You can set the Workspace ONE UEM console to distribute approved Windows Desktop internal applications automatically with a side loading key. This process is not needed for Windows 10+.


Before you can distribute internal applications to Windows Desktop devices, you must obtain two items from Microsoft.
  • Side loading key (not needed for Windows 10+)

    Workspace ONE UEM sets a property to allow the side loading of applications on Windows 10 devices. This step occurs after the device enrolls with the Workspace ONE UEM system.

  • Code signing certificate

Visit the Windows Dev Center for information about side loading keys and code signing certificates for Windows Desktop applications.

Important: These settings affect devices enrolled after you have prepared the Workspace ONE UEM console for application distribution. If you change the side loading key after devices enroll, all devices must re-enroll to access internal applications.
Important: The key provided by a Volume Licensing portal, such as, might be limited to a specific number of device activations. Verify that there is a key available for your use. For more information, visit the Microsoft Developer Network site.


  1. Navigate to Groups & Settings > All Settings > Devices & Users > Windows > Windows Desktop > Enterprise Apps.
  2. Complete the following options.
    Setting Description
    Enable Enterprise Application Manager Allows Workspace ONE UEM to push approved internal applications to Windows Desktop devices.
    Side Loading Key Enter the key provided by the Windows Dev Center.

    For example: ADQ2Z-6TP3W-4QGHK-PSDAW-8WKYR

  3. Select Save.
    This process uploads the side loading key into the Workspace ONE UEM console and automatically enables corporate devices to install the enterprise internal application.