Workspace ONE UEM Sandbox Walkthrough

This quick walkthrough shows you how to get started in a Workspace ONE UEM sandbox tenant.

The Workspace ONE UEM sandbox tenant is provisioned by TestDrive in a localized VMware Shared SaaS environment, not in a TestDrive environment.  Other than the basic administrator account also provisioned for your initial access, the tenant has no other configuration.  It's a blank slate, awaiting your configurations.

  • Per VMware Shared SaaS security policy, basic admin account passwords expire after 30 days.  Use the tenant environment's password reset feature to reset your password.
  • Support for partners and customers is facilitated through My Workspace ONE.


  • Turn on access to your Workspace ONE UEM Sandbox
  • Log in to the Workspace ONE UEM Console

Before you Begin

In order to access your sandbox please make sure you have the following:

  • A valid account in the VMware TestDrive environment. If you don't yet have an account reference our Getting Started Guide.

Video Overview


Your sandbox is your personal Workspace ONE UEM playground where you can create accounts, profiles, build out organization groups, configure apps, and access advanced admin settings. You will be able to make custom admin configurations in the Workspace ONE UEM console and then enroll devices to see the corresponding features on the device.


  • A Workspace ONE UEM sandbox is your own, personal tenant. 
  • Your tenant will get deleted when your TestDrive account expires.
  • The tenant is not convertible to production.
  • The ability to simply reset a tenant is not currently available. 

First, enable your sandbox in the TestDrive portal.  Navigate to the TestDrive portal at and log in with your TestDrive username and password.

If you're having issues with your password you can always reset using 'forgot password'.


On the Digital Workspace tab, scroll down Sandbox Experiences section and find the Workspace ONE UEM tile.  Enable it.  

After provisioning has completed, you'll be able to access the tenant when the button says "launch."  You can either launch it from here or simply go directly to the tenant by navigating to the URL shown.  Be sure to use you sandbox credentials pictured here.

The tenant is in a VMware Shared SaaS environment—not in TestDrive.  The account TestDrive sets up in the tenant is intended to get you started.  Due to VMware SaaS security policies, the account's password must be reset every 30 days.  Keep that in mind and be sure to use environment, not TestDrive, to reset the password.  Best practice is to integrate a test directory and manage your own accounts with it. 


After logging in to the tenant, you'll have access to an unconfigured Workspace ONE UEM environment. The administrator role, Console Administrator, has full administrator privileges, allowing whatever configuration you wish to test. 

Sandbox Setup

Device Root Certificate

Before you begin to enroll devices in your Workspace ONE UEM sandbox, verify the Device Root Certificate is enabled.  

Log in to your sandbox's Workspace ONE UEM console and go to Settings > System > Advanced > Device Root Certificate.  It should already be enabled. 




Since TestDrive sandboxes are fully configurable, users must be created.  The account provided by TestDrive provisioning is a basic administrator account.

Let's go ahead and add a user account. Click on the Accounts button in the left sidebar to open the User menu.


From the List View page, hover the cursor over the Add dropdown, then click the 'Add User' option.


Fill in the required fields and click Save when finished.


The list view will refresh to show the new user has been added successfully.


By selecting the check box next to the user's name you can add a device and manage various group options directly, without having to navigate to the other sections.





  • Verify your enrollment URL.  Please replace the 'cn' portion of your console URL with 'ds' (e.g. Enrollment URL for is; Exception:
  • Before enrolling Android, you must first configure Android EMM Registration in Workspace ONE UEM.
  • Verify you've added a user account, which is detailed in the above section. 

First, you'll need to identify the Group ID for your sandbox. This information is found under Enrollment Details in the expanded Workspace ONE UEM tile in the TestDrive portal.


Now that you have your unique URL and Group ID, power up your device and download the AirWatch Agent from the app store.


Open the Agent and choose the Server Details option.


Enter your URL in the Server field, and then enter the Group ID. Click Next when finished.


Next, you'll be brought to the User Credentials page. Enter the Username and Password for the user account you set up earlier. Click Next.


At the bottom of the screen select Redirect and Enable, which will open up a browser to begin installing the management profiles to your device.



Click Allow.


Now, you'll be prompted to install the Device Manager profile. Click Install and continue through the prompts.






Next, you'll be redirected to the AirWatch Agent. Click Done to proceed.



Click Done to continue.


You will be asked to create a more secure passcode for the Agent. Click Create when finished.


The data and privacy policies are displayed. Click I Understand to proceed.


Here you are given an opportunity to help us improve and develop new app features and functionality through anonymous data sharing.


Your device now reports as enrolled.


If you go back to the Workspace ONE UEM Sandbox Admin Console, you'll see the device now appears in the list view.




For product documentation on how to use Workspace ONE UEM please refer to the VMware Product Knowledge base page found here.


For Additional Support

Review Our Knowledge Base

Have more questions? Submit a request

Article is closed for comments.