Creating a Windows 10 Virtual Machine to Test Workspace ONE

Overview

Introduction

VMware Workstation™ and VMware Fusion® are Desktop Hypervisor products from VMware that provide IT pros, developers, and businesses alike with a powerful local virtualization sandbox to build, run or support apps of any kind.

Whether you're a Windows 10 administrator running a proof-of-concept or need a Windows 10 sandpit, this tutorial will help you to build a Windows 10 virtual machine that you can enroll in VMware Workspace ONE® UEM and try out demos in VMware TestDrive.

In this tutorial, we will walk through the best way to configure the virtual machine settings in VMware Workstation, so you can take advantage of features in VMware Workspace ONE®  such as BitLocker encryption, Windows Security Settings, and more.

Audience

This tutorial is for existing and prospective IT administrators of Workspace ONE and anyone who uses the product. Familiarity with networking and storage in a virtual environment, Active Directory, identity management, and directory services is assumed.

Knowledge of VMware Workspace ONE® UEM (unified endpoint management), VMware Workspace ONE® Access (formerly VMware Identity Manager), and VMware Horizon®  and VMware Workstation and VMware Fusion are also helpful.

Purpose

The Creating a Windows 10 Virtual Machine to Test Workspace ONE tutorial helps you evaluate Workspace ONE by offering practical exercises in setting up a Windows 10 sandpit using VMware Workstation or VMware Fusion.

This virtual machine can then be used to set up your own proof-of-concept environment, for User Acceptance Testing (UAT) environments, or to experience Workspace ONE using VMware TestDrive as a demo environment.

Requirements

General Requirements

Requirements Minimum
Supported Browsers The latest version of
  • Google Chrome
  • Mozilla Firefox
  • Apple Safari or 
  • Microsoft Edge
Workspace ONE UEM Environment Admin and User credentials to either:

Device Requirements

With the release of VMware Workstation/Player 15.5.5, we are very excited and proud to announce support for Windows hosts with Hyper-V mode enabled.

This is a joint project from both Microsoft and VMware. You can also check out Microsoft’s blog: VMware Workstation and Hyper-V.

If you are using Windows version 2004 or later, you can run BOTH Hyper-V AND VMware Workstation 

You must have either VMware Workstation or VMware Fusion installed on your computer.

The following is a list of evaluation and download links: 

Files to Download

You must have the following files already downloaded.

  1. Windows 10 ISO File
  2. Workspace ONE Provisioning Tool 
    • The VMware Workspace ONE Provisioning Tool helps you test and validate your applications (exported as a .ppkg file) and the special-purpose unattend.xml configuration file as part of Factory Provisioning for Workspace ONE. This tool simplifies the testing and validation of this process in your own environment before these files are sent and applied at the OEMs factory.
    • Optionally, you can try out our Day 1 Onboarding with Workspace ONE. We recommend using VMware TestDrive for this, as the configurations are already set up in TestDrive for you.
    • Download the Workspace ONE Provisioning Tool.

Configuring the Windows 10 Virtual Machine Settings

Installing Windows 10 in VMware Workstation or Fusion

In this exercise, you install the Windows operating system in VMware Workstation. If you are using a Mac and VMware Fusion, the steps will be very similar.

1. Create a New Virtual Machine

 Create a New Windows 10 Virtual Machine in VMware Workstation.
  1. Start VMware Workstation and select Create a New Virtual Machine.

2. Select Configuration in New Virtual Machine Wizard

 Select configuration in the New Virtual Machine Wizard in VMware Workstation.
  1. Select Typical for configuration type.
  2. Click Next.

3. Install Guest Operating System

Select Guest Operating System ISO in VMware Workstation.
  1. Browse for the Windows 10 ISO file that you have already downloaded onto your machine.
  2. After the ISO file is selected, click Next.

4. Provide Easy Install Information

Provide Easy Install Information to create a Windows 10 virtual machine in VMware Workstation.
  1. Enter the Windows product key, if you have one.
  2. Select the version of Windows to install. We recommend Pro, Education, or Enterprise.
  3. Enter a Username and Password to create a local Windows account.
  4. Click Next.

5. Enter a Virtual Machine Name

Name the Windows 10 Virtual Machine in VMware Workstation.
  1. Enter a name for the virtual machine. For example Demo, TestDrive, or Windows 10 Testing.
  2. Review the location of the virtual machine.
    • Note: If you use a cloud backup service like One Drive folder redirection, we recommend that you change the default VM location to a folder that does not back up to cloud backup services.
    • In this example, my Virtual Machines are located on C:\VM\VM Name.
  3. Click Next.

6. Specify Disk Capacity

Specify Disk Capacity when creating a Windows 10 virtual machine in VMware Workstation.
  1. Review the Disk Capacity for the virtual machine. Increase capacity if required.
  2. Click Next.

7. Review Virtual Machine Configuration

Review Windows 10 Virtual Machine Configuration in VMware Workstation.
Review Virtual Machine Configuration
  1. Review the Virtual Machine Configuration.
    • Review allocation for CPU, RAM, and Disk space. Increase if needed.
  2. Ensure that Power On This Virtual Machine After Creation is selected.
  3. Click Finish.
  4. VMware Workstation will now begin the setup process.

8. Review Windows Setup Wizard

Windows Set Up Wizard
Windows Set Up Wizard
Windows Set Up Wizard

Windows 10 will go through its installation process.

9. Confirm that Windows Desktop Loads

Arrive at the Windows Desktop

After the installation process has finished, you should see the Windows Desktop screen.

Converting the OS disk from MBR to GPT

To enable the Virtual Trusted Platform Module (vTPM) and additional Windows 10 Security features that require the TPM, you must convert the disk.

Depending on your ISO image, the disk might already be converted.

In this exercise, you convert the disk from Master Boot Record (MBR) to GUID Partition Table (GPT) and confirm the settings inside the Windows 10 Operating System.

Master Boot Record (MBR) vs GUID Partition Table (GPT)

Master Boot Record (MBR) disks use the standard BIOS partition table, where as GUID Partition Table (GPT) disks use Unified Extensible Firmware Interface (UEFI).

Your Windows 10 boot settings might default boot via the BIOS.

For more information, see Convert MBR partition to GPT in Microsoft Docs.

1. Convert Virtual Machine Disk from MBR to GPT

Convert Virtual Machine disk from MBR to GPT
  1. Open Command Prompt with Admin Privileges.
  2. Run the following command.
    MBR2GPT /convert /allowFullOS
  3. The conversion might show as failed in Command Prompt. You can confirm the disk has been converted to GPT in the Disk Management utility in Windows 10.

2. Review Virtual Machine Disk Properties

Review Windows 10 Virtual Machine Disk Properties in VMware Workstation.
  1. In the Search bar, search for Disk Management.
  2. Select Create and format hard disk partitions.
Review Windows 10 Virtual Machine Disk Properties in VMware Workstation.
  1. Right-click the Disk.
  2. Select Properties.
  3. Select the Volumes tab.
  4. Confirm that Partition style is GUID Partition Table (GPT).

3. Shut Down the Machine

Shutdown the Machine

After you have confirmed the disk properties, shut down the machine.

Editing the Virtual Machine Configuration (.vmx) File

After the virtual machine has been created with the operating system installed, you can modify specific virtual machine settings (VMX file) for advanced configuration. This allows you to test some advanced functions in Workspace ONE such as:

  1. Change the Device Serial Number (Recommended)
    • This changes the device serial number to a shorter serial number.
  2. Add an additional Hard-Drive (Optional)
    • Enable another virtual hard disk for BitLocker encryption of multiple drives.

After you edit the VMX file, the next step is to modify the virtual machine settings so the operating system can boot.

1. Change the Device Serial Number (Recommended)

Change the Device Serial Number (Optional)
Change the Device Serial Number (Recommended)
  1. When enrolling a virtual machine into Workspace ONE UEM, if the device serial number has not been shortened, you will see a long device serial number.
  2. You can also find the device serial number locally on the machine. Open Command Prompt and enter wmic bios get serialnumber

In the next steps, you modify the .vmx file to shorten this serial number.

1.1. Open the Virtual Machine Directory

Open the Virtual Machine Directory
  1. Right-click the virtual machine in Workstation and select Open VM directory.

1.3. Change the Device Serial Number Configuration

Change the Device Serial Number Configuration

Navigate to the bottom of the text and add the text shown in Use Short Serial Number Setting and Use Serial Number Setting and Add Additional Drive Setting to the .vmx file.

Tip: You can add the Additional Disk at the same time if needed. Make sure you follow all the steps to include the additional hard disk in the operating system.

Use Short Serial Number Setting

SMBIOS.useShortSerialNumber = "TRUE" 

SMBIOS.use12CharSerialNumber = "TRUE"

Use Short Serial Number Setting and Add Additional Drive Setting

To add the Additional Disk and Shortened Serial Number at the same time, use the following text.

SMBIOS.useShortSerialNumber = "TRUE" 

SMBIOS.use12CharSerialNumber = "TRUE" 

ahci.port.hotplug.enabled = "FALSE" 

devices.hotPlug = "FALSE"

  1. Review the virtual machine configuration changes. This screenshot shows the Additional Disk and Shortened Serial Number configurations.

1.4. Review Device Serial Number

Review Device Serial Number
  1. To review the serial number change in the operating system, open Command Prompt and enter in the command: wmic bios get serialnumber
  2. Confirm that the serial number is different to the original. The new serial number should be a lot shorter.

2. Add an Additional Hard-Drive (Optional)

Enable another virtual hard disk to test Workspace ONE UEM BitLocker encryption of multiple drives.

To do this, follow the previous steps and add in these settings to the virtual machine configuration (VMX) file.

Later in this tutorial, you will Add Virtual Hard Drive to Virtual Machine (Optional).

ahci.port.hotplug.enabled = "FALSE"

devices.hotPlug = "FALSE"

Enabling Virtual Machine Security Settings

After you have changed the operating systems disk from MBR to GPT, you must turn on Windows 10 Security features and change the how the guest operating system boots up.

For this exercise, you will:

  1. Enabling Virtual Machine Encryption
  2. Adding the Virtual TPM Chip

1. Enable Virtual Machine Encryption

The virtual machine must be encrypted to add a TPM chip.

A password needs to be set for encryption of the VM.

Warning: When a virtual machine is encrypted, this will also encrypt the VMX file.

Ensure that any modifications you need to make to the VMX file are completed before encrypting the virtual machine.

1.2. Encrypt the Virtual Machine

Set a password for Windows 10 virtual machine in VMware Workstation.
Encrypt the Virtual Machine
  1. Set a Password for the virtual machine. You must enter this password every time you launch the virtual machine.
  2. Workstation begins the encryption process.

2. Add the Virtual TPM Chip

A TPM chip is required for Windows functions such as:

  • BitLocker Encryption
  • Windows Hello For Business
  • Windows 10 Secure Boot

2.2. Add the TPM Chip

Add the TPM Chip to the Windows 10 virtual machine in VMware Workstation.
  1. Select Trusted Platform Module.
  2. Click Finish.
Add the TPM Chip
  1. Confirm that Trusted Platform Module is added.
  2. Click OK.

3. Review Windows OS Boot Up Settings

Review Windows OS Boot Up Settings in VMware Workstation.
  1. Navigate to the Virtual Machine Settings and select the Options tab.
  2. Select Advanced.
  3. Under Firmware type, ensure that UEFI is selected and Secure Boot is enabled.
  4. Click OK.

Adding Virtual Hard Drive to Virtual Machine (Optional)

Workspace ONE UEM has advance remote encryption features, like activating BitLocker encryption for multiple hard drives.

To enable the feature in the virtual machine, you must create another virtual hard disk (VHD).

In the following exercise, you create a VHD and attach it to the operating system.

 

BitLocker Encryption Workspace ONE UEM

1. Open Disk Management

Open Disk Management  on the Windows 10 virtual machine in VMware Workstation.
  1. In the Search bar, search for Disk Management.
  2. Select Create and format hard disk partitions.

2. Create a VHD

Create a VHD in the Windows 10 virtual machine.
  1. Select Action.
  2. Click Create VHD.

3. Create and Attach Virtual Hard Disk

Create and Attach Virtual Hard Disk  to Windows 10 virtual machine in VMware Workstation.
  1. Click Browse – enter a name for the disk and specify the disk location.
  2. Review the Location of the virtual hard disk.
  3. Configure the Disk Size.
  4. Select the Virtual Hard Disk Format. This example uses VHDX.
  5. Select the Virtual Hard Disk Type. This example uses Dynamically expanding.
  6. Click OK.

4. Initialize the Disk

Initialize the Disk for the Windows 10 virtual machine in VMware Workstation.
Initialize the Disk
  1. You should now see the created disk in Disk Management. If not, click Action > Refresh.
  2. Right-click the Disk.
  3. Select Initialize Disk.
Initialize the Disk
  1. Select the check box for the Disk.
  2. Ensure that the disk partition style is GPT (GUID Partition Table).
  3. Click OK.

5. Create a Disk Volume

Create a Disk Volume on the Windows 10 virtual machine.
  1. Right-click the Disk Space.
  2. Select New Simple Volume.

6. Complete the New Simple Volume Wizard

Completing the New Simple Volume Wizard in Windows 10 virtual machine.
  1. Navigate through the New Simple Volume Wizard configuration and review the changes.
  2. Click Finish.

7. Review the New Disk Volume

Review the New Disk Volume
  1. Review the Disk Settings Assigned Drive.
  2. Ensure that the partition status is Healthy.
  3. Ensure that the Disk is Online.

Preparing to Test Workspace ONE

Creating the Windows Provisioning Package (.ppkg)

Now that you have a virtual machine created, the next steps are:

If you want to use a lab environment of your own, you can follow:

Creating a Snapshot in VMware Workstation

After you have followed the Factory Provisioning guides, copy the following files to the virtual machine before taking a snapshot.

  • Workspace ONE Provisioning Tool
  • Unattended XML
  • PPKG File

1. Take Snapshot of the Virtual Machine

Take Snapshot of the Windows 10 Virtual Machine in VMware Workstation.
  1. In Workstation, select the virtual machine that you want to create a snapshot for and right-click the virtual machine.
  2. Click Snapshot.
  3. Select Take Snapshot.

2. Name the Snapshot

Name the Snapshot in VMware Workstation.
Name the Snapshot
  1. Enter a name for the snapshot.
    • In this example, the snapshot name is DropShip Ready - Feb 2021.
  2. Enter the description.
    • As you have made changes to the virtual machine, it is important to list the changes that are part of the snapshot.
  3. Click Take Snapshot.
  4. VMware Workstation will now take a snapshot of the virtual machine.
    • You will learn how to revert back to the created snapshot a little later in this tutorial.

3. Review Virtual Machine Snapshot

 Review Virtual Machine Snapshot in VMware Workstation.

Follow the steps in Take Snapshot of the VM and navigate to Snapshots > Snapshot Manager.

  1. Select the Snapshot.
  2. Review the Snapshot details.

Resetting the Windows 10 Virtual Machine for the Next Test

Deleting the Device Record from the Workspace ONE UEM Console

If you have created a snapshot of the virtual machine and want to revert back, you must delete the device record from the Workspace ONE UEM server.

1. Locate the Device Record in Workspace ONE UEM

Locate the device record in Workspace ONE UEM admin console.
  1. In the Workspace ONE UEM console, search for the device serial number in the Universal Search.
  2. Select the device record.
  3. Alternatively, you can find the device under the Devices menu.

2. Delete the Device Record from Workspace ONE UEM

 Delete the Device Record from Workspace ONE UEM admin console.
  1. Click More Actions.
  2. Select Delete Device and follow the prompts.

Reverting the Virtual Machine to a Previous Snapshot

When testing the out-of-box experience (OOBE) or Drop Ship Provisioning with Workspace ONE, you can revert back to a previous snapshot that has been taken.

1. Revert to a Previous Snapshot

 Reverting to a previous snapshot in VMware Workstation.
  1. Select the Virtual Machine you want to revert to a previous snapshot and right-click the virtual machine.
  2. Navigate to the Snapshots option.
  3. Select the Snapshot to revert to.
  4. You can also navigate to the snapshot in Snapshot Manager 

Summary and Additional Resources

Conclusion

This tutorial provided steps on how to create a Windows 10 virtual machine for Workspace ONE whether you are a Windows 10 administrator running a proof of concept, or need a Windows 10 sandpit to enroll and try out demos in VMware TestDrive.

This tutorial covered the best way to configure the virtual machine settings in Workstation, so you can take advantage of features in Workspace ONE such as BitLocker encryption, Windows Security Settings, and more.

Additional Resources

For more information about Workspace ONE, explore the VMware Workspace ONE Activity Path. The activity path provides step-by-step guidance to help you level-up in your Workspace ONE knowledge. You will find everything from beginner to advanced curated assets in the form of articles, videos, and labs.

Additionally, you can check out the VMware Workspace ONE and VMware Horizon Reference Architecture which provides a framework and guidance for architecting an integrated digital workspace using VMware Workspace ONE and VMware Horizon. 

About the Author

This tutorial was written by:

  • Darren Weatherly, Senior Architect, End-User-Computing Technical Marketing, VMware.

Feedback

Your feedback is valuable. 

To comment on this tutorial, contact VMware End-User-Computing Technical Marketing at euc_tech_content_feedback@vmware.com.

Filter Tags

Workspace ONE Workspace ONE UEM Document Quick-Start Overview Windows 10 Design