With Self-Registration for Workspace ONE Drop Ship Provisioning (Online), you can register your Windows devices in Workspace ONE UEM instead of having your Windows device manufacturer (OEM) register them for you. You can use this process to test the Workspace ONE Drop Ship Provisioning (Online) process with a single device to ensure a desired outcome. Workspace ONE Drop Ship Provisioning (Online) is supported for SaaS customers only.
Technical Previews
Workspace ONE UEM offers the self-registration for Workspace ONE Drop Ship Provisioning (Online) feature as a technical preview. Technical preview features are not fully tested and some functionality might not work as expected. However, these previews help Workspace ONE UEM improve current functionality and develop future enhancements.
What is Self-Registration for Workspace ONE Drop Ship Provisioning (Online)?
In the current Workspace ONE Drop Ship Provisioning (Online) process, you work with your OEM to provision your Windows devices. We've now updated the process so that you can register and provision your own Windows devices without your OEM.
To self-provision using Workspace ONE Drop Ship Provisioning (Online), you must first stage your windows devices with a provisioning bundle, and then register the device into the Workspace ONE OEM Provisioning Service from the Workspace ONE UEM console. You must complete both these tasks before powering on the device to launch the zero-touch provisioning process.
Requirements
- Tasks required for the admin.
- Complete the console-side tasks to register devices in the Workspace ONE UEM console.
- Use the Workspace ONE Intelligent Hub for Windows 20.11 or later.
- Configure it to update automatically.
- Enable the setting Intelligent Hub Automatic Updates in the Workspace ONE UEM console in .
- Configure Software Distribution in the organization group where your Workspace ONE Drop Ship Provisioning (Online) settings reside. For details about this system, access Software Distribution of Win32 Applications.
- Use Workspace ONE UEM 2111 or later.
- Workspace ONE Drop Ship Provisioning (Online) does not support On-Demand or User context applications. Ensure your app assignments are in the Device context, and are set to Automatic deployment.
- Disable the Auto Enrollment setting in the Workspace ONE UEM console found at .
- You must complete the registration of an email domain for enrollment, also known as Autodiscovery Enrollment, at the customer organization group (OG) level in Workspace ONE UEM.
- Find this configuration in the Workspace ONE UEM console at . For details, access Autodiscovery Enrollment.
- You can only enable Workspace ONE Drop Ship Provisioning (Online) at the customer OG where you registered and enabled Autodiscovery Enrollment. Drop Ship devices enroll automatically into this OG.
- Tasks and packages required for the device.
- Stage all devices with the generic PPKG file, a generic answer file (unattend.xml), and run Sysprep.
Console-side: create a tag in the Workspace ONE UEM console.
- Select the applicable organization group.
- Go to Create Tag. and select
- Enter a name for the tag. You can use any name you want. Consider using a name that identifies the business unit that uses these provisioned devices. For example, enter the name RnD for the research and development unit.
- Save your tag.
Console-side: create a smart group in the Workspace ONE UEM console and assign the tag to it.
- Ensure you are in the right organization group.
- Go to Add Smart Group. and select
- Enter a name for the smart group and use the Criteria type.
- Select the Tag section and enter the tag you previously created.
- Save your smart group.
Console-side: configure the log in experience in the Workspace ONE UEM console for end users.
To create local accounts for access, create a local administrator account using a Custom Settings profile and using Microsoft's Accounts CSP. For access to the SyncML for this profile, see VMware Policy Builder.
If you have an on-premises domain, you can join your devices to the domain and enable users to login with their Active Directory credentials. Find information on domain join through Workspace ONE UEM at How Do You Deploy Domain Join Configurations for Windows Desktop?.
Console-side: assign profiles and apps to the Workspace ONE Drop Ship Provisioning (Online) smart group in the Workspace ONE UEM console.
Configure or edit profiles and assign them to the provisioning smart group you previously created. Also, publish apps to applicable smart groups. Workspace ONE Drop Ship Provisioning (Online) does not support On-Demand or User context applications. Ensure your app assignments are in the Device context, and are set to Automatic deployment.
Console-side: register devices in the Workspace ONE UEM console.
- Enable Workspace ONE Drop Ship Provisioning (Online).
- Ensure you are in the correct organization group.
- Go to .
- Select .
- As an option, you can add child OGs in the Drop Ship Provisioning page. Go to the Enable Child Organization Groups menu item and select child groups where you want to register devices.
- Enter Windows device information for registration.
- Go to .
- Select Add Device.
- Complete the menu options in the Add Drop Ship Device page. Most of the menu items are optional except for the Serial Number menu item. You must enter this string. Although optional, you can select the tag you created previously in the Tag menu item.
See your device in the Drop Ship Provisioning list view. The page displays the Sync Status for the device.
Console side: sync device records in the Workspace ONE UEM console, either manually or wait for the scheduler.
- Ensure you are in the correct organization group.
- Go to .
- Select Sync and refresh your browser to refresh the Sync Status column for the devices in the list view.
Device-side: stage your devices for provisioning.
- Download a bundle that contains the listed files.
- VMware Workspace ONE Provisioning Tool
- Generic PPKG
- Generic answer file (unattend.xml)
- RunPPKGandXML.bat file that contains a one line script to orchestrate the staging process
- License file
- Start the device in Audit mode and extract the tool, the PPKG, the unattend file, and the script file to the device.
- Double-click the RunPPKGandXML.bat file.
- The VMware Workspace ONE Provisioning Tool staging process starts zero-touch provisioning.
- After staging completes, the device automatically runs Sysprep and powers down, as it prepares to launch the zero-touch process.
- Initiate the zero-touch provisioning process by starting the device after the device completes staging and its registration steps.
- Results: After the process completes, the device displays a green screen that reads Workspace One Provisioning complete.
Add device tags in bulk.
- Ensure you are in the correct organization group.
- Go to .
- Select the check box for all devices for which you want to add the tag.
- Select the Tag button.
- Select the desired tag from the drop-down list.
- Wait for the sync scheduler job to sync your changes with the Workspace ONE OEM Provisioning Service or use the Sync button to initiate the sync. For updates to display, additions or changes to the Drop Ship Provisioning page must sync with the Workspace ONE OEM Provisioning Service.
How do you get UUIDs for your organization groups?
What if you are using the technical preview but you still need to use the current Workspace ONE Drop Ship Provisioning (Online) process to register devices? For the current Workspace ONE Drop Ship Provisioning (Online) process, you need the UUID for every OG where you want your OEM to register devices.
- Go to the applicable organization group in the Workspace ONE UEM console.
- Go to Drop Ship Provisioning from the configurations list view. and select
- View the UUID in the Organization Group UUID text box.