Before you can use Workspace ONE AirLift to bridge ConfigMgr to Workspace ONE UEM, you must meet the prerequisites and requirements.
You must meet these requirements if you are a SaaS or on-premises customer.
- If you plan to use collection mapping, app export, and enrollment, you must configure Workspace ONE AirLift to communicate with ConfigMgr.
- If you plan to use policy mapping, you must configure Workspace ONE AirLift to communicate with your active directory.
Ensure that your server meets the necessary hardware requirements before installing.
|VM or Physical Server||2 CPU Core (2.0+ GHz)
4 GB RAM or more
1 GB disk space for the Workspace ONE AirLift application, operating system, and .NET Core runtime. Consider having 5 GB of disk space.
|Browser|| Workspace ONE AirLift supports the most recent versions of Chrome, Firefox, and Edge. Internet Explorer is not supported.
To maximize automation, the Workspace ONE AirLift server must be online and able to retrieve software from Microsoft and Mongo.
|Operating System||Windows Server 2012 R2, Windows Server 2016, Windows Server 2019, or Windows 10
Note: Workspace ONE AirLift does not support Windows Server 2012 R2 configured as domain controllers.
|Remote Server Administration Tools||This requirement only applies if you plan on using policy mapping.
You must install Remote Server Administration Tools (RSAT) on the Workspace ONE AirLift server.
Ensure that your server meets the network requirements before installing.
|Domains||Microsoft System Center Configuration Manager (ConfigMgr) and Workspace ONE AirLift must be on the same domain.|
|Workspace ONE AirLift to SCCM communication||You must allow Workspace ONE AirLift the following access to the ConfigMgr server:
|Workspace ONE AirLift to Workspace ONE UEM console||You must allow Workspace ONE AirLift the following access to the UEM console:
|Workspace ONE AirLift to Active Directory||This requirement only applies if you plan on using policy mapping.
You must allow Workspace ONE AirLift access to the SYSVOL directory. The directory must contain the PolicyDefinitions folder. To map third-party ADMX settings, you must include those ADMX files in the PolicyDefinitions folder.
If there is no PolicyDefinitions folder in the SYSVOL location:
Workspace ONE UEM Requirements
Ensure your Workspace ONE UEM deployment meets the requirements before installing.
|Workspace ONE UEM Requirements||Details|
|Version||Workspace ONE UEM 1903 or later|
|Admin account||Admin account with API-level permissions. For on-premises customers, the admin account cannot be a Global-level admin. Only use a child customer organization group admin account.|
Ensure your ConfigMgr deployment meets the requirements before installing Workspace ONE AirLift.
|Version||Microsoft Systems Center Configuration Manager 2012 R2 or later|
|Admin Account||Workspace ONE AirLiftrequires an admin account with a minimum level of permissions. You must create an admin account with the following permissions in ConfigMgr:
|Content Location||Workspace ONE AirLift requires an admin account with read access to the ConfigMgr content location. If you plan to create a Workspace ONE enrollment application, Workspace ONE AirLift needs write access to the content location.|
Active Directory Requirements
Ensure that Active Directory deployment meets the requirements before installing Workspace ONE AirLift.
|Active Directory Requirements||Details|
|Read permissions for group policy processing and policy definitions location.||This requirement only applies if you plan on using policy mapping.Workspace ONE AirLift requires a domain account with read permissions for any GPO you want to export.|