The Cloud Services page is where you can enable various Workspace ONE UEM cloud services, such as autodiscovery for enrollment and app wrapping for internal applications.

  • Current Setting – Select whether to Inherit or Override the displayed settings. Inherit means use the settings of the current organization group's parent OG, while Override enables the settings for editing so you can modify the current OG's settings directly.

AirWatch ID

Setting Description
Auto Mode Select AirWatch ID.
Auto Discovery AirWatch ID Enter your AirWatch ID, or select the hyperlink to register.
HMAC Token Generate your HMAC Token.

Cloud Services

Setting Description
Auto Discovery Enabled

Select to enable this cloud service for autodiscovery enrollment.

In order for your on-premises deployment to communicate with the Workspace ONE UEM autodiscovery service to authenticate the HMAC token used for wrapping, you must meet the applicable network requirements.
Auto Discovery Certificate Pinning Enabled

This option is available only when Auto Discovery is enabled. You can upload your own certificate and pin it to the auto discovery function.

Select Add a certificate and the settings Name and Certificate display. Enter the name of the certificate you want to upload, select the Upload button, and choose the cert located on your device.

Supported Cipher Suites
  • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
  • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
  • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
  • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
  • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
  • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
  • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
  • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
  • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
  • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
  • TLS_RSA_WITH_AES_256_GCM_SHA384
  • TLS_RSA_WITH_AES_128_GCM_SHA256
  • TLS_RSA_WITH_AES_256_CBC_SHA256
  • TLS_RSA_WITH_AES_128_CBC_SHA256
  • TLS_RSA_WITH_AES_256_CBC_SHA
  • TLS_RSA_WITH_AES_128_CBC_SHA
App Wrapping Secure Communication Enabled This option is for customers who want to host their own app wrapping instances in their own network. Leave this option deselected unless you know what it does and have discussed enabling it in your environment with Workspace ONE UEM.

Updates

Setting Description
Check for Updates Select this button to check GEM for updates for device OS versions and determine if new ones must be added to the Console UI.
  • Child Permission – Select the available behavior of child organization groups that exist below the currently selected organization group. Inherit only means child OGs are only allowed to inherit these settings. Override only means they override the settings, and Inherit or Override means you can choose to inherit or override settings in child OGs that exist below the currently selected OG.