Enabling Workspace ONE AirLift

Enabling Workspace ONE AirLift

Introduction

In this exercise, set up Workspace ONE AirLift, a tool that simplifies the transition from traditional PC Lifecycle Management to modern management with Workspace ONE UEM.

AirLift enables Microsoft System Center Configuration Manager (SCCM) and Workspace ONE UEM to co-manage Windows 10 devices. Co-management allows organizations to:

  • Address the challenge of using traditional PCLM tools for modern management
  • Manage legacy Windows desktop and server Operating Systems
  • Continue using SCCM policies that are deeply embedded into business systems
  • Meet SCCM requirements to upgrade Windows 7 to Windows 10
  • Enroll devices into Workspace ONE with SCCM

Workspace ONE AirLift provides the following features and functionality:

  • Monitors enrollment progress and modern management activity
  • Syncs SCCM and Workpace ONE
  • Enables mapping between SCCM device collections and Workspace ONE UEM smart groups
  • Facilitates application migration from SCCM to Workspace ONE
  • Creates SCCM deployments to enable Workspace ONE device enrollment
  • Provides detailed logs

Prerequisites

Before you can perform the procedures in this exercise, you must complete the Initial Configurations exercise.

This exercise requires a user to enroll their device into Workspace ONE UEM. Note the user account information in the following table. The details provided in this table are based on a test environment. Your user account details will differ.

User Account Information

User name
aduser
Password VMware1!
Email your@email.shown.here

Setup Workspace ONE AirLift

You will now setup Workspace ONE AirLift, connecting it to both Workspace ONE UEM and Microsoft SCCM in order to support co-management of Windows 10 devices.

1. Retrieve the Workspace ONE UEM API Key

We now need to retrieve the admin REST API key from the Workspace ONE UEM Console.  This key will be required by AirLift in order to connect to Workspace ONE UEM.  

In the Workspace ONE UEM Console,

  1. Click Groups & Settings.
  2. Click All Settings.

1.1. Copy the REST API Key

  1. Expand System.
  2. Expand Advanced.
  3. Expand API.
  4. Select REST API.
  5. Select the API Key value for the AirWatchAPI service.
  6. Right-click and click Copy.

You will need this key in the upcoming steps for configuring AirLift. For production you can also add a new API key for the AirLift Service.

2. Launch Workspace ONE AirLift

Double click the AirLift shortcut on the desktop of the SCCM server.

This will be the first time we are launching AirLift, so we will be asked to configure connectivity to Workspace ONE UEM and SCCM.

3. Configure AirLift

We will now configure AirLift to connect to both Workspace ONE UEM and SCCM.

3.1. Configure AirLift for Workspace ONE

  1. Enter https://labs.awmdm.com for the API URL.
  2. Select Same as API for the Console Address.
  3. Paste the API Key from your Workspace ONE tenant that you captured in the previous step.
  4. Enter your email address that you have associated with your VMware Learning Platform (VLP) account.
  5. Enter VMware1! for the Password field.
  6. Click the Continue button.

3.2. Configure AirLift for SCCM

  1. Enter sccm-01a.corp.local for the SCCM Server
  2. Enter HOL for the Site Code
  3. Enter CORP as the Domain
  4. Enter Administrator as the Account
  5. Enter VMware1! as the Password
  6. Click the Submit button

Congratulations - you have successfully configured AirLift!

Review and Enable Co-Management in Workspace ONE AirLift

The first time you launch AirLift, you will be taken to a getting started page with direct links to different phases of Co-Management.  

Click on Plan to start using AirLift.   This will take us to the Collections screen.

1. Review Device Collections in AirLift and compare to SCCM

When AirLift connects to SCCM, it imports Device Collections from SCCM.  Let's take a look at the information which AirLift has imported and compare it to what is in our SCCM server.  

  1. Click the eye symbol to the right of Getting Started so that a \ is through it.   This will prevent Getting Started from coming up each time we refresh the page.
  2. Click on Collections, if you are not already there.
  3. Review the Collections that have already been imported into AirLift from SCCM. Notice all of the Device Collections which are imported have at least one device assigned.

1.1. Open the SCCM Console

Click the SCCM Console icon from the taskbar to return to the SCCM Console.

2. Review Management of Collections in AirLift

Back in the AirLift Console in Chrome,

  1. Click the checkbox next to the Win10 collection.
  2. You can Map, Enroll, and Manages devices in collections from these buttons.  DO NOT interface with these yet, you will be using them in upcoming steps to view the functionality.
    Map allows you to determine a Workspace ONE UEM Smart Group for this collection to belong to in order to enable Co-Management.
    Enroll is enabled once Co-Management is enabled for a Collection, and allows you to enroll devices into Workspace ONE UEM.
    Manage is enabled once Co-Management is enabled for a Collection, and allows you to view and manage the Smart Group that your collection is mapped to in Workspace ONE UEM.
  3. Data is refreshed from SCCM and Workspace ONE UEM on a schedule.  You can click this button to initiate an immediate refresh of Collection and Smart Group data.
  4. Click the number (1) in the Devices column for the Win10 collection.  This will open a page with details on the devices in this collection.

2.1. Review your Windows 10 Machine

  1. Review the machine in the Win10 collection.  This is the Win10-01a Virtual Machine that is available to you for this lab.
  2. Click the Collections link to return to the collections page.

3. Map the Win10 Collection

  1. Click the checkbox for the Win10 collection to select it.
  2. Click Map.

When you click the Map button on a Collection, a list of available Workspace ONE UEM Smart Groups will be displayed, which you can choose from to map your device collections to enable  Co-Management.

3.1. Map SCCM Collection to Workspace ONE Group

  1. Enter AirLift for Workspace ONE Group.  
    Notice that the AirLift group does not exist in the dropdown list of available Workspace ONE UEM Smart Groups.  Entering in the name manually will have the AirLift Smart Group automatically created and mapped for Co-Management in the Workspace ONE UEM Console.
    NOTE: If you had an existing Smart Group you wanted to use to map and enable Co-Management for, you could select that from the Workspace ONE Group dropdown instead.
  2. Click Save to have the Win10 Device Collection mapped to the AirLift Smart Group in Workspace ONE UEM.

3.2. Confirming AirLift Smart Group Creation

  1. After clicking save, a message from AirLift will confirm that the Smart Group creation and mapping is In Progress.  This will update to a clickable link once it is completed.
  2. Once completed, the Workspace Mapping will update to the AirLift Smart Group and the Management column will reflect that the devices in this collection are now Co-managed. Click the AirLift hyperlink, this will take you directly to the Smart Group in the Workspace ONE UEM Console.  

NOTE - This process may take a few minutes to complete.  If the page does not refresh automatically, you can click the Refresh button on the browser or the Refresh button in AirLift to check if the task has completed after a few minutes!

3.3. AirLift Smart Group in Workspace ONE UEM Console

Notice that clicking the AirLift hyperlink in AirLift will automatically take you to the AirLift Smart Group mapping in the Workspace ONE UEM Console.

Click the Edit icon next to the AirLift Smart Group.

3.4. View Smart Group

  1. Scroll down to find the Tags section.
  2. Notice that a new custom tag is created with the format Co_Mgmt:site_<SCCM_Site_Code>:<Device_Collection_ID>.  This was generated automatically from AirLift.
  3. Click on the X to close this popup.

Review Workspace ONE AirLift

You will now review additional features and settings of AirLift to familiarize yourself with the console before upcoming exercises.

1. Review Devices in AirLift and Compare to SCCM

AirLift imports Windows 10 devices that are active SCCM Clients.  Let's take a look at what AirLift has imported and compare it to SCCM.  

In the AirLift Console in Chrome,

  1. Click on Devices in AirLift.
  2. Review details on the device imported into AirLift.

1.1. Compare Imported Devices to SCCM Device List

  1. Click the SCCM Console icon from the taskbar to return to the SCCM Console.
  2. Click on Assets and Compliance.
  3. Click on Devices.
  4. Review the list of devices in SCCM.  Notice there is only one active SCCM client that is running Windows 10.  This is the system that was imported into AirLift.

2. Review Applications in AirLift and compare to SCCM

AirLift imports metadata on SCCM Applications and allows these applications to be imported via APIs to Workspace ONE UEM.  This greatly simplifies the process of migrating applications to Workspace ONE without the need for repackaging.  

Back in the AirLift Console in Chrome,

  1. Click on Applications.
  2. Review the list of applications that have already been imported into AirLift.

2.1. Review Applications in SCCM

  1. Click the SCCM Console icon from the task bar.
  2. Click on Software Library.
  3. Expand Application Management.
  4. Click Applications.
  5. Review the applications in SCCM - notice they match what was imported into AirLift.

This module will not cover managing and migrating applications using AirLift in detail.  If you wish to learn more on this subject, refer to Migrating Applications from SCCM.

3. Review the AirLift Activity Log

The activity logs shows details of actions such as exporting applications, or setting Workspace ONE or SCCM connection information.

In the AirLift Console in Chrome,

  1. Click on Activity Log.
  2. Review the Activity Log details.  Notice that the actions you have taken during this exercise have been logged here for review.  This section can be useful for recalling past actions and troubleshooting.

4. Review the AirLift Settings

All of the account settings that were set during the initial launch of AirLift can be modified in the Settings section.  In addition, Enrollment settings are managed here.   The enrollment section lets you build a custom enrollment package in SCCM or select an existing one.  

  1. Click on Settings in AirLift.
  2. Review the Workspace ONE settings.  These settings can be updated from here if required.
  3. Scroll down to Enter connection information for System Center Configuration Manager.

4.1. Review SCCM Connection Info

  1. Review the SCCM settings. These settings can be updated from here if required.
  2. Scroll back up to the very top.

4.2. Review Enrollment Application

  1. Click the Enrollment tab to manage enrollment settings.
  2. Select Yes for Use Existing Enrollment Application.
  3. You can select an existing SCCM application to use for enrollment.

DO NOT select anything for now, you will return to these settings when enrolling a device in upcoming steps.

5. Review the AirLift Dashboard

The AirLift dashboard provides real-time information on your workloads which are managed by AirLift.

  1. Click Dashboard.
  2. The Devices section shows the number of devices managed by Workspace ONE UEM.
  3. The Applications section shows the number of applications managed by Workspace ONE UEM.
  4. The Top Workloads section shows the highest workloads on enrolled systems.
  5. The Co-Management by Collection section shows the breakdown of SCCM and Co-Management by collection.

Now that you are familiar with the overview of AirLift, the upcoming exercises will show how to use AirLift to manage and enroll a device.