Learning Path Tutorials
-
Tutorial 1 - 2 min activityOverview
-
Tutorial 2 - 8 min activityInitial Configurations
-
Tutorial 3 - 17 min activityEnabling Workspace ONE AirLift
-
Tutorial 4 - 20 min activityMigrating Devices and Users from SCCM
-
Tutorial 5 - 7 min activityMigrating Applications from SCCM
-
Tutorial 6 - 23 min activityMigrating GPOs from SCCM
-
Tutorial 7 - 28 min activityManaging CSPs Using VMware Policy Builder
-
Tutorial 8 - 6 min activityRemoving the SCCM Client
-
Tutorial 9 - 4 min activitySummary and Additional Resources
Initial Configurations
Initial Configurations
Introduction
This exercise prepares you for the transition to Windows 10 Modern Management with Workspace ONE UEM. Make sure that you complete each procedure in this section before going to the next exercise.
Prerequisites
Before you can perform the procedures in this exercise, you must satisfy the following requirements. For more information, see the VMware Identity Manager Documentation and VMware AirWatch Documentation.
- Check whether you have the following components installed and configured.
- Workspace ONE UEM v9.5 or later, with admin credentials
- Directory Services configured
- VMware Enterprise Systems Connector that can reach the AirWatch Cloud Messaging (AWCM) server
- (If SAML enabled) Staging Organization Group and account with standard single user devices enabled
- Active Directory with users available to add to the Workspace ONE tenant
- SCCM 2012 R2 and later that meets the following criteria:
- Admin credentials to the SCCM Console
- Read Only Analyst for basic functionality
- Privilege to create and deploy SCCM applications in order to build and deploy a custom enrollment application
- At least one SCCM Device Collection with at least one Windows 10 client
- PowerShell with Admin rights
- Google Chrome 42.0 or later
- Workspace ONE UEM v9.5 or later, with admin credentials
- Verify that your device meets the operating system and software requirements.
- Windows Pro, Enterprise, or Education device.
- Clean Windows operating systems domain-joined to the same domain as the SCCM server
- Windows 10 and Windows Server tested
- 2 CPU and 4 GB RAM
- Complete the Environmental Details Worksheet.
Logging In to the Workspace ONE UEM Console
1. Launch Chrome Browser
On your desktop, double-click the Google Chrome icon.
3. Authenticate In to the Workspace ONE UEM Console
- Enter your Username. For example,
admin. Record this value in the Environment Details Worksheet. - Enter your Password. For example,
VMware1!. Record this value in the Environment Details Worksheet. - Click the Login button.
Note: If you see a Captcha, be aware that it is case sensitive.
Enabling User Group Mapping
1. Navigate to Shared Device Settings
- In the Workspace ONE UEM Console, at the highest Organization Group level, click Settings.
- Select Devices & Users.
- Select General.
- Select Shared Device.
2. Enable Fixed Organization Group
- Select Override.
- Select Fixed Organization Group.
Retrieving API Details
Retrieve API details from the Workspace ONE UEM Console to facilitate the connection with SCCM.
1. Navigate to API Settings
- In the Workspace ONE UEM Console, select Groups & Settings.
- Select All Settings.
2. Retrieve the API Key
- Select System.
- Select Advanced.
- Select API.
- Select REST API.
- Right-click the API Key.
- Click Copy.
- Record the API Key in the Environment Details Worksheet.
Retrieving the Organization Group ID
In the Workspace ONE UEM Console,
- Click on your Organization Group name.
- Copy your Group ID value. For example, copy the Group ID
yourid1234. Then, record this value in the Environment Details Worksheet.
Logging In to the SCCM Console
1. Launch the SCCM Server
Log in to your SCCM server.
2. Launch the Configuration Manager Console
- Launch the SCCM Console from the taskbar.
- If the Configuration Manager dialog box appears, click OK.
3. Explore the SCCM Console
Take a minute to explore the SCCM console. The main components of SCCM are as follows.
- Assets and Compliance — View all the users and devices managed by SCCM.
- Software Library — Deploy applications at a high-level.
- Monitoring — Check status and log files.
- Administration — Perform updates, migrations, update-readiness, and co-management.
Gathering Environment Details
The exercises in this operational tutorial require the entry of a number of environmental details. To simplify configuration, and minimize the potential for error, complete the Environmental Details Worksheet.
The examples in the worksheet are the values used in the operational tutorial and are based on a test environment. Your environment details will differ.
| Environment Details Worksheet | |||
|---|---|---|---|
| Field | Description | Example | Entry |
| Workspace ONE UEM Log-In Details | |||
| Workspace ONE UEM Tenet | URL for your Workspace ONE UEM environment | labs.awmdm.com | |
| Username | Admin username | admin | |
| Password | Admin password | VMware1! | |
| AirLift Integration Details | |||
| WS1 API URL | URL for your Workspace ONE UEM environment | https://labs.awmdm.com | |
| AirwatchAPIKey | API Key copied from the Workspace ONE UEM Console | ||
| SCCM Server | SCCM server address | sccm-01a.corp.local | |
| SCCM Site Code | Three-character alphanumeric site code for the SCCM environment | HOL | |
| SCCM Domain | Active Directory Domain integrated with SCCM | CORP | |
| SCCM Username | Admin username | administrator | |
| SCCM Password | Admin password | VMware1! | |
| SCCMCollectionname | Name for the Windows 10 device collection create in SCCM | Win10 | |
| Workspace ONE Enrollment Details | |||
| Organization Group | Workspace ONE UEM group Windows 10 device enrolls into | your@email.shown.here | |
| Staging User | User used to stage Workspace ONE UEM enrollment | StagingUser | |
| Staging User Password | Password used for the staging user | VMware1! | |
| Enrollment URL | URL for your Workspace ONE UEM environment | labs.awmdm.com | |
| Group ID | Group ID value from the UEM console | yourid1234 | |