Announcing Workspace ONE Hub for Windows 11 on ARM64

January 19, 2023

VMware is adding more functionality to the Windows 11 on Arm64 platform, and continuing to innovate on the Workspace ONE platform to bring management to any device, from anywhere, for any user, securely.

Workspace ONE UEM 2210 release now provides the Intelligent HUB Application for Windows 11 on ARM64 providing these improvements in Phase 1:

If you are an IT administrator or product evaluator who is tasked to manage device compliance and software distribution for Windows 11 on ARM64 devices, this blog is for you. Today these devices include the Microsoft Surface ProX, Lenovo ThinkPad, Samsung Galaxy Book, and HP Folio, just to name a few, and this list is growing.

Workspace ONE HUB enrollment for Windows 11 on ARM

Similar to other Windows devices beginning with Workspace ONE 2210, you can enroll Windows11 on ARM through the Hub Enrollment method. This enables you as administrator to instruct the user to go to and download the file.

The Installation package for HUB is an MSI file so it can be started both through the interactive prompts or silently without user prompts.

Installation Procedure

  1. On a Windows 11 on ARM device, log in with a user account that has administrative privileges.
  2. Open a browser and navigate to and select Download Hub for Windows ARM64 to download and start the installation process.

Graphical user interface, text, application</p>
<p>Description automatically generated

  1. Launching the AirWatchAgentarm64.msi without command line parameters launches in the default method of Interactive installation and prompts the user for information.
  2. The user fills out the necessary enrollment information, including email or server name and Organization Unit (OU) for enrollment, and agree to the license terms.
  3. Once enrolled, the Hub Application launches and the device begins applying policies and downloading any applications for the user or device.

Silent Enrollment

IT can automate the enrollment of the device through scripting of the Silent Enrollment, as follows:

msiexec /i "AirWatchAgentarm64.msi" /q ENROLL=Y LGName=CompanyOG PASSWORD=P@ssw0rd ASSIGNTOLOGGEDINUSER=Y /LOG %temp%\WorkspaceONE.log

Note: These are the simplest form of MSI installation parameters, and can be added to a deployment command or script.

For more information on the entire process, see: Onboarding Windows Devices Using Command-Line Enrollment: Workspace ONE Operational Tutorial.

Application Installation using Software Distribution (SFD)

Similar to other Windows devices, Workspace ONE can distribute software to Windows 11 on ARM64 using the Software Distribution Agent.

A few months ago, Workspace ONE announced the support for ARM64 devices and the specific APPX file format. For more details, see: Workspace ONE UEM Enhances support for Windows on ARM devices.

Workspace ONE UEM version 2210 offers support for the MSIX and MSIX Bundle to distribute software to Windows 11 devices.

(Note: We recommend testing the deployment of applications because not all applications are compatible with ARM64, or some may have specific requirements.)

HUB Catalog on ARM64

The HUB Catalog is available for Windows 11 on ARM64 devices listing applications that the users can install, and the status of applications being installed by UEM.

Graphical user interface, application, PowerPoint</p>
<p>Description automatically generated

BitLocker Encryption Management for ARM64

For Windows 11 on ARM64 devices, you can now control Bitlocker encryption directly from the console, similar to other Windows devices.

Graphical user interface, application</p>
<p>Description automatically generated

Sensors based on CIM queries

You can now run UEM Sensors on Windows 11 on Arm64 devices. The limitation is that because of the architecture of Windows on ARM, you can only run CIM-based queries (WMI queries are not supported). This is the recommended approach for all device queries by Microsoft.

Warning: Do not use a WMI query for ARM64 like this one:
Get-WmiObject -Query "not good on ARM64'"

Instead of the WMI query, use the equivalent CIM query:

Get-CimInstance -Query "SELECT * from Win32_Process WHERE name LIKE 'P%'"

Scripts for Windows 11 on ARM

Scripts are also available for Windows 11 on ARM. Under Resources Menu, you can select Windows as the target operating system. The scripts are available in the UEM console in the following areas:

You can navigate to the scripts by clicking Resources > Scripts:

Graphical user interface, application</p>
<p>Description automatically generated

Scripts are displayed as follows:

Graphical user interface, application</p>
<p>Description automatically generated

I hope this information was helpful.


Your feedback is valuable.

To comment on this paper, contact VMware End-User-Computing Technical Marketing at

Filter Tags

Workspace ONE Workspace ONE UEM Blog Announcement Intermediate Windows 10