Workspace App For Ios

Posted on by admin



Citrix Workspace app lets you access your SaaS, web apps, mobile, virtual apps, files, and desktops to help you be as productive on the go as you are in the office. If your company uses Citrix, you have the freedom to work on your favourite device from wherever you are. Just ask your IT department how to get started. Download the Citrix Workspace app from the Citrix Download page and install the app to upgrade from Citrix Receiver to Citrix Workspace app. Upgrade your Citrix Workspace app using the app store. For information about the features available in Citrix Workspace app for iOS, see Citrix Workspace app Feature Matrix. As a support team to clients using VMware’s Workspace ONE, Tech Orchard solves many issues with iOS devices. This FAQ covers problems and solutions.

Combine Workspace ONE UEM MDM features with Workspace ONE UEM apps to even further enhance security and functionality. Easily manage Workspace ONE UEM apps throughout the entire lifecycle across employee-owned, corporate-owned, and shared devices from the UEM console.

IPhone - as supported by the device's iOS. IPad - as supported by iOS (does not use the whole screen). Note: Starting in June 2020, Citrix Workspace app discontinues supporting iOS operating system version 11.x. Citrix Workspace app for iOS is client software available for download from the App Store. It enables you to access and run virtual desktops and hosted applications delivered by Citrix Virtual Apps and Desktops. IOS is the operating system for Apple mobile devices such as iPads and iPhones.

Workspace ONE UEM applications allow you and your end users to:

  • Explore the VMware Workspace ONE Content to sync a personal content folder.
  • Configure VMware Workspace ONE Web to secure Internet searches.
  • Enable VMware Workspace ONE Boxer to configure email.
  • Use the AirWatch Container as an alternative to MDM by providing separation of corporate and personal data on device, while maintaining employee privacy.

For more information about managing applications, see Mobile Application Management.

Workspace ONE Intelligent Hub for iOS

The Workspace ONE Intelligent Hub for iOS collects and delivers managed device information to the UEM console. Because this information may contain sensitive data, Workspace ONE UEM takes extensive measures to ensure that the information is encrypted and that it originates from a trusted source.

Workspace ONE UEM uses a unique certificate pair to sign and encrypt all communication between Workspace ONE Intelligent Hub for iOS and the server. These certificates also allow the server to verify the identity and authenticity of each device enrolled in Workspace ONE UEM. This overview details the benefits and necessities of both security enhancements.

Understanding the Certificate Exchange

Before any data is transferred, the Workspace ONE Intelligent Hub application and the server trade personalized certificates. This relationship is established when Workspace ONE Intelligent Hub for iOS checks into the Workspace ONE UEM server for the first time during enrollment.

  1. Workspace ONE Intelligent Hub for iOS communicates with the Workspace ONE UEM server to obtain the server’s certificate public key. Both Workspace ONE Intelligent Hub for iOS and the Workspace ONE UEM server trust the public key of the Workspace ONE UEM Root certificate, which verifies the authenticity of all certificates involved in the enrollment exchange.
  2. Workspace ONE Intelligent Hub for iOS validates the server’s certificate against the Workspace ONE UEM Root CA certificate.
  3. Workspace ONE Intelligent Hub for iOS sends a unique certificate public key to the Workspace ONE UEM server.
  4. The Workspace ONE UEM server associates the Workspace ONE Intelligent Hub’s certificate with that device in the database.

Securing the Data in Transit

After the initial exchange of certificates, all data sent to the UEM console is encrypted from that point forward. The following table shows the two certificates involved and their responsibility in the transaction.

Hub CertificateServer Certificate
Workspace ONE Intelligent HubSign the DataEncrypt the Data
Workspace ONE UEM ServerVerify the Data OriginDecrypt the Data

APIs and Application Functionality

There are two categories of APIs that Workspace ONE UEM uses with iOS devices for management and tracking capabilities:

  • Over-the-Air (OTA) MDM APIs are activated through the enrollment process regardless if Workspace ONE Intelligent Hub for iOS is used or not.
  • Native iOS SDK APIs are available to any third-party application, including Workspace ONE Intelligent Hub applications and any other application using the Workspace ONE UEM Software Development Kit (SDK).

The Workspace ONE Intelligent Hub for iOS acts as the broker application that integrates with the Native iOS SDK API layer of management. When using Workspace ONE Intelligent Hub for iOS combined with the Workspace ONE UEM SDK for iOS, administrators can take advantage of more MDM features for applications, more so than what is offered in the Over-the-Air (OTA) MDM API layer.

  • Configure Workspace ONE Intelligent Hub Settings for iOS Devices
    You can customize the Workspace ONE Intelligent Hub settings in the UEM console. For example, specify an SDK Profile to use with the Workspace ONE Intelligent Hub to harness Workspace ONE UEM functionality.
  • Workspace ONE Intelligent Hub Mobile Application for iOS
    After enrolling the Workspace ONE Intelligent Hub, the application defaults to a My Device screen. Here you can view real-time information about your device, sync the device, re-enroll the device, and read messages that have been sent from the UEM console.

Configure Workspace ONE Intelligent Hub Settings for iOS Devices**

You can customize the Workspace ONE Intelligent Hub settings in the UEM console. For example, specify an SDK Profile to use with the Workspace ONE Intelligent Hub to harness Workspace ONE UEM functionality.

Procedure

  1. Navigate to Devices > Device Settings > Apple > Apple iOS > Hub Settings.
  2. Configure the following settings for the Workspace ONE Intelligent Hub:
SettingDescription
Disable Un-Enroll in HubThis setting deactivates the user's ability to unenroll from Workspace ONE UEM MDM using the Workspace ONE Intelligent Hub. This setting is only available in the Workspace ONE Intelligent Hub v4.9.2 and higher.
Background App RefreshThis setting tells the Workspace ONE Intelligent Hub the maximum allowed time interval to refresh app content. Some applications run for a brief period before reaching a suspended state.
Background App Refresh is a feature in iOS where the application itself wakes from this suspended state. During this refresh, the Workspace ONE Intelligent Hub reports information, such as compromised detection, hardware details, GPS, iBeacon, and telecom, to the UEM console. The frequency at which the Workspace ONE Intelligent Hub refreshes is controlled by the OS and only completed during efficient times, such as when the device is plugged into a power source, frequency of use, or connected to Wi-Fi.
To take advantage of the Background App Refresh feature, this setting must be enabled in the UEM console, the Workspace ONE Intelligent Hub cannot be stopped on the device, and Background App Refresh must be enabled on the device for the Workspace ONE Intelligent Hub under Settings > General > Background App Refresh.
Minimum Refresh IntervalSelect the minimum amount of time that must pass before the device attempts to refresh app content.
Transmit on Wi-Fi onlyEnable background refresh to occur over Wi-Fi connections only.
  1. Customize the following extra configurations for the Workspace ONE Intelligent Hub from the Settings and Policies page in the UEM console for Single Sign On in this guide.

What to do next

For information about offline access, branding, and other Settings and Polices, refer to the VMWare AirWatch Mobile Application Management Guide.

Workspace ONE Intelligent Hub Mobile Application for iOS

After enrolling the Workspace ONE Intelligent Hub, the application defaults to a My Device screen. Here you can view real-time information about your device, sync the device, re-enroll the device, and read messages that have been sent from the UEM console.

The Self Service Enabled check box must be selected in the Hub Settings in the UEM console to see all the status information.

Note: If the Disable Un-enroll Hub option is not checked in Hub Settings, select Un-enroll Device before re-enrolling with the Workspace ONE Intelligent Hub v4.9.2.

My Device Functionality

  • Tap the Status menu to view various statuses and self-service diagnostic options:

    • Sync Device – Tap this action to send a request to resync the device with the UEM console.

    • Current Status – Use the menus to find information about enrollment, re-enroll the device, view accounts, and compliance.

    • Diagnostics – Use these menus to test connectivity, view Internet access, connectivity issues, server information, and view and send Hub and Device logs.

  • Tap the Device Details menu to view various status options:
    • Network – View network adapters and IP addresses.
    • Advanced – Use these menus to find information about the device's battery, memory, and disk space.
    • Location– View GPS coordinates for your device for the current and previous time periods
    • iBeacon – View the name of the iBeacon region. If iBeacon is configured but location data is not configured, then the device displays only the iBeacon area. If iBeacon and location data are enabled, then the device displays the iBeacon region and the map with the location on the device.
  • Use the dock at the bottom of the screen to find additional information including:
    • Messages– Read notifications from the UEM console. For example, you may receive notifications in the message center to complete a required compliance check to ensure that your device can be successfully monitored.
    • About – Find information about the Workspace ONE Intelligent Hub application and legal information.

VMware Workspace ONE Content

VMware Workspace ONE Content is an application that enables your end users to access important content on their devices while ensuring file safety for your organization.

From the Workspace ONE Content, end users can access content you upload in the UEM console, content from synced corporate repositories, or their own personal content.

Use the UEM console to add content, sync repositories and configure the actions that end users can take on content opened within the application. These configurations prevent content from being copied, shared, or saved without approval.

For more information about MCM and configuring the VMware Workspace ONE Content, see the VMware Workspace ONE UEM Mobile Content Management Guide.

VMware Workspace ONE Web

VMware Workspace ONE Web is an application that provides a manageable and secure alternative to native Web browsers. You can secure the browsing experience on an application, tunnel, and Web site level.

You can configure the Workspace ONE Web to meet unique business needs by restricting Web access to Web sites and providing a secure Internet portal for mobile point-of-sale devices. Provide users with a standard browsing experience, including support of multi-tabbed browsing and JavaScript dialog box. For maximum security on your Android and iOS devices, consider deploying the Workspace ONE Web with a Restrictions profile blocking the native browser.

For additional information about preparing and configuring the Workspace ONE Web for deployment, see the VMware Workspace ONE Web Admin Guide.

Configure Citrix Workspace App For Ios

VMware Workspace ONE Boxer

VMware Workspace ONE Boxer is an email application that offers a consumer-centric focus on mobile productivity with enterprise-grade security in the form of AES 256-bit encryption. This app containerizes business data from personal data, providing frictionless access to enterprise email, calendar, and contacts across corporate-owned and employee owned.

Workspace ONE Boxer allows users to personalize the app to meet their needs with features like custom swipe gestures, contact avatars, custom smart folders, and account color preferences. The all-in-one email, calendar, and contacts app provides an intuitive user experience following native design paradigms on devices.

For more information on VMware Workspace ONE Boxer, see the VMware Workspace ONE Boxer Admin Guide.

AirWatch Container for iOS

AirWatch Container offers a flexible approach to Bring Your Own Device (BYOD) management by pushing a secure work space to a personal device. Businesses can distribute Workspace ONE UEM applications and internal applications to the AirWatch Container for employees to use on their mobile devices.

Applications are visible inside and outside the AirWatch Container, but the enterprise applications are secure through a common SDK framework and a container passcode. These apps can interact seamlessly using single sign on authentication and can connect securely to the Internet through an app tunnel VPN.

For more information about the AirWatch Container, refer to the VMware AirWatch Container Admin Guide.

Enforcing Application-Level Single Sign On Passcodes

Single sign on (SSO) allows end users to access Workspace ONE UEM apps, wrapped apps, and SDK-enabled apps without entering credentials for each application. Using the Workspace ONE Intelligent Hub or the AirWatch Container as a 'broker application,' end users authenticate once per session using their normal credentials or an SSO Passcode.

Workspace app for windows

Enable SSO as part of the Security Policies that you configure to apply to all Workspace ONE UEM apps, wrapped apps, and SDK-enabled apps using a Default SDK Profile.

  1. Navigate to Groups & Settings > All Settings > Apps > Settings and Policies > Security Policies.

  2. Set Single Sign On to Enabled to allow end users to access all Workspace ONE UEM applications and maintain a persistent login.

  3. Authentication Type to Passcode and set the Passcode Mode to either Numeric or Alphanumeric to require an SSO Passcode on the device. If you enable SSO but do not enable an Authentication Type, end users use their normal credentials (either directory service or Workspace ONE UEM account) to authenticate, and an SSO Passcode does not exist.

Once an end user authenticates with an application participating in SSO, a session establishes. The session is active until the Authentication Timeout defined in the SDK profile is reachedor if the user manually locks the application.

Apple Configurator Overview

Workspace ONE UEM integrates with Apple Configurator to enable you to supervise and manage scaled deployments of Apple iOS devices. Administrators can create configuration profiles, import existing profiles from the iPhone Configuration Utility, install specific operating system versions and enforce iOS device security policies.

Install and run Apple Configurator 2 from a macOS laptop to integrate with the Workspace ONE UEM console to supervise and configure one or many devices at the same time.

  • Install the Workspace ONE UEM MDM profile as part of the configuration to enroll devices silently.
  • Supervise dedicated line-of-business devices that are shared among different users.
  • Create configuration profiles to change device settings for Wi-Fi networks, preconfigure mail and Microsoft Exchange settings, and more.
  • Distribute public apps without entering an Apple ID on the device using Configurator.
  • Create blueprints to automate device management. Use blueprints as templates to configure profiles and application and push them quickly to devices
  • Add Supervision to devices and take advantage of even more management capabilities including showing or hiding applications, modifying the device name, wall paper, passcodes, keyboard short cuts and more.
  • Back up user settings and app data, including new user-created data using Configurator.

Apple Configurator 2 also works with Apple's Device Enrollment Program (DEP) to automate Mobile Device Management (MDM) enrollment and the Volume Purchase Program (VPP) by assigning managed licenses apps to devices.

Workspace App Ios Azure Mfa

For a complete list of features and functionality available to supervised and unsupervised devices, refer to the iOS Functionality appendix.

For information on enrolling iOS devices with Apple Configurator, see Enrolling iOS Devices in Bulk using Apple Configurator and the Integration with Apple Configurator guide.

Upload a Signed Apple Configurator Profile to the UEM console

You can export a signed profile from Apple Configurator (or IPCU) directly to the UEM console.

  1. Configure supervision and management settings in Apple Configurator (or IPCU).

  2. Export and save the newly created profile to somewhere easily accessible on your computer.

  3. Navigate to Resources > Profiles & Baselines > Profiles within the UEM console and select Upload.

  4. Enter the Managed By group and select Upload to locate and upload the profile exported from Apple Configurator (or IPCU). Click Continue.

  5. Enter the general profile description, including name, description, and assigned organization groups.

  6. Click Save & Publish to send the profile down to assigned devices.

What's in the Release Notes

VMware Workspace ONE Intelligent Hub for iOS Release Notes provide information on the new features and improvements in each release. This page includes a summary of the new features introduced, a list of our resolved issues, and known issues. The release notes cover the following topics:

New Features

  • Attachment support in the For You Tab
    • Attachments added through the Workspace ONE Workflows or directly through the Notification Service such as Admin UI or API can now be accessed in the Intelligent Hub mobile app.
  • Support Tab design improvements
    • Containerization of the Support Tab landing page.
    • Clean-up of irrelative information. For example, if Support Email or Number is not provided, Hub will not display that in the list.
  • [Preview] Explore Tab: Support for more than 5 services
    • If an administrator has enabled all 6 services (Apps, People, Favorites, Support, For You, and Home tabs), Hub combines Apps and People into a new tab called Explore to adhere with mobile standards.
    • To enable this service, navigate to the Support tab, select your device > Preferences > ExploreTab.
  • Apps Tab Experience Modifications: A number of UI or UX uplift tweaks.
    • Containerization of the Apps Tab landing page
    • Support for dynamic text size
    • See All option for when the sections contain more apps than fit on the screen
    • Removal of secondary app installation prompt
  • Enhancements to the Deep Linking Framework: Additional capability to deep link into a person's profile on the People Tab.
    • wsonehub://people/view?id=<GUID>
      • Example. wsonehub://people/view?id=11e1b598-1cd1-49ec-8c84-024fc34353e7
      • Navigates to profile specified by the GUID
  • Web SDK Integration: With the Workspace ONE Web SDK integrated into Hub, in-app tunneling and browsing provides a more streamlined, single app experience.
    • Web settings are applied to the Home Tab and Helpful Links in the Support Tab to allow accessing intranet sites via the UAG. Additionally, links in the For You tab and Web or SaaS apps can now be opened in-line in Hub. With this functionality, there is Integrated Authentication for websites and SDK DLP policies to protect corporate data.
    • Configuration:
      1. To enable tunneling in Hub, an administrator must deploy a UAG or use the existing UAG deployment in the environment.
      2. Ensure that the Hub is assigned from the Workspace ONE UEM console and has an SDK profile associated with it.
      3. Specify the Device Traffic rules for Hub and list the domain or sites that need to be tunneled in Hub.
      4. Under the SDK settings, enable App Tunnel and select VMware Tunnel as the tunneling mode.
      NOTE: To enable Web or SaaS apps to launch within Hub itself, the administrator must configure the following key value pair (KVP) as a custom SDK setting:

{“OpenWebAppInHub”: true}

  • UI Tweaks: A number of tabs or modules received UI uplift tweaks.
    • Favorites Tab
      • Containerization of the landing page
      • Support for dynamic text size
      • Centering of the title text in the tiles
    • Apps Tab
      • Tile format for each app in the section
      • Modified the suggested search text
    • People Tab
      • Containerization of the landing page
      • Tile format for each person
      • Modified the suggested search text
      • Consistent order or direct reports
      • Consistent titles and order of attributes in profile view
    • Privacy Module
  • Updated Workspace ONE SDK: Consumed the WS1 SDK 20.11.1
  • Updates to Hub Assistant: Hub Assistant is now migrated to the v2 protocol
  • Enhancements to Workspace ONE Assist:
    • Added support for Workspace ONE Assist Server URL change
    • Added support for initializing Workspace ONE Assist in Hub based on Workspace ONE UEM privacy flag
  • Enhancements to the Deep Linking Framework: Additional capabilities to deep linking
    • wsonehub://apps/view/<app-name>
      • Example. wsonehub://apps/view/Boxer
      • Navigates to application specified by the app name
    • wsonehub://apps/view/<app-id>
      • Example. wsonehub://apps/view/com.air-watch.boxer
      • Navigates to application specified by the app id
    • wsonehub://apps/view?android=<android-app-id>&ios=<ios-app-id>&windows=<windows-app-id>&linux=<linux-app-id>
      • Example. wsonehub://apps/view?android=com.boxer.email&ios=com.air-watch.boxer
      • Navigates to application specified by the app ID
      • iOS Hub will only pay attention to the iOS query parameter

Minimum Requirements

  • iOS version 12.2 and later

  • Workspace ONE UEM 1909 and later

Download Instructions

  • When any previous version of the Workspace ONE Intelligent Hub is installed, the direct end-users must update the app when prompted. The application seamlessly updates the existing application version without disrupting the device enterprise functionality.

  • When any previous version of the Workspace ONE Intelligent Hub is not installed, the direct end-users must download the Workspace ONE Intelligent Hub from the Apple App Store.

Resolved Issues

The resolved issues are grouped as follows.

Resolved Issues for VMWare Workspace ONE Intelligent Hub 20.03 for iOS

  • HUBI-5292: Flickering when viewing the Enrollment Terms of Use while in Dark Mode.

  • HUBI-5316: Location screen for iBeacon was missing a header.

  • HUBI-5524: Error banner fails to appear when invalid deep link is used.

  • HUBI-5688: Migration screen not shown in Hub during managed mode migration from Workspace ONE app to Intelligent Hub.

  • HUBI-5721: 'You have changed the icon for 'Hub' alert presented multiple times after un-enrollment rendering the app unresponsive.

  • HUBI-5743: Localization of the word 'Priority' is not loaded in title of priority notification card.

  • HUBI-5777: Security improvements for cached files.

  • HUBI-5785: Hub Catalog intermittently fails to appear.

Resolved Issues for VMWare Workspace ONE Intelligent Hub 20.02 for iOS

  • HUBI-4707: User stuck at loading screen if Workspace ONE Access authentication fails.

  • HUBI-5137: Intermittent UI issue on the Apps Tab where the apps and sections are duplicated or empty.

  • HUBI-5236: Privacy and Group ID screen appear after un-enrollment.

  • HUBI-5251: Navigating back from Privacy screen incorrectly returns to Workspace ONE Access authentication screen.

  • HUBI-5380: Hub did not handle a 3 character hex value for branding.

  • HUBI-5501: Hub temporarily displays Privacy screen and then empty Account screen if device record is deleted from the UEM Console.

  • HUBI-5520: Hub incorrectly initializes and then disables Workspace ONE Intelligence.

  • HUBI-5525: Deep link for App Details during cold boot fails to show parameter in search bar.

  • HUBI-5535: Device in Registered Mode would fail to recover when Hub app was deleted and reinstalled.

  • HUBI-5572: Hub section in the Settings apps failed to load.

  • HUBI-5591: Notification prompt is shown on Hub on either fresh launch or when backgrounding the app.

  • HUBI-5637: Privacy screen missing dismiss button when triggered from multi-user staging flow.

  • HUBI-5645: Device Details section in Support Tab showing incorrect user after check-out.

  • HUBI-5662: Third party flip for registration failing when Hub is locked with a passcode.

Resolved Issues for VMWare Workspace ONE Intelligent Hub 21.01 for iOS

  • HUBI-4295: Incomplete localization of text in the Settings app for Intelligent Hub.

  • HUBI-4305: Notification bar was not reflecting the accurate unread count.

  • HUBI-4863: The Privacy (GDPR) screens show intermittently as the device un-enrolls.

  • HUBI-5007: App icon change did not reflect until Hub app was restarted.

  • HUBI-5090: Unenroll Device option would be grayed out.

  • HUBI-5142: When in Agent-Only mode, incorrect error message was shown when staging user credentials were entered for single standard user.

  • HUBI-5144: Intelligent Hub intermittently requests a username/password after a restart of a successfully enrollment.

  • HUBI-5153: UI issue on the FTUX/Education screens.

  • HUBI-5167: UI issue in the People Tab when switching between Light Mode and Dark Mode.

  • HUBI-5208: Account screen not updating when Hub Catalog is disabled in a Hub Services-enabled environment.

  • HUBI-5228: Authentication page incorrectly formatted error message.

  • HUBI-5248: Empty APNs messages remaining in Agent-Only Mode.

  • HUBI-5272: Legacy download profile screen appears during enrollment.

  • HUBI-5273: Compromised status detection did not occur on first launch of a staging user enrolled device.

  • HUBI-5297: UI tweak to the icon in the overflow menu.

  • HUBI-5298: Floating action button moved when physical keyboard is attached to an iPad.

  • HUBI-5335: The close button of the History section in For You Tab was not dismissing correctly on an iPhone.

  • HUBI-5340: Device blacklisted message is not appearing in Hub.

  • HUBI-5342: Hub crashes when a custom setting from Workspace ONE UEM contains a null value.

  • HUBI-5418: Blacklisted apps were not displayed properly in compliance policy details.

  • HUBI-5454: Hub showed Discovery screen after checking out on multi-staging CICO screen.

  • HUBI-5456: Hub intermittently prompts for Access re-authentication after checking out a user for multi-staging.

  • HUBI-5492: Access screen did not load during checkout.

  • HUBI-5514: Alert for notification permissions seen right after installing and launching Hub.

  • HUBI-5547: Hub Services Education (FTUX) screens displayed when Source of Authentication is set to Workspace ONE Access but Hub Services is disabled.

Known Issues

The known issues are grouped as follows.

Known Issues for VMware Workspace ONE Intelligent Hub 21.03 for iOSCitrix

We haven’t identified any notable known issues in this release. If you are facing any problems, feel free to reach out to our support team.

Known Issues for VMware Workspace ONE Intelligent Hub 21.02 for iOS

We haven’t identified any notable known issues in this release. If you are facing any problems, feel free to reach out to our support team.

Known Issues for VMware Workspace ONE Intelligent Hub 21.01 for iOS

We haven’t identified any notable known issues in this release. If you are facing any problems, feel free to reach out to our support team.