Experience Workspace ONE on macOS

Workspace ONE Intelligent Hub is a digital workspace platform that simply and securely delivers and manages any app on any device by integrating access control, application management and multi-platform endpoint management. Follow the steps below to experience Workspace ONE Intelligent Hub hands on with a macOS device.

Overview


Before You Begin


Before you begin this walkthrough ensure you have the following: 

  • A valid account in VMware TestDrive.  Sign up here.  
  • An updated macOS device.

Section 1: Enrolling your macOS Device


Start with an unenrolled macOS device.  Navigate to https://getwsone.com and download the Workspace ONE Intelligent Hub application on the device.

mceclip0.png

Open the macOS PKG file and follow the prompts to install the application.  After a successful Intelligent Hub installation, the Workspace ONE enrollment window should appear on your desktop.

If it doesn't appear, on the macOS menu bar, use the running Intelligent Hub to start enrollment. 

mceclip1.png

To begin enrollment, enter your TestDrive enrollment email address.

mceclip2.png

What's my TestDrive email address?

Your TestDrive email address follows the below format:

[TestDriveUsername]@vmtestdrive.com

If you're unsure what your TestDrive email address is, you can verify this in the TestDrive portal by following the steps below:

  1. Login to portal.vmtestdrive.com with your username and password
  2. Click on the dropdown next to Workspace ONE in the Ready to Use Experiences section to view your credentials
  3. Here you will find your TestDrive email address

Screen_Shot_2018-08-17_at_12.00.59_PM.png

Enter your TestDrive credentials.

mceclip4.png

mceclip5.png

Select Enterprise - BYOD Demo from the dropdown menu.

mceclip3.png

Workspace ONE UEM will commence device management.

mceclip6.png

Next, follow the prompts from settings to install Workspace Services.

mceclip7.png

When prompted by the OS, enter your local credentials.

mceclip0.png

When prompted, be certain to click install until enrollment is completed. 

mceclip9.png

mceclip10.png

Soon after enrollment is completed, you should notice the machine taking on profiles, such as a user certificate and dock changes, managed Workspace ONE UEM. 

mceclip11.png 

Section 2: Guided Work Experiences


Open the Intelligent Hub and view the left pane.  Apps, People Search, Notifications, and an administratively customizable website are available on the left side of the app.  

mceclip12.png

In the default apps view, notice the categories of all entitled apps: all, virtual, web (SaaS), and native Mac apps. This default view displays apps in configureable sections: featured apps (top), favorites, recommended, and new apps.  Each section can be enabled or disabled as needed by the admin.  

Clicking on an app category takes you to another screen where all apps for that category are available.

Now, let's see a SaaS app's certificate-based SSO sign in.  After clicking the Salesforce SaaS app, accept the macOS cert prompt allowing Workspace ONE to use the managed user certificate.  You'll then directly access Salesforce without a user login procedure.  Workspace ONE single sign on has made web app access super simple! 

mceclip4.png

Back in the Hub, click on the Mac Apps category to view and install any assigned desktop apps.

mceclip6.png

Now, show the Hub's user experience with a Horizon app.  Search for Visio 2016, a Horizon app.

When launched, the Hub will open Visio via either, user's choice, Horizon Client or HTML access. 

mceclip9.png

Back on the left, click the magnifying glass for People Search.  Click in the search field.  Type in a few characters of a person from the demonstration organization.  The names are as follows:

  Kim Johnson Priti Patel Alexander Mogilny Jake Tabasco Don Martin
  Diane Brown Kit Meadows Ramesh Shah Ron Gooden Susan Britt

mceclip1.png

The selected user's detail will show up along with their organizational relationships.  People Search enables rapid access of not only organizational contact information, but also internal teams' structure. 

mceclip2.png

Next, click the bell icon for Intelligent  Hub's notifications.  This is the place for any administrative, recommended app, and Mobile Flows notifications are displayed.  Hub n otifications  are not just informative, but more importantly, are actionable.   It's a single pane for essential, on the go, job-related communications!

Screen_Shot_2019-09-09_at_2.37.52_PM.png

Section 3: Understanding Security Features


Workspace ONE brings conditional access to users and devices.  We can observe Workspace ONE conditional access through the Intelligent Hub. 

Next, we will open the Hub and attempt to access the "Patient Records" app, an app that can be only accessed when the device is on a secure internal network.   

In Apps, search for "patient".  Note the Hub's fast indexing, enabling rapid access to the needed app.

mceclip10.png

...then attempt to open the Patient Records.   A Workspace ONE conditional access policy blocks access to the site because the device is not on the defined network.

mceclip11.png

Next, let's take a quick look at a key system restriction that has been applied.  

Try to access the App Store.   Nope, it's not available.  A Workspace ONE UEM restriction profile has prevented the installation of unapproved apps.  Only approved apps from the Intelligent Hub can be installed. 

Section 4: Enterprise Wipe Your Device


The last step to perform is to remove the corporate info from our device similar to how an organization could remove

The last step we will perform is to remove the corporate info from our device similar to how an organization could remove this info if the device was lost or stolen.

First, open a web browser and navigate to testdrive.awmdm.com. Log in with your TestDrive username and password.

Note: Your admin console username must be in the format vmwtd.com\username.

Next, ensure you're using the "Device Administrator at World Wide Enterprises" role by checking your account settings in the top right.

Screen_Shot_2018-08-17_at_12.29.51_PM.png

Next, navigate to Devices > List View in the left column. You can search for your username in the right side of the screen to find your device in the list. Click the name of your device to open the device details.

mceclip7.png

Next, click More Actions > Enterprise Wipe to wipe your device only of its managed settings, apps, and content.  Personal data is never touched.

mceclip8.png

Also, you can delete your device record from the console by choosing Delete Device.  If re-enrolling, deleting the device record is recommended. 

 

For Additional Support


Review Our Knowledge Base

Have more questions? Submit a request

Article is closed for comments.