RSS
 

VMware Workspace ONE Access 23.09 | 02 NOV 2023 | Build 22674549

VMware Workspace ONE Access Connector (Windows) 23.09 | 02 NOV 2023 | Build Workspace-ONE-Access-Connector-Installer-23.09.0.0.exe

VMware Workspace ONE Desktop 23.09 | 02 NOV 2023 | Build VMware-Workspace-ONE-Access-Desktop-23.09.00-22474769.exe

Check for additions and updates to these release notes.

VMware Workspace ONE Access helps you provide your users faster access to SaaS, web, and native mobile apps with multi-factor authentication, conditional access, and single sign-on.

The Release Notes describe the new features, resolved issues, and known issues in this version of Workspace ONE Access.

What's New

  • Redesigned Database Connection Setup page

    The Workspace ONE Access appliance VA Configuration > Database Connection Setup page has been redesigned to make it easier to configure and manage the external database properties. You now set up each component of the JDBC URL in a separate field.

  • New directory sync safeguards for groups

    In this release, we've enhanced directory sync safeguards to improve the efficiency of group synchronization. You can now set safeguards for removing groups and updating groups. Updating groups refers to updating group attributes such as domain, which are synced from your enterprise directory.

    Note:

    The new sync safeguards are available with Workspace ONE Access connector 23.09 only.

  • Directory sync logs and alerts improvements

    Directory sync logs and alerts have been improved to make it easier for administrators to monitor user and group sync, and troubleshoot issues. On a directory's Sync Logs tab, you can get an overview of the changes in each sync run. The Sync Details page displays audit events, with details about each event. Similarly, alerts appear in a Sync Alerts window.

    The sync logs and alerts pages can now handle large numbers of audit events and alerts.

  • Citrix keyword filtering option for virtual apps collections

    We've improved the performance of Citrix sync operations by adding a Keyword Filtering option to enable filtering at the virtual apps collection level.

  • User Interface improvements

    The following pages in the Workspace ONE Access console have been redesigned to improve the admin user experience: Dashboard, Directories, Identity Providers, UEM Integration, New End User Portal UI, and Remote App Access.

    The following pages have been removed: Auto Discovery, Terms of Use, and Connectors (Legacy).

  • Removal of support for legacy connectors

    Workspace ONE Access 23.09 does not support legacy connectors (version 19.03.0.1 and earlier). The Connectors (Legacy) page has been removed from the Workspace ONE Access console.

    Important:

    You must migrate your legacy connectors to 22.09.x (or an earlier, supported version of the enterprise connector) before upgrading your Workspace ONE Access virtual appliances to 23.09. See Installation and Upgrade for more information.

  • Continuous improvements

    The 23.09 release also includes security improvements and other product fixes.

Before You Begin

Compatibility

VMware vCenter™ and VMware ESXi™ Compatibility

Workspace ONE Access appliance supports the following versions of vSphere and ESXi:

  • 8.0, 7.0, 6.7, 6.5

Windows Server Supported

Workspace ONE Access connector 23.09 supports the following versions of Windows Server:

  • Windows Server 2022

  • Windows Server 2019

  • Windows Server 2016

Web Browser Supported

  • Mozilla Firefox, latest version

  • Google Chrome, latest version

  • Safari, latest version

  • Microsoft Edge, latest version

Database Supported

  • Microsoft SQL Server 2014, 2016, 2017, 2019, 2022

    Important:

    Microsoft SQL server 2014 must be updated with the Microsoft SQL patch to support TLS 1.2.

Directory Server Supported

  • Active Directory - Windows Server 2022, Windows Server 2019, Windows Server 2016, and Windows Server 2012 R2 with a Domain functional level and Forest functional level of Windows 2003 and later

    Workspace ONE Access supports a single AD domain, multiple domains in a single AD forest, or multiple domains across multiple AD forests.

  • OpenLDAP - 2.4

  • Oracle LDAP - Directory Server Enterprise Edition 11g, Release 1 (11.1.1.7.0)

  • IBM Tivoli Directory Server 6.3.1

Connector Compatibility

Workspace ONE Access connector 23.09 is compatible with the Workspace ONE Access Cloud service and with Workspace ONE Access virtual appliance version 23.09 and later versions.

Virtual Apps Compatibility

Workspace ONE Access connector 23.09 supports VMware Horizon, Horizon Cloud Service, Citrix, and ThinApp integrations with the Virtual App service. 

The following versions of Citrix are supported: Citrix Virtual Apps and Desktops 7 2203, Citrix Virtual Apps and Desktops 7 1912 LTSR, XenApp and XenDesktop 7.15 LTSR, and XenApp and XenDesktop 7.6 LTSR. The following versions of Citrix Gateway are supported: 12.1-62.27, 12.1-65.25, and 13.1-37.38. The connector supports the Citrix StoreFront API and does not support the Citrix Web Interface SDK.

For supported Horizon versions, see the VMware Product Interoperability Matrix.

Compatibility Matrix

The VMware Product Interoperability Matrix provides details about the compatibility of current and previous versions of VMware products and components, such as VMware vCenter Server and Horizon 7.

For system requirements, see the Workspace ONE Access 23.09 installation guides in the Workspace ONE Access documentation center.

Installation and Upgrade

Upgrading to VMware Workspace ONE Access 23.09 (Photon Linux)

To upgrade to Workspace ONE Access 23.09, the current version of the Workspace ONE Access virtual appliances must be 22.09.x. Versions prior to 22.09.x must be upgraded to 22.09.x first, then upgraded from 22.09.x to 23.09.

Additionally, legacy connectors (version 19.03.0.1 and earlier) are not compatible with Workspace ONE Access virtual appliance version 23.09. Migrate your legacy connectors to 22.09.x (or an earlier, supported version of the enterprise connector) before upgrading your Workspace ONE Access virtual appliances to 23.09. After upgrading the virtual appliances to 23.09, upgrade the connectors to 23.09.

During the upgrade, all services are stopped; plan the upgrade with the expected downtime in mind.

Important:

Microsoft SQL server 2014 must be updated with the Microsoft SQL patch to support TLS 1.2 before you upgrade the Workspace ONE Access service appliance.

See the Upgrading to Workspace ONE Access 23.09 guide in the Workspace ONE Access documentation center for more information.

Upgrading to Workspace ONE Access Connector 23.09 (Windows)

Upgrade to Workspace ONE Access connector 23.09 is supported from versions 22.09.1.0, 22.09.0.0, 22.05, 21.08.0.1, and 21.08.0.0.

See the Upgrading to Workspace ONE Access Connector 23.09  guide for information.

Migrating Legacy Connectors

Workspace ONE Access 23.09 does not support legacy connectors (version 19.03.0.1 and earlier). The Connectors (Legacy) page has been removed from the Workspace ONE Access console.

From Workspace ONE Access connector version 19.03.x, a migration path to version 22.09 is available. The process includes installing new 22.09 connectors and migrating your existing directories and virtual apps collections to the new connectors. Migration is a one-time process, and you must migrate directories and virtual apps collections together.

After the migration is complete, you no longer need the Integration Broker for Citrix integrations. The required functionality is now part of the Virtual App service component of the Workspace ONE Access connector.

See the Migrating to Workspace ONE Access Connector 22.09 guide for information.

After migrating the legacy connectors to version 22.09, you can upgrade them from version 22.09 to 23.09.

Resolved Issues

This release includes the following resolved issues.

  • HW-180874: The Default Launch Client setting for Horizon virtual apps collections is ignored

  • HW-170798: Unable to sync Horizon Enterprise virtual apps collections when using a connection via a proxy

  • HW-174051: Updating a virtual apps collection resets the network range

  • HW-172671: Citrix App launch fails on Firefox browser

  • HW-171435: Citrix App launch fails when the first connector in the virtual apps collection is down

  • HW-170576: Unable to sync virtual apps collections when using a connection via a proxy

  • HW-174269: Workspace ONE Access Connector 22.09.1 fails to install when the domain name has a '_' character

  • HW-181989: Saving or syncing a Horizon virtual apps collection when a Horizon server is down removes existing  metadata

  • HW-178572: In a multi-site deployment, after Workspace ONE Access is failed over to the secondary site, login, launches, and other operations including connector health checks might fail when the secondary site is using Ehcache as the cache type (the default option) in read-only mode

  • HW-170576: When a proxy is configured, the Virtual App service is unable to fetch metadata from a Horizon Cloud Service Single-Pod Broker setup

Known Issues

  • Kerberos authentication fails in some cases

    Kerberos authentication fails when a directory is configured in the following way:

    • In Active Directory, sAMAccountName@domain is not the same as UserPrincipalName.

    • UserPrincipalName is mapped to userName in Workspace ONE Access.

    Workaround: None

  • Cloned nodes in the secondary data center cluster point to the wrong FQDN

    Cloned nodes in the secondary data center cluster point incorrectly to the FQDN of the first node in the primary data center

    Workaround: After you create nodes for the secondary data center cluster, you must edit the opensearch.yml file for each node and set the cluster.initial_master_nodes property to the FQDN of the first node in the secondary data center cluster. See Configure OpenSearch for Nodes in Secondary Data Center for more information.

  • Citrix application launch on Windows Hub app does not succeed

    Citrix applications cannot be launched on the Windows Hub app when conditional access policies are set for Citrix applications.

    Workaround: Use Hub Web instead to launch the applications.

Documentation

Internationalization

VMware Workspace ONE Access is available in the following languages.

  • English

  • French

  • German

  • Spanish

  • Japanese

  • Simplified Chinese

  • Korean

  • Traditional Chinese

  • Russian

  • Italian

  • Portuguese (Brazil)

  • Dutch

To view the documentation in your preferred language, click the icon at the top-right of the page and select the language.

Support Contact Information

Contact VMware Support when you need help with your VMware Identity Services environment. You can submit a support request to VMware Support online using your VMware Customer Connect account or by phone.

KB article 2151511, How to access VMware Workspace ONE Support, describes how to contact Workspace ONE Support.

check-circle-line exclamation-circle-line close-line
Scroll to top icon