Press CTRL+ALT+E to proceed to enterprise enrollment at the 'Sign into the Chromebook' page.
- Enter your Google account credentials (provided above).
- Select Done.
The Chromebook is now enrolled. You are now ready to experience Workspace ONE!
Next, you should receive a Workspace ONE login screen. Sign-in to enter Workspace ONE on Chrome.
Section 2: Guided Work Experiences
After a successful device login, you'll notice the enterprise Chromebook user's experience is not like a typical Chromebook's.
First, you'll notice that Chrome browser loads with Workspace ONE preconfigured for the user.
Next, you should accept the managed Google Play Terms of Service. After acceptance, Google Play will set up and pin managed Android apps on the Chromebook's taskbar.
After agreeing to the Google Play Terms of Service, the following Android apps will silently install: Horizon and Workspace ONE. (Note: Android apps on Chrome OS is a BETA feature.)
Once you're logged into the Chromebook, Chrome will open with wsone.vmtestdrive.com preconfigured in a tab. No authentication will be required thanks to VMware Identity Manager and Chrome OS integration. The user will be able to access all of their entitled web and Horizon apps!
Within Workspace ONE you'll see a bookmarks and catalog tabs. Workspace ONE aggregates all the apps your employees need whether its a virtual app, web app or native app. Also, Identity Manager is providing single sign on and access policy controls to these apps regardless of what device type, enrollment status, or endpoint the user is attempting to access the app from.
On the bookmarks tab, bookmarks are set up for frequently used web and virtual apps. You can navigate the catalog page to search and bookmark an item from the search results.
On the catalog tab, you'll find the full list of apps entitled to the user. The user can add an app to their bookmarks, open the app, or install native apps.
Launch the Office 365 web app to demonstrate the user's seamless SSO access to organizational SaaS apps. Navigate to Outlook within Office 365.
Now show the Workspace ONE user experience with a Horizon app.
Switch back to Workspace ONE and search for the Visio Horizon app that is closest to your region:
- AMER-Visio 2016
- APAC-Visio 2016
- EMEA-Visio 2016
Workspace ONE will open Visio via HTML access.
Section 3: Understanding Security Features
We can observe conditional access through Workspace ONE. In this case, we will open Workspace ONE, and attempt to open an app titled "Patient Records".
In Workspace ONE, search for "patient"...then attempt to open the Patient Records website.
A Workspace ONE conditional access policy blocks access to the site.
You'll also notice that our corporate device has a few managed restrictions:
- The following websites have been blocked on the enterprise Chromebook:
Section 4: Enterprise Wipe
The last step we will perform is to remove the corporate info from our device similar to how an organization could remove this info if the device was lost or stolen.
First, open a web browser and navigate to airwatch.vmtestdrive.com. Login with your TestDrive username and password.
Note: Make sure you are using the VMWDEMO domain! Your username should be in the format vwmdemo\username.
Using the Device Administrator at Chrome OS Admin role, navigate to devices.
Find your Chromebook's serial number in the device list. Select the device and from the more actions menu, issue an enterprise wipe.
Your device will deprovision.