INTEGRATING WITH DELL CLIENT COMMAND SUITE: VMWARE WORKSPACE ONE OPERATIONAL TUTORIAL VMware Workspace ONE

Similar documents
MANAGING ANDROID DEVICES: VMWARE WORKSPACE ONE OPERATIONAL TUTORIAL VMware Workspace ONE

CONFIGURING BASIC MACOS MANAGEMENT: VMWARE WORKSPACE ONE OPERATIONAL TUTORIAL VMware Workspace ONE

USING PRODUCT PROVISIONING TO DELIVER FILES TO WINDOWS 10: VMWARE WORKSPACE ONE OPERATIONAL TUTORIAL VMware Workspace ONE

INTEGRATING OKTA: VMWARE WORKSPACE ONE OPERATIONAL TUTORIAL VMware Workspace ONE

DEPLOYING WIN32 APPLICATIONS: VMWARE WORKSPACE ONE OPERATIONAL TUTORIAL VMware Workspace ONE

CONFIGURING AD FS AS A THIRD-PARTY IDP IN VMWARE IDENTITY MANAGER: VMWARE WORKSPACE ONE OPERATIONAL TUTORIAL VMware Workspace ONE

INSTALLATION AND SETUP VMware Workspace ONE

REVIEWERS GUIDE NOVEMBER 2017 REVIEWER S GUIDE FOR CLOUD-BASED VMWARE WORKSPACE ONE: MOBILE SINGLE SIGN-ON. VMware Workspace ONE

Deploying VMware Workspace ONE Intelligent Hub. October 2018 VMware Workspace ONE

REVISED 6 NOVEMBER 2018 COMPONENT DESIGN: VMWARE IDENTITY MANAGER ARCHITECTURE

TECHNICAL WHITE PAPER AUGUST 2017 REVIEWER S GUIDE FOR VIEW IN VMWARE HORIZON 7: INSTALLATION AND CONFIGURATION. VMware Horizon 7 version 7.

Modern BIOS Management from the Cloud

VMware AirWatch - Unified Endpoint Management for Windows 10

VMware Workspace ONE Quick Configuration Guide. VMware AirWatch 9.1

VMWARE HORIZON CLOUD WITH VMWARE IDENTITY MANAGER QUICK START GUIDE WHITE PAPER MARCH 2018

Configuring Single Sign-on from the VMware Identity Manager Service to Marketo

Setting Up Resources in VMware Identity Manager (On Premises) Modified on 30 AUG 2017 VMware AirWatch 9.1.1

EXPLORING MONITORING AND ANALYTICS VMware Horizon

Dell SupportAssist for PCs and Tablets User s Guide

Guide to Deploying VMware Workspace ONE with VMware Identity Manager. SEP 2018 VMware Workspace ONE

ARCHITECTURAL OVERVIEW REVISED 6 NOVEMBER 2018

Integrating VMware Workspace ONE with Okta. VMware Workspace ONE

Dell SupportAssist Agent User s Guide

Configuring Single Sign-on from the VMware Identity Manager Service to Trumba

VMware Notification Service v2.0 Installation and Configuration Guide Configure ENSv2 for cloud and on-premises deployments

Guide to Deploying VMware Workspace ONE. DEC 2017 VMware AirWatch 9.2 VMware Identity Manager 3.1

VMware Workspace ONE UEM Integration with Smart Glasses. VMware Workspace ONE UEM 1811

Configuring Single Sign-on from the VMware Identity Manager Service to Bonusly

Setting Up Resources in VMware Identity Manager. VMware Identity Manager 2.8

Microsoft Intune App Protection Policies Integration. VMware Workspace ONE UEM 1811

Workspace ONE UEM Integration with RSA PKI. VMware Workspace ONE UEM 1810

Setting Up Resources in VMware Identity Manager (SaaS) Modified 15 SEP 2017 VMware Identity Manager

Guide to Deploying VMware Workspace ONE. VMware Identity Manager VMware AirWatch 9.1

Integrating AirWatch and VMware Identity Manager

VMware Notification Service v2.0 Installation and Configuration Guide Configure ENS2 for cloud and on-premises deployments

Administering Workspace ONE in VMware Identity Manager Services with AirWatch. VMware AirWatch 9.1.1

VMware Identity Manager Administration. MAY 2018 VMware Identity Manager 3.2

VMware AirWatch Product Provisioning and Staging for Windows Rugged Guide Using Product Provisioning for managing Windows Rugged devices.

VMware AirWatch - Workspace ONE, Single Sign-on and VMware Identity Manager

PLANNING YOUR WINDOWS 10 DEPLOYMENT: VMWARE WORKSPACE ONE OPERATIONAL TUTORIAL VMware Workspace ONE

VMware AirWatch Integration with Apple School Manager Integrate with Apple's School Manager to automatically enroll devices and manage classes

VMware AirWatch Content Gateway for Linux. VMware Workspace ONE UEM 1811 Unified Access Gateway

Configuring Single Sign-on from the VMware Identity Manager Service to Exterro E-Discovery

Workspace ONE UEM Upgrade Guide

Configuring Single Sign-on from the VMware Identity Manager Service to Vizru

VMware Workspace ONE UEM Integration with Apple School Manager

Workspace ONE UEM Notification Service 2. VMware Workspace ONE UEM 1811

REVISED 6 NOVEMBER 2018 COMPONENT DESIGN: UNIFIED ACCESS GATEWAY ARCHITECTURE

VMware AirWatch Workspace ONE Send Admin Guide Configuring and deploying Workspace ONE Send

VMware AirWatch Chrome OS Platform Guide Managing Chrome OS Devices with AirWatch

Workspace ONE UEM Certificate Authentication for Cisco IPSec VPN. VMware Workspace ONE UEM 1810

Setting Up Resources in VMware Identity Manager 3.1 (On Premises) Modified JUL 2018 VMware Identity Manager 3.1

Dell Provisioning for VMware Workspace ONE. VMware Workspace ONE UEM 1902

VMware Notification Service v2.0 Installation and Configuration Guide Configure ENS2 for cloud and on-premises deployments

VMware AirWatch Reports Guide

Getting Started with ESX Server 3i Installable Update 2 and later for ESX Server 3i version 3.5 Installable and VirtualCenter 2.5

VMware Identity Manager Administration

AirWatch Container. VMware Workspace ONE UEM

Reports and Analytics. VMware Workspace ONE UEM 1902

VMware Notification Service v2.0 Installation and Configuration Guide Configure ENS2 for cloud and on-premises deployments

APPLYING AND TROUBLESHOOTING PREDEFINED SETTINGS VMware Horizon

BRING MAC TO THE ENTERPRISE WITH A MODERN APPROACH TO MANAGEMENT

VMware AirWatch Integration with RSA PKI Guide

VMware Workspace ONE UEM Toshiba Printer Management. VMware Workspace ONE UEM 1811 VMware AirWatch 1811

Setting Up Resources in VMware Identity Manager

PROVIDING SECURE ACCESS TO VMWARE HORIZON 7 AND VMWARE IDENTITY MANAGER WITH THE VMWARE UNIFIED ACCESS GATEWAY REVISED 2 MAY 2018

VMware AirWatch Product Provisioning and Staging for QNX Guide Using Product Provisioning for managing QNX devices.

VMware AirWatch Integration with Palo Alto Networks WildFire Integrate your application reputation service with AirWatch

Workspace ONE UEM Certificate Authority Integration with JCCH. VMware Workspace ONE UEM 1810

IMPLEMENTING SINGLE SIGN-ON (SSO) TO KERBEROS CONSTRAINED DELEGATION AND HEADER-BASED APPS. VMware Identity Manager.

Cloud Pod Architecture with VMware Horizon 6.1

Workspace ONE Chrome OS Platform Guide. VMware Workspace ONE UEM 1811

VMware Workspace ONE UEM Apple tvos Device Management. VMware Workspace ONE UEM 1811 VMware AirWatch

VMware AirWatch Content Gateway for Windows. VMware Workspace ONE UEM 1811 Unified Access Gateway

Installing and Configuring VMware Identity Manager Connector (Windows) OCT 2018 VMware Identity Manager VMware Identity Manager 3.

Configuring OneSign 4.9 Virtual Desktop Access with Horizon View HOW-TO GUIDE

VMware Infrastructure 3 Primer Update 2 and later for ESX Server 3.5, ESX Server 3i version 3.5, VirtualCenter 2.5

VMware AirWatch Content Gateway Guide for Linux For Linux

VMware Workspace ONE UEM Product Provisioning for Windows Rugged Documentation. VMware Workspace ONE UEM 1811

vrealize Production Test Upgrade Assessment Guide

VMware Mirage Web Manager Guide

VMware AirWatch File Storage Setup Guide Setting up file storage for AirWatch functionality

VMware AirWatch Integration with Apple School Manager Integrate with Apple's School Manager to automatically enroll devices and manage classes

VMware AirWatch and Office 365 Application Data Loss Prevention Policies

Table of Contents. VMware AirWatch: Technology Partner Integration

Using Workspace ONE PIV-D Manager. VMware Workspace ONE UEM 1811 VMware Workspace ONE PIV-D Manager

VMware AirWatch: Directory and Certificate Authority

SupportAssist Agent Deployment Guide

Dell Client Management Pack Version 6.0 for Microsoft System Center Operations Manager User s Guide

VMware Horizon FLEX Client User Guide

Getting Started with ESX Server 3i Embedded ESX Server 3i version 3.5 Embedded and VirtualCenter 2.5

VMware AirWatch Chrome OS Platform Guide Managing Chrome OS Devices with AirWatch

VMware AirWatch Integration with SecureAuth PKI Guide

VMware Mirage Web Management Guide. VMware Mirage 5.9.1

Workspace ONE UEM Notification Service. VMware Workspace ONE UEM 1811

VMware AirWatch Certificate Authentication for Cisco IPSec VPN

Have documentation feedback? Submit a Documentation Feedback support ticket using the Support Wizard on support.air-watch.com.

VMware AirWatch Certificate Authentication for EAS with ADCS

Workspace ONE UEM Integration with OpenTrust CMS Mobile 2. VMware Workspace ONE UEM 1811

VMware AirWatch Product Provisioning and Staging for Android Guide Using Product Provisioning for managing Android devices.

Transcription:

GUIDE SEPTEMBER 2018 PRINTED 4 MARCH 2019 INTEGRATING WITH DELL CLIENT COMMAND SUITE: VMWARE WORKSPACE ONE OPERATIONAL TUTORIAL VMware Workspace ONE

Table of Contents Overview Introduction Purpose Audience Integrating with Dell Client Command Suite Introduction Prerequisites Adding the Dell Command Monitor Software Configuring the BIOS Profile Validating BIOS Properties and Attributes Adding the Dell Command Update Software Configuring the OEM Updates Profile Validating OEM Updates Summary and Additional Resources Conclusion Terminology Used in This Tutorial Additional Resources About the Author Feedback GUIDE 2

OT-WS1-Win10-Dell Overview Introduction VMware provides this operational tutorial to help you with your VMware Workspace ONE environment. Workspace ONE simplifies access to cloud, mobile, and enterprise applications from supported devices. As an IT professional, you can use Workspace ONE to deploy, manage, and secure applications. At the same time, you can offer a flexible, bring-your-own-device (BYOD) initiative to your end users from a central location. Purpose This operational tutorial provides you with discussions and exercises to help with your existing VMware Workspace ONE production environment. VMware provides operational tutorials to help you with Common procedures or best practices Complex manual procedures Troubleshooting Note: Before you begin any operational tutorial, you must first deploy a production environment. For information about deployment, see the VMware Workspace ONE Documentation. Audience This operational tutorial is intended for IT professionals and Workspace ONE administrators of existing production environments. Both current and new administrators can benefit from using this tutorial. Familiarity with networking and storage in a virtual environment is assumed, including Active Directory, identity management, and directory services. Knowledge of additional technologies such as VMware Identity Manager and VMware Workspace ONE UEM (unified endpoint management), powered by VMware AirWatch, is also helpful. Integrating with Dell Client Command Suite Introduction Workspace ONE UEM integrates with Dell Client Command Suite to enhance the modern device management of Dell Enterprise client systems. With the integration of Dell Command Monitor, Workspace ONE UEM reports on custom system properties and reports and sets BIOS attributes. The integration with Dell Command Update allows for OEM updates to be configured and applied on the device, such as applying driver, firmware, and BIOS updates to the device. This exercise helps you to configure these integrations in the Workspace ONE UEM console. In this exercise, you upload and deploy the Dell Command Monitor and Dell Command Update apps, configure the corresponding profiles, and view the additional attributes in the console. The steps are sequential and build upon one another, so make sure that you complete each step before going to the next step. Integrate Workspace ONE UEM with Dell Client Command Suite Integrating Workspace ONE UEM with Dell Client Command Suite enhances the information collected from enrolled devices, and allows you to configure device BIOS settings and to report on installed OEM updates. To watch a video demonstrating these features, click Dell Client Command Suite Integration with Workspace ONE UEM or click the video itself. Prerequisites Before you can perform the procedures in this exercise, you must satisfy the following requirements. For more information, see the VMware Identity Manager Documentation and VMware Workspace ONE UEM Documentation. GUIDE 3

Windows Pro or Enterprise device, enrolled in Workspace ONE UEM. For more information, compare Windows 10 editions, or contact a Microsoft representative. Meet the prerequisites for Dell Command Monitor Meet the prerequisites for Dell Command Update Meet the prerequisites for Dell Command Configure (required only if planning to upload a CCTK configuration package) Supported Dell Enterprise client system: Dell OptiPlex desktop devices, Dell Precision Workstation desktop and laptop devices, Dell Latitude laptop devices, and Dell XPS Notebook devices. For more information about supported Dell systems, see the Dell product documentation. Adding the Dell Command Monitor Software Before you deploy the BIOS profile in the Workspace ONE UEM console, first, upload and deploy the Dell Command Monitor software to your managed Dell Enterprise client systems. 1. Upload the Dell Command Monitor Software In the Workspace ONE UEM console: 1. Select Apps & Books. 2. Select Add Application. GUIDE 4

1.1. Download Software Download the latest Dell Command Monitor software. In the Downloads section, select your corresponding architecture. Return to the Workspace ONE UEM console and click Upload. 1.2. Browse Select Browse... 1.3. Select Dell Command Monitor MSI GUIDE 5

Unzip the downloaded package to extract the Command_Monitor_x##.msi then select the MSI file. 1. Select the Command_Monitor-x64.msi file. 2. Click Open. 1.4. Save Dell Command Monitor MSI GUIDE 6

Click Save. 1.5. Continue to Add Application Keep the default values and click Continue. 2. Configure the Details Tab GUIDE 7

1. Ensure the Details tab is selected. 2. Select 64-bit for the Supported Processor Architecture. Verify the relevant processor architecture for your device. Note: When uploading MSI files, all possible fields are automatically pre-populated with all of the metadata. However, for ZIP and EXE packages, you must enter a Name and some of the Deployment options. 3. Configure the Files Tab Select the Files tab. 3.1. Review Application File Settings GUIDE 8

Familiarize yourself with the following settings, which enable you to configure additional application details and requirements: App Dependencies Enable the system to apply dependency files. App Transforms Apply MSI Transform (MST) files. App Patches Apply MSI Patch (MSP) files. Note: You can upload the transforms (.mst) included in the extracted folder to specify the installation language. Workspace ONE UEM automatically updates the install command line and supports uploading multiple transforms, which will be assigned to different groups later. If the installation language is not specified, the installer selects the default operating system language, or English if the default operating system language is not supported. For more information about installation language, see the Dell Command Monitor Installation Guide. 4. Configure Deployment Options Select the Deployment Options tab. 4.1. Define When to Install GUIDE 9

Configure details about requirements to install the application. This example uses suggested values which you can customize for your environment. 1. Enter 100 for the Disk Space Required which specifies the amount of disk space the device must have available to install the application. 2. Select MB for the Units of the Disk Space Required. 3. Enter 25 for the Device Power Required which specifies the battery power, in percentage, that the device must have to install the application. 4. Enter 500 for the RAM Required which specifies the amount of RAM the device must have to install the application. 5. Enter MB for the Units of the RAM Required. 4.2. Define How to Install GUIDE 10

1. 2. 3. 4. 5. 6. 7. 8. Scroll down to find the How To Install section. Ensure msiexec /i "Command_Monitor_x64.msi" /qn is entered for the Install Command. Select Yes for Admin Privileges. Ensure 3 is entered for the Retry Count, which specifies the number of times the system attempts to install the application after an unsuccessful attempt. Ensure 5 is entered for the Retry Interval, which specifies the time (in minutes) the system waits when it tries to install the application after an unsuccessful attempt. Enter 15 for the Install Timeout, which specifies the time (in minutes) the system allows the installation process to run without success. Ensure 1614 is entered for the Installer Reboot Exit Code, which specifies the code the installer outputs to identify a reboot action. Ensure is entered for the Installer Success Exit Code, which specifies the code the installer outputs to identify a successful installation. 5. Add the Application Icon GUIDE 11

Select the Images tab. 5.1. Open Icon Settings 1. Select the Icon tab. 2. Click the area labeled Click or drag files here. 5.2. Select the Icon File GUIDE 12

1. Navigate to the folder containing your Dell logo file. 2. Select your Dell logo image. 3. Click Open. 6. Set Terms of Use GUIDE 13

1. Select the Terms of Use tab. 2. If you decide to have a Terms of Use that your users must accept before installing applications, you can configure that here. 3. Click Save & Assign. 7. Assign & Publish 7.1. Add Application Assignment GUIDE 14

Click Add Assignment. 7.2. Assign Office 365 Pro Plus GUIDE 15

1. Select All Devices for the Assignment Groups, or your custom created Assignment Group for your Dell devices. 2. Select Auto for App Delivery Method. 3. Click Add. 7.3. Save and Publish GUIDE 16

Click Save & Publish. 7.4. Publish GUIDE 17

Click Publish. 8. Confirm the Application Appears in the List View In the Internal Applications List View, confirm that the Dell Command Monitor application is displayed. You have successfully added the Dell Command Monitor app to Workspace ONE UEM for deployment. Configuring the BIOS Profile Profiles allow you to modify how the enrolled devices behave. This section helps you to configure the BIOS using a profile that we will verify applied to the device. GUIDE 18

1. Add a Profile First, add a new Windows Desktop Profile. 1.1. Navigate to Profile Settings 1. In the upper-right corner of Workspace ONE UEM Console, select Add. 2. Select Profile. 1.2. Add a Windows Profile GUIDE 19

Select the Windows icon. Note: Make sure that you are selecting Windows and not Windows Rugged. 1.3. Add a Windows Desktop Profile Select Windows Desktop. 1.4. Select Context - Device Profile GUIDE 20

Select Device Profile. 2. Configure Profile Settings Next, configure the profile general settings and the BIOS settings. 2.1. Define General Settings GUIDE 21

1. 2. 3. 4. Select General if it is not already selected. Enter a profile name in the Name text box, for example, Windows 10 - BIOS. Copy the profile name into the Description text box. Click in the Assigned Groups field. This will pop-up the list of created Assignment Groups. Select the All Devices Assignment Group. Note: You may need to scroll down to view the Assigned Groups field. Note: You do not need to click Save & Publish at this point. This interface allows you to move around to different payload configuration screens before saving. 2.2. Open the BIOS Payload GUIDE 22

Note: When initially setting a payload, a Configure button will show to reduce the risk of accidentally setting a payload configuration. 1. Scroll through the payload section on the left until you see the BIOS payload. 2. Select the BIOS payload. 3. Click the Configure button to begin configuring the payload settings. 2.3. Configure BIOS Settings GUIDE 23

Configure the Security, Boot, Virtualization, and Connectivity sections of the BIOS payload that match your organizational requirements. Following are some sample values: 1. 2. 3. 4. Enter the password you want used to unlock the BIOS. Select Enabled to enable the device Trusted Platform Module. Select Enabled to enable hardware virtualization support. Select Enabled to enable input/output virtualization on the device. GUIDE 24

5. Select Enabled to enable trusted execution which requires TPM, CPU Virtualization, and Virtualization IO to be enabled on the device. Note: Configure the settings to match your organizational requirements. For more information about these options, see Configure a BIOS Profile (Windows Desktop) in the VMware Workspace ONE UEM Documentation. 2.4. Configure Power Management Settings 1. Using the scroll bar on the right, scroll down to the Storage section. 2. Select Enable to use peak shift to control when a device uses battery charge or AC current. Peak shift allows you to use battery power instead of AC current during specified times. 3. Click the calendar icon to set the schedule for Peak Shift. Note: Configure the settings to match your organizational requirements. For more information about these options, see Configure a BIOS Profile (Windows Desktop) in the VMware Workspace ONE UEM Documentation. GUIDE 25

2.5. Configure System Properties and BIOS Attributes Settings 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. Using the scroll bar on the right, scroll down to the Custom section. Click Add System Property twice (2x). Enter DCIM_Battery or select it as it auto-completes. Enter ChargingStatus or select it as it auto-completes. Enter DCIM_PhysicalMemory or select it as it auto-completes. Enter Capacity or select it as it auto-completes. Click Add BIOS Attribute three times (3x). Enter Power Warning or select it as it auto-completes. Enter Enable or select it as it auto-completes. Enter Wake-On-LAN or select it as it auto-completes. Enter LAN or WLAN or select it as it auto-completes. Enter SMART Errors or select it as it auto-completes. Click Save & Publish. Note: If you leave the Value field blank for a BIOS Attribute, it will read and report this value back to Workspace ONE UEM. When selecting a value, Workspace ONE UEM sets that value on the device. For more information about generating Dell Command Configure configuration packages (CCTK) to configure additional BIOS settings, see the Dell Command Configure User's Guide. Note: Configuration packages override any custom system properties or attributes, whereas any custom system properties or attributes override any BIOS settings set in the profile. Overall, as the profile progresses so does the order of precedence applied. 2.6. Publish the BIOS Profile GUIDE 26

Click Publish. 3. Verify the Profile Exists Confirm that the newly created profile exists. 3.1. Navigate to Profiles List View 1. From the left column in the Workspace ONE UEM Console, select Devices. 2. Select Profiles & Resources. 3. Select Profiles. 3.2. Locate the Profile in the List View The Windows 10 - BIOS Profile now appears in the Device Profiles list view. Validating BIOS Properties and Attributes When you push the BIOS profile to the device, it interfaces with Dell Command Monitor to update system properties and set and report on BIOS attributes. In this section, review the results of your integration in the console. GUIDE 27

1. Select a Managed Device First, select your Dell managed device. 1.1. Navigate to Device List View 1. Select Devices. 2. Select List View. 1.2. Select Managed Device Click the friendly name of one of your Dell managed devices. 2. Validate the App and Profile Applied Confirm that the applications and profiles installed successfully. 2.1. Verify Apps and Profiles Installed GUIDE 28

You can quickly verify that the profiles and apps deployed to your device. The next steps review each of these configurations. Note: Two new attributes BIOS Version and Battery Health Status appear on the device details view when Dell Command Monitor is deployed. 2.2. Validate Dell Command Monitor Installed GUIDE 29

1. Select the Apps tab. 2. Validate that the Dell Command Monitor software has successfully installed on the device before continuing on to the next steps. 2.3. Validate the Windows 10 - BIOS Profile Installed 1. Select the Profiles tab. 2. Validate that the Windows 10 - BIOS profile was successfully installed before continuing. 3. Check BIOS System Properties and BIOS Attributes GUIDE 30

Workspace ONE UEM configures the BIOS on the device leveraging Dell Command Monitor and also retrieves the specified BIOS attributes and other useful system information. 1. Select the More tab, then select BIOS. You have successfully integrated Workspace ONE UEM with Dell Command Monitor, and validated the settings are applied and BIOS attributes are reported to the Workspace ONE UEM console. Adding the Dell Command Update Software Before you deploy the OEM Updates profile in the Workspace ONE UEM console, first, upload and deploy the Dell Command Update software to your managed Dell Enterprise client systems. 1. Upload the Dell Command Update Software GUIDE 31

In the Workspace ONE UEM console: 1. Select Apps & Books. 2. Select Add Application. 1.1. Download Software GUIDE 32

First, download the latest 2.x version of the Dell Command Update software. Return to the Workspace ONE UEM console and select Upload. Important: Dell Command Update 3.0 is not supported with Workspace ONE UEM. 1.2. Browse Select Browse... 1.3. Select Dell Command Update EXE GUIDE 33

1. Select the Dell-Command-Update_<XXXXX>_WIN_<###>_A00.EXE file. 2. Click Open. 1.4. Save Dell Command Update EXE Click Save. 1.5. Continue to Add Application GUIDE 34

Keep the default values and click Continue. 2. Configure the Details Tab GUIDE 35

1. Ensure the Details tab is selected. 2. Enter Dell Command Update for Name. 3. Select 64-bit for the Supported Processor Architecture. Verify the relevant processor architecture for your device. Note: When uploading MSI files all possible fields are automatically pre-populated with all of the metadata. However, for ZIP and EXE packages, you must enter a Name and some of the Deployment options. 3. Configure the Files Tab Select the Files tab. 3.1. Configure the App Uninstall Process GUIDE 36

1. Scroll down to find the App Uninstall Process section. 2. Select Input for the Custom Script Type. 3. Enter msiexec /x {EC542D5D-B608-4145-A8F7-749C02BE6D94} /qn as the Uninstall Command. 4. Configure Deployment Options Select the Deployment Options tab. 4.1. Define When to Install Configure details about requirements to install the application. This example uses suggested values which you can customize for your environment. 1. Enter 150 for the Disk Space Required which specifies the amount of disk space the device must have available to install the application. 2. Select MB for the Units of the Disk Space Required. 3. Enter 25 for the Device Power Required which specifies the battery power, in percentage, that the device must have to install GUIDE 37

the application. 4. Enter 500 for the RAM Required which specifies the amount of RAM the device must have to install the application. 5. Enter MB for the Units of the RAM Required. 4.2. Define How to Install 1. 2. 3. 4. Scroll down to find the How To Install section. Ensure Dell-Command-Update_XXXXX_WIN_###_A00.EXE /s is entered for the Install Command. Select Yes for Admin Privileges. Ensure 3 is entered for the Retry Count, which specifies the number of times the system attempts to install the application after an unsuccessful attempt. 5. Ensure 5 is entered for the Retry Interval, which specifies the time (in minutes) the system waits when it tries to install the application after an unsuccessful attempt. 6. Enter 15 for the Install Timeout, which specifies the time (in minutes) the system allows the installation process to run without success. 4.3. Define When To Call Install Complete GUIDE 38

1. Scroll down to the When To Call Install Complete section. 2. Select Defining Criteria for Identify Application By. 3. Click + Add. 4.4. Define the Application Criteria 1. Select Registry Exists for the Criteria Type. 2. Enter HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{EC542D5D-B608-4145A8F7-749C02BE6D94} for the Path. 3. Enter DisplayName for the Value Name. 4. Select String for the Value Type. 5. Enter Dell Command Update for the Value Data. 6. Click Add. Note: There are multiple Criteria Types to choose from, allowing you to be flexible in determining if your deployment was successful. You can also add multiple Criteria configurations and link them together logically to cover complex deployments. 5. Add the Application Icon GUIDE 39

Select the Images tab. 5.1. Open Icon Settings 1. Select the Icon tab. 2. Click the area labeled Click or drag files here. 5.2. Select the Icon File GUIDE 40

1. Navigate to the folder containing your Dell logo file. 2. Select your Dell logo image. 3. Click Open. 6. Set Terms of Use GUIDE 41

1. Select the Terms of Use tab. 2. If you decide to have a Terms of Use that your users must accept before installing applications, you can configure that here. 3. Click Save & Assign. 7. Assign and Publish 7.1. Add Application Assignment GUIDE 42

Click Add Assignment. 7.2. Assign Dell Command Update 1. Select All Devices for the Assignment Groups, or your custom created Assignment Group for your Dell devices. 2. Select Auto for App Delivery Method. 3. Click Add. 7.3. Save and Publish GUIDE 43

Click Save & Publish. 7.4. Publish GUIDE 44

Click Publish. 8. Confirm the Application Appears in the List View GUIDE 45

In the Internal Applications List View, confirm that the Dell Command Monitor application is displayed. You have successfully added the Dell Command Monitor app to Workspace ONE UEM for deployment. Configuring the OEM Updates Profile Profiles allow you to modify how the enrolled devices behave. This section helps you to configure an OEM Updates profile that we will verify applied to the device. When you push the OEM Updates profile to the device, this configures Dell Command Update with the respective settings and prevents the end-user from modifying the settings on their devices. Users can still run scans and apply updates, however, all of the settings are disabled for modifications. 1. Add a Profile First, add a Windows profile. 1.1. Navigate to Profile Settings 1. In the upper-right corner of Workspace ONE UEM Console, select Add. 2. Select Profile. 1.2. Add a Windows Profile GUIDE 46

Select the Windows icon. Note: Make sure that you are selecting Windows and not Windows Rugged. 1.3. Add a Windows Desktop Profile Select Windows Desktop. 1.4. Select Context - Device Profile GUIDE 47

Select Device Profile. 2. Configure Profile Settings Configure the profile general settings and OEM updates settings. 2.1. Define General Settings GUIDE 48

1. 2. 3. 4. Select General if it is not already selected. Enter a profile name in the Name text box, for example, Windows 10 - OEM Updates. Copy the profile name into the Description text box. Click in the Assigned Groups field. This will pop-up the list of created Assignment Groups. Select the All Devices Assignment Group. Note: You may need to scroll down to view the Assigned Groups field. Note: You do not need to click Save & Publish at this point. This interface allows you to move around to different payload configuration screens before saving. 2.2. Open the OEM Updates Payload GUIDE 49

1. Scroll through the payload section on the left until you see the OEM Updates payload. 2. Select the OEM Updates payload. 3. Click the Configure button to begin configuring the payload settings. Note: When initially setting a payload, a Configure button will show to reduce the risk of accidentally setting a payload configuration. 2.3. Configure OEM Updates Settings GUIDE 50

Configure the Schedule and Level sections of the OEM Updates payload that match your organizational requirements. Following are some sample values: 1. 2. 3. 4. Select Weekly to set the interval used to Check for Updates. Supported values are Never, Weekly, and Monthly. Select Friday for the Day of the Week to check for updates. Set the Time to 10:00 PM. This sets the time of day to check for updates. Select Scan Download Notify for the Update Behavior. Supported values are Scan Notify, Scan Download Notify, or Scan Notify Apply Reboot. Scan Scans for updates. Notify Notifies the user that updates are available. Download Downloads any available updates. Apply Installs any available update. Reboot Reboots the device according to the Reboot Delay configuration. 5. Select Manual Reboot for the Reboot Delay. Supported values are Manual Reboot, 5, 15, or 60 Minutes. 6. Select the Level of updates to scan for while checking for updates, any disabled value will be ignored while scanning and applying updates. GUIDE 51

Note: Configure the settings to match your organizational requirements. For more information about these options, see Configure the OEM Updates Profile (Windows Desktop) in the VMware Workspace ONE UEM Documentation. Warning: You must close Dell Command Update for the scheduler to check for updates during the scheduled interval. Note: Dell Command Update checks for updates at random intervals within 30 minutes of the time set in the Time field. 2.4. Configure Update Type Settings Configure the Update Type section of the OEM Updates payload that match your organizational requirements. 1. Using the scroll bar on the right, scroll down to the Update Type section. Choose to enable or disable the different Update Types in this section of the profile; the default values are shown in the screenshot. Note: Configure the settings to match your organizational requirements. For more information about these options, see Configure the OEM Updates Profile (Windows Desktop) in the VMware Workspace ONE UEM Documentation. GUIDE 52

2.5. Configure Device Categories Settings Configure the Device Categories section of the OEM Updates payload that match your organizational requirements. 1. Using the scroll bar on the right, scroll down to the Device Categories section. 2. Click Save & Publish. Note: Configure the settings to match your organizational requirements. For more information about these options, see Configure the OEM Updates Profile (Windows Desktop) in the VMware Workspace ONE UEM Documentation. 2.6. Publish the OEM Updates Profile Click Publish. GUIDE 53

3. Verify the Profile Exists Confirm that the newly created profile exists. 3.1. Navigate to Profiles List View 1. From the left column in the Workspace ONE UEM Console, select Devices. 2. Select Profiles & Resources. 3. Select Profiles. 3.2. Locate the Profile in the List View The Windows 10 - OEM Updates Profile now appears in the Device Profiles list view. Validating OEM Updates When you push the OEM Updates profile to the device, it configures Dell Command Update with the respective settings and prevents the end-user from modifying the settings on their devices. Users can still run scans and apply updates, however, all of the settings are disabled for modifications. In this section, review the results of your integration on the device and in the console. 1. Select a Managed Device First, select your Dell managed device. 1.1. Navigate to Device List View GUIDE 54

1. Select Devices. 2. Select List View. 1.2. Select Managed Device Click the friendly name of one of your Dell managed devices. 2. Validate App and Profile Applied Confirm that the applications and profiles installed successfully. 2.1. Verify Apps and Profiles Installed GUIDE 55

You can quickly verify that the profiles and apps deployed to your device. The next steps reviews each of these configurations. 2.2. Validate Dell Command Update Installed 1. Select the Apps tab. GUIDE 56

2. Validate that the Dell Command Update software has successfully installed on the device before continuing on to the next steps. 2.3. Validate the Windows 10 - OEM Updates Profile Installed 1. Select the Profiles tab. 2. Validate that the Windows 10 - OEM Updates profile was successfully installed before continuing. 3. Check OEM Updates and Configurations In this section, confirm the OEM Updates settings and Dell Command Update settings. 3.1. Check Applied OEM Updates Workspace ONE UEM queries the device for all of the applied OEM Updates installed using Dell Command Update. 1. Select the More tab, then select OEM Updates. GUIDE 57

2. Click Intel Management Engine Components Installer, or any other update to view more details about that update. 3.2. OEM Updates Details Workspace ONE UEM reports on the OEM Updates and details such as Release ID, Version, Criticality, Update Type, Category, and the Date Applied. Click X to close the pop-up window. 3.3. Dell Command Update History GUIDE 58

On your Dell enterprise managed device in the Dell Command Update software, the Update History should also match the details in the Workspace ONE UEM console. 3.4. Dell Command Update Settings GUIDE 59

1. Click the settings icon. 2. Click Schedule. Note that the settings are unavailable (dimmed) and set to match the profile configuration options. Important: If you set a scheduled time which does not have 00 for minutes (for example, ##:00) then Dell Command Update displays a blank value for Select the time field. Regardless of the blank value, the correct time is set on the device you can validate by exporting the setting and comparing the scheduled minutes field. 3.5. OEM Updates Consolidated View GUIDE 60

Workspace ONE UEM provides a consolidated view of the deployed OEM Updates to your managed devices. You can filter the updates by Type and click any of the updates to see which devices have that update installed. 1. 2. 3. 4. Select Devices. Select Lifecycle. Select Updates. Select OEM Updates. You have successfully integrated Workspace ONE UEM with Dell Command Update, and validated the settings are applied and OEM Updates are reported to the Workspace ONE UEM console. Summary and Additional Resources Conclusion This operational tutorial provided steps to integrate Dell Client Command Suite with VMware Workspace ONE UEM. Procedures included adding the Dell Command Monitor and Dell Command Update software, configuring BIOS and OEM Updates profiles, and confirming the integrations were successful. Terminology Used in This Tutorial The following terms are used in this tutorial: GUIDE 61

application store A user interface (UI) framework that provides access to a self-service catalog, public examples of which include the Apple App Store, the Google Play Store, and the Microsoft Store. auto-enrollment Auto-enrollment simplifies the enrollment process by automatically enrolling registered devices following the Out-of-Box-Experience. catalog A user interface (UI) that displays a personalized set of virtual desktops and applications to users and administrators. These resources are available to be launched upon selection. cloud Asset of securely accessed, network-based services and applications. A cloud can also host data storage. Clouds can be private or public, as well as hybrid, which is both private and public. device enrollment The process of installing the mobile device management agent on an authorized device. This allows access to VMware products with application stores, such as VMware Identity Manager. identity provider (IdP) A mechanism used in a single-sign-on (SSO) framework to automatically give a user access to a resource based on their authentication to a different resource. mobile device management (MDM) agent Software installed on an authorized device to monitor, manage, and secure end-user access to enterprise resources. one-touch login A mechanism that provides single sign-on (SSO) from an authorized device to enterprise resources. service provider (SP) A host that offers resources, tools, and applications to users and devices. virtual desktop The user interface of a virtual machine that is made available to an end user. virtual machine A software-based computer, running an operating system or application environment, that is located in the data center and backed by the resources of a physical computer. For more information, see the VMware Glossary. Additional Resources For more information about Workspace ONE, you can explore the following resources: VMware Workspace ONE Action Path VMware Workspace ONE product page VMware Workspace ONE Documentation VMware Identity Manager product page VMware Identity Manager Documentation VMware Workspace ONE UEM, powered by VMware AirWatch product page VMware AirWatch Documentation VMware Workspace ONE free trial VMware Workspace ONE Cloud-Based Reference Architecture VMware Workspace ONE and VMware Horizon 7 Enterprise Edition On-premises Reference Architecture VMware End-User-Computing Blogs Workspace ONE UEM Hands-On Lab GUIDE 62

About the Author This tutorial was written by: Josue Negron, Senior Solutions Architect, End-User-Computing Technical Marketing, VMware Feedback The purpose of this tutorial is to assist you. Your feedback is valuable. To comment on this tutorial, contact VMware End-UserComputing Technical Marketing at euc_tech_content_feedback@vmware.com. GUIDE 63

VMware, Inc. 3401 Hillview Avenue Palo Alto CA 94304 USA Tel 877-486-9273 Fax 650-427-5001 www.vmware.com Copyright 2017 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents. VMware is a registered trademark or trademark of VMware, Inc. in the United States and/or other jurisdictions. All other marks and names mentioned herein may be trademarks of their respective companies.