VMware Workspace ONE Support for Apple Fall Release – iOS 12, macOS Mojave, and tvOS 12

September 19, 2018

At a special event on September 12th, Apple revealed new iPhones and a new Apple Watch, and announced the release dates for iOS 12, tvOS 12, and macOS Mojave. The recent VMware Workspace ONE UEM powered by AirWatch technology 9.7 release supports several newly announced features. This blog post outlines a list of the newly supported features and where to find them within the Workspace ONE UEM 9.7 console.

Apple iOS 12

Apple iOS 12 continues to build upon recent iOS releases by adding additional security-focused features. With Workspace ONE UEM 9.7 and later, VMware supports configuring the following features directly in the Workspace ONE UEM console.

Feature What It Does Where to Find It
S/MIME enhancements Administrators can now set whether the user can toggle S/MIME Signing and Encryption on or off. Additionally, administrators can choose whether users can select certificates other than the certificate delivered through Workspace ONE UEM. In the Email or Exchange ActiveSync payload, when Use S/MIME is enabled, the administrator can see four new check boxes to control this behavior.
OAuth for Exchange ActiveSync Administrators can enable native mail to use modern authentication when connecting to Exchange or Office 365. In the Exchange ActiveSync payload, select the check box to Use OAuth and optionally include a Single Sign-On or Credentials payload.
Notifications enhancements Administrators can now allow an application to bypass Do Not Disturb and ringer settings. Administrators can also allow notifications in CarPlay and choose how application notifications are grouped. In the Notifications payload, add an application for which you want to manage notifications behavior, and then select the appropriate options.
Restrictions On supervised devices, administrators can force automatic date and time sync, and control password auto fill, proximity requests, and sharing. Apple iOS also provides additional controls for contacts in managed and unmanaged apps. In the Restrictions payload, you can find all these new restrictions.

Apple macOS Mojave

Apple macOS Mojave is another release with a heavy focus on improved security and transparency for the end user. The most notable addition to macOS Mojave is the Privacy Policy Preferences Policy Control payload. 

Feature What It Does Where to Find It

User Privacy Preferences

Administrators can now pre-authorize application access to specific user or system data and events on behalf of an end user.   Overall, the expanded user data privacy protections help bring increased security and privacy awareness to macOS. As of Workspace ONE UEM 9.7, administrators must create a device-scoped custom XML profile for the user privacy preferences payload. UI support for the user data protections payload is forthcoming in a new version of Workspace ONE UEM.   
OAuth for Native Mail Administrators can enable native mail to use modern authentication when connecting to Exchange or Office 365. In the Exchange ActiveSync payload for a user-scoped macOS profile, select the check box to Use OAuth and optionally include a Credentials payload. When Use OAuth is selected, you can also define the URL for the client to connect to for OAuth.

Apple tvOS 12

Although tvOS 12 did not have any additional configuration payloads for MDM to deploy, Workspace ONE already fully supports any Apple TV upgrading to tvOS 12. 

Additional Resources

As always, we are excited about these new OS releases from Apple. It is clear that Apple continues to focus on end-user security, awareness, and privacy. VMware encourages all Workspace ONE administrators to download the iOS/macOS/tvOS betas and get familiar with the releases as they become available. 

The following links provide more detail on features in the Apple fall release operating systems:

Filter Tags

Workspace ONE Workspace ONE UEM Blog Announcement Intermediate iOS macOS Manage