After ensuring that your server meets all the proper requirements, configuring VMware Tunnel settings in the Workspace ONE UEM console, and downloading the installer to your Windows server, you can run the installer to enable the service.


  • Download the installer onto the server. The link in the UEM console directs you to Workspace ONE UEM Resources to download the installer.
  • Download the config.xml file from the UEM console onto the server.


  1. Open the installer executable on the Endpoint VMware Tunnel Proxy server and then select Next.
    If a previous version of VMware Tunnel Proxy is installed, the installer auto-detects it and offers the option to upgrade to the latest version.
  2. Accept the End User License Agreement and then select Next.
  3. Specify the destination for the downloaded VMware Tunnel Proxy installation files and then select Next.
  4. Select Browse and select the config.xml file downloaded from the UEM console. Select Next.
  5. Select the check box to indicate if VMware Tunnel Proxy uses an outbound proxy. If so, enter the address of the Proxy Host and Proxy Port number to be used for communication.
    1. If the proxy requires authentication, first select the Does the proxy require authentication credentials? checkbox, then select whether it uses Basic or NTLM authentication, then specify the Username and Password credentials.
    For more information about using outbound proxies, see Outbound Proxy Overview.

  6. Specify whether you are using Proxy auto-configuration (PAC) files as part of your VMware Tunnel Proxy installation. Select Next.
    A PAC file is a set of rules that a browser checks to determine where traffic gets routed. For VMware Tunnel Proxy, traffic is checked against the PAC file to determine if it has to go through an outbound proxy. If you have authentication for PAC files, then the VMware Tunnel Proxy must know the user name and password of the proxy. You can reference a PAC file on a remote server by providing the PAC URL or Upload a PAC file directly.
    Note: If you are accessing outbound proxies through the VMware Tunnel Proxy that use a PAC file and also require authentication, then refer to Outbound Proxies using PAC Files.

  7. Enter the Certificate Password you created in the UEM console and then select Next.
  8. Click Install to begin VMware Tunnel Proxy installation on the server.
  9. Click Finish to close the VMware Tunnel Proxy installer.