Apps for macOS Devices

Combine Workspace ONE UEM MDM features with Workspace ONE UEM apps to even further enhance security and functionality. Easily manage Workspace ONE UEM apps throughout the entire lifecycle across employee-owned, corporate-owned, and shared devices from the UEM console. This section provides you more information on the supported managed applications on macOS devices.

For more information about managing applications, see Mobile Application Management guide.

Workspace ONE Intelligent Hub

With the Workspace ONE Intelligent Hub installed on the devices, users authenticate with the Hub and enroll their devices. Based on the admin UEM console configurations, users can access the enterprise applications and Web applications through the Intelligent Hub Catalog and other services of the Hub.

Note: The Hub features detailed in the following sections are supported only in the Intelligent Hub 19.04 and later version.

Intelligent Hub Accounts Screen

When the Hub Services are activated on the UEM console, users can click the Intelligent Hub Accounts icon in the bottom left corner of the screen to access the Hub Accounts page. If the Hub Services are deactivated, the Accounts page is the default landing page.

Note: Hub Services is available only with cloud-hosted deployments. For more information on enabling the Hub services, see the Rolling Out VMware Workspace ONE Intelligent Hub guide.

The following information found on the Accounts page can be used for troubleshooting purpose and to contact support.

• This Device - Displays device enrollment status, device information, compliance status, network data, and messages.

• Support - Users can call or email support. Collect Logs link lets users easily collect all logs and information in a compressed .zip format.

• About - Intelligent Hub app version, legal, and privacy information can be viewed.

Intelligent Hub Catalog as App Catalog

Users can access and install their enterprise applications and Web applications through the Intelligent Hub Catalog. During the app installation, a pop-up appears to let users know what is happening next. The information displayed is based on the app type and platform. For more information about enabling access to apps (such as purchased VPP apps, Non-App Store macOS apps, and web apps), see the Mobile Application Management guide.

Other Services of Intelligent Hub

The Workspace ONE Intelligent Hub's services differ depending on the Hub configurations with or without VMware Identity Manager in the UEM console. If you enable the Hub service without VMware Identity Manager, users can have access to services such as Hub Catalog, Home tab, and Branding. If the Hub service is enabled with the VMware Identity Manager, users can access People and Notification services. For more information on integration of Hub services with and without VMware Identity Manager, see the Rolling Out VMware Workspace ONE Intelligent Hub guide.

Configure Settings for the macOS Workspace ONE Intelligent Hub

You can configure settings specific to the macOS Workspace ONE Intelligent Hub and its impact on the installed device through the UEM console.

1. From the UEM console, navigate to Devices > Device & Users > Apple > Apple macOS > Intelligent Hub Settings.

2. Click the Override radio button to enable setting modification, if necessary.

3. Configure the Hub settings:

   Setting	Description
   Always Use the Latest Version of the Hub	Select this check box to use the latest version of the Hub.
   Hub Version	In the dropdown, the versions of Intelligent Hub that are compatible with your Console version will be displayed. Select the specific Hub version from the available versions of the Hub. You can decide which Intelligent Hub version is deployed to all new devices during Automated Enrollment via Apple Business or School Manager, or during web-based enrollment. Also, the Intelligent Hub Auto-Updates will deploy the specified version.
   Install Hub after Enrollment	Activate or deactivate the option to automatically install the Hub on devices after enrollment through Apple Business Manager's DEP or Web enrollment. Install Workflow Engine after Enrollment: Activate or deactivate the option to automatically install a required supplemental component for Freestyle Orchestrator and Scripts. This seeded component is governed by the Auto-Update setting as Hub.
   Check-in Interval	Enter the frequency for the Hub to check in with the server to receive new commands.
   Data Sample Interval	Enter the frequency for the Hub to scan devices to collect data such as product provisioning status, disk encryption status, custom attributes, GPS location, and other basic system information.
   Data Transmit Interval	Enter the frequency for the Hub to send data samples to the Hub UEM server.
   Uninstall Privileges	Activate or deactivate the option to provide end users the ability to uninstall the Hub application from their devices.

   Note: The Workspace ONE Intelligent Hub file for the macOS devices is distributed through the Device Services (DS) server. If the Content Delivery Network (CDN) is configured, then the Hub file is distributed through the CDN.

4. Click Save.

(Legacy) AirWatch Catalog and Workspace ONE Catalog

Apart from using the Intelligent Hub Catalog as an app catalog, users can also use the Workspace ONE app or the (legacy) AirWatch Catalog depending on the app catalog settings established in the UEM console. Deploy an app catalog to your end users to access enterprise and Web applications that you manage in the UEM console.

The Workspace ONE app integrates resources from environments that use VMware Identity Manager and Workspace ONE UEM. If your catalog deployment does not use VMware Identity Manager, you can publish the legacy (AirWatch Catalog) as a Webclip to the device. The webclip can be installed on all macOS devices enrolled to an organization group by enabling the legacy catalog at Settings > Apps > Workspace ONE > AirWatch Catalog > General > Publishing. Saving this page with the toggle enabled redeploys the webclip to devices.