With Self-Registration for Workspace ONE Drop Ship Provisioning (Online), you can register your Windows devices in Workspace ONE UEM instead of having your Windows device manufacturer (OEM) register them for you. You can use this process to test the Workspace ONE Drop Ship Provisioning (Online) process with a single device to ensure a desired outcome. Workspace ONE Drop Ship Provisioning (Online) is supported for SaaS customers only.

Technical Previews

Workspace ONE UEM offers the self-registration for Workspace ONE Drop Ship Provisioning (Online) feature as a technical preview. Technical preview features are not fully tested and some functionality might not work as expected. However, these previews help Workspace ONE UEM improve current functionality and develop future enhancements.

What is Self-Registration for Workspace ONE Drop Ship Provisioning (Online)?

In the current Workspace ONE Drop Ship Provisioning (Online) process, you work with your OEM to provision your Windows devices. We've now updated the process so that you can register and provision your own Windows devices without your OEM.

To self-provision using Workspace ONE Drop Ship Provisioning (Online), you must first stage your windows devices with a provisioning bundle, and then register the device into the Workspace ONE OEM Provisioning Service from the Workspace ONE UEM console. You must complete both these tasks before powering on the device to launch the zero-touch provisioning process.

Requirements

Before you can configure Workspace ONE Drop Ship Provisioning (Online) with self-registration, you must meet the following requirements.
  • Tasks required for the admin.
    • Complete the console-side tasks to register devices in the Workspace ONE UEM console.
    • Use the Workspace ONE Intelligent Hub for Windows 20.11 or later.
      • Configure it to update automatically.
      • Enable the setting Intelligent Hub Automatic Updates in the Workspace ONE UEM console in Groups & Settings > All Settings > Devices & Users > Windows > Windows Desktop > Intelligent Hub Application.
    • Configure Software Distribution in the organization group where your Workspace ONE Drop Ship Provisioning (Online) settings reside. For details about this system, access Software Distribution of Win32 Applications.
    • Use Workspace ONE UEM 2111 or later.
    • Workspace ONE Drop Ship Provisioning (Online) does not support On-Demand or User context applications. Ensure your app assignments are in the Device context, and are set to Automatic deployment.
    • Disable the Auto Enrollment setting in the Workspace ONE UEM console found at Groups & Settings > All Settings > Device & Users > Windows > Windows Desktop > Auto Enrollment.
    • You must complete the registration of an email domain for enrollment, also known as Autodiscovery Enrollment, at the customer organization group (OG) level in Workspace ONE UEM.
      • Find this configuration in the Workspace ONE UEM console at Groups & Settings > All Settings > Devices & Users > General > Enrollment > Authentication. For details, access Autodiscovery Enrollment.
      • You can only enable Workspace ONE Drop Ship Provisioning (Online) at the customer OG where you registered and enabled Autodiscovery Enrollment. Drop Ship devices enroll automatically into this OG.
  • Tasks and packages required for the device.
    • Stage all devices with the generic PPKG file, a generic answer file (unattend.xml), and run Sysprep.

Console-side: create a tag in the Workspace ONE UEM console.

The Workspace ONE Drop Ship Provisioning (Online) system uses this tag to match your Workspace ONE UEM configurations with your registered devices. You can select the Create Tags card on the Drop Ship Provisioning page to start this process. Find the card located at Devices > Lifecycle > Drop Ship Provisioning.
  1. Select the applicable organization group.
  2. Go to Groups & Settings > All Settings > Devices & Users > Advanced > Tags and select Create Tag.
  3. Enter a name for the tag. You can use any name you want. Consider using a name that identifies the business unit that uses these provisioned devices. For example, enter the name RnD for the research and development unit.
  4. Save your tag.

Console-side: create a smart group in the Workspace ONE UEM console and assign the tag to it.

Workspace ONE UEM uses the tag to match your configurations to the devices in the smart group. You can select the Create Smart Groups card on the Drop Ship Provisioning page to start this process. Find the card located at Devices > Lifecycle > Drop Ship Provisioning.
  1. Ensure you are in the right organization group.
  2. Go to Groups & Settings > Groups > Assignment Groups and select Add Smart Group.
  3. Enter a name for the smart group and use the Criteria type.
  4. Select the Tag section and enter the tag you previously created.
  5. Save your smart group.

Console-side: configure the log in experience in the Workspace ONE UEM console for end users.

To create local accounts for access, create a local administrator account using a Custom Settings profile and using Microsoft's Accounts CSP. For access to the SyncML for this profile, see VMware Policy Builder.

If you have an on-premises domain, you can join your devices to the domain and enable users to login with their Active Directory credentials. Find information on domain join through Workspace ONE UEM at How Do You Deploy Domain Join Configurations for Windows Desktop?.

Console-side: assign profiles and apps to the Workspace ONE Drop Ship Provisioning (Online) smart group in the Workspace ONE UEM console.

Configure or edit profiles and assign them to the provisioning smart group you previously created. Also, publish apps to applicable smart groups. Workspace ONE Drop Ship Provisioning (Online) does not support On-Demand or User context applications. Ensure your app assignments are in the Device context, and are set to Automatic deployment.

Console-side: register devices in the Workspace ONE UEM console.

You can register your devices with the Workspace ONE OEM Provisioning Service using the tag previously created (optional), your organization groups (OGs), and your device serial numbers. The listed process outlines the menu items you see when you register the first time.
  1. Enable Workspace ONE Drop Ship Provisioning (Online).
    1. Ensure you are in the correct organization group.
    2. Go to Devices > Lifecycle > Drop Ship Provisioning.
    3. Select Enable Drop Ship Provisioning.
    4. As an option, you can add child OGs in the Drop Ship Provisioning page. Go to the Enable Child Organization Groups menu item and select child groups where you want to register devices.
  2. Enter Windows device information for registration.
    1. Go to Devices > Lifecycle > Drop Ship Provisioning.
    2. Select Add Device.
    3. Complete the menu options in the Add Drop Ship Device page. Most of the menu items are optional except for the Serial Number menu item. You must enter this string. Although optional, you can select the tag you created previously in the Tag menu item.

See your device in the Drop Ship Provisioning list view. The page displays the Sync Status for the device.

Console side: sync device records in the Workspace ONE UEM console, either manually or wait for the scheduler.

Sync your device records with the Workspace ONE OEM Provisioning Service. You can wait for the scheduler job to sync your registered device records in the console or you can initiate a sync. Additions or changes to the Drop Ship Provisioning page must sync with the Workspace ONE OEM Provisioning Service to display in the console.
  1. Ensure you are in the correct organization group.
  2. Go to Devices > Lifecycle > Drop Ship Provisioning.
  3. Select Sync and refresh your browser to refresh the Sync Status column for the devices in the list view.
Your registered devices display on the Drop Ship Provisioning page.

Device-side: stage your devices for provisioning.

Prepare your Windows devices for self-registration for Workspace ONE Drop Ship Provisioning (Online). You can get the bundle from My Workspace One.
  1. Download a bundle that contains the listed files.
    • VMware Workspace ONE Provisioning Tool
    • Generic PPKG
    • Generic answer file (unattend.xml)
    • RunPPKGandXML.bat file that contains a one line script to orchestrate the staging process
    • License file
  2. Start the device in Audit mode and extract the tool, the PPKG, the unattend file, and the script file to the device.
  3. Double-click the RunPPKGandXML.bat file.
    • The VMware Workspace ONE Provisioning Tool staging process starts zero-touch provisioning.
    • After staging completes, the device automatically runs Sysprep and powers down, as it prepares to launch the zero-touch process.
  4. Initiate the zero-touch provisioning process by starting the device after the device completes staging and its registration steps.
  5. Results: After the process completes, the device displays a green screen that reads Workspace One Provisioning complete.

Add device tags in bulk.

You can add a tag to devices in bulk using the Drop Ship Provisioning list view.
Note: You cannot change or remove tags in bulk. If you want to change a tag, you must perform this task for each device.
  1. Ensure you are in the correct organization group.
  2. Go to Devices > Lifecycle > Drop Ship Provisioning.
  3. Select the check box for all devices for which you want to add the tag.
  4. Select the Tag button.
  5. Select the desired tag from the drop-down list.
  6. Wait for the sync scheduler job to sync your changes with the Workspace ONE OEM Provisioning Service or use the Sync button to initiate the sync. For updates to display, additions or changes to the Drop Ship Provisioning page must sync with the Workspace ONE OEM Provisioning Service.

How do you get UUIDs for your organization groups?

What if you are using the technical preview but you still need to use the current Workspace ONE Drop Ship Provisioning (Online) process to register devices? For the current Workspace ONE Drop Ship Provisioning (Online) process, you need the UUID for every OG where you want your OEM to register devices.

We changed the UI for the technical preview. If you have already added devices for registration, you cannot go to the Drop Ship Provisioning list view to get applicable UUIDs. If you have not added devices for self-registration, you can select the Add Device menu item to get the UUID for the OG you are in. If you added devices for self registration, use the listed process to get UUIDs for your OGs.
  1. Go to the applicable organization group in the Workspace ONE UEM console.
  2. Go to Groups & Settings > Configurations and select Drop Ship Provisioning from the configurations list view.
  3. View the UUID in the Organization Group UUID text box.