Ensure your AirWatch environment is prepared for an VMware Tunnel installation before attempting to configure or install the product. Before you begin installing VMware Tunnel, ensure that API and AWCM are installed correctly, running, and communicating with AirWatch without any errors.

For more information about configuring AWCM, see Introduction to AWCM.


 If you are an on-premises customer, do not configure VMware Tunnel at the Global organization group level. Configure VMware Tunnel at the Company level or Customer type organization group. The REST API key can only be generated at a Customer type organization group.

  1. Navigate to Groups & Settings > All Settings > System > Advanced > Site URLs in the AirWatch Console.
  2. Validate the following URLs in Site URLs:

    REST API URL – Enter in the format of "https://<url>/api".

    Saas customers must contact AirWatch support to get their REST API URL.

    AWCM Server External URL – Enter in the format of "server.acme.com" and do not include a protocol such as https.

    AWCM Service Internal URL – Enter in the format of "https://server.acme.com".

    For on-premises customers, the default port for AWCM is 2001. For SaaS customers, AWCM and API use port 443.


  3. Select Save.
  4. Navigate to Groups & Settings > All Settings > System > Advanced > API > REST API and select the Override radio button.


  5. Ensure that the Enable API Access check box is selected and an API Key is displayed in the text box.
  6. Select Save.