Be aware of several notes and caveats before attempting to install Workspace ONE UEM on premises. Read through the following sections and ensure that you are fully prepared for following the steps in the remainder of this guide.

Obtain the Latest Version of this Document

Ensure that you are using the latest version of this guide by downloading the latest copy of the document from Workspace ONE UEM frequently makes updates to documentation and having the latest version ensures that you are following the best practices and procedures.

Obtain the Install Package Files

Ensure that you have downloaded the installation package files. The link to these files is provided to you by your Workspace ONE UEM consultant as part of the deployment process.

Meet the Requirements

Meet all the requirements needed for a Workspace ONE UEM installation. Specific hardware and software requirements are outlined in the Workspace ONE UEM Recommended Architecture Guide, available on A list of other requirements can be found in the Installation Preparation Overview.


As of AirWatch v9.1 we have changed our supported SQL versions. Please check the latest list of prerequisites in the Recommended Architecture Guide to ensure your current version is supported.

Verify your On-Call Resources

Ensure that you have the proper on-call resources available if you need them. These resources may include technical resources such as the Database Analyst, Change Manager, Server Administrator, Network Engineer, and MDM System Administrator.

Workspace ONE UEM Components

To streamline the Workspace ONE UEM installation process, this documentation refers to both the Workspace ONE UEM console server and Workspace ONE UEM Device Services server. Before proceeding, it is important to understand each of these components and what they mean to your specific topology model.

  • The Workspace ONE UEM console Server refers to the component of Workspace ONE UEM that renders and displays the UEM console. It presents and sends data to the database directly from the Workspace ONE UEM console.
  • The Workspace ONE UEM Device Services Server refers to the component of Workspace ONE UEM that communicates with all managed devices. This server runs all processes involved in receiving and transmitting information from devices to other components of the system.
  • The VMware Identity Manager Server refers to the component of Workspace ONE UEM that enables Workspace ONE functionality. This server provides services required for the Workspace ONE application and brand new functionality like mobile single sign-on and conditional access for third-party applications.

    As of Workspace ONE UEM 9.4, the installer for the VMware Identity Manager is separate from the Workspace ONE UEM installer. This documentation details where you need to transfer to the Identity Manager documentation to complete your setup. Vmware Identity Manager documentation is available on

  • The Workspace ONE UEM Application Server is any server that runs a Workspace ONE UEM instance. The standard Workspace ONE UEM deployment method involves installing multiple application servers for these components alongside a database. For each procedure in this guide that references an Application server, complete the procedure on all Workspace ONE UEM servers (Console, Device Services, AWCM, API).
  • This documentation assumes that you are using one of the recommended architectures as detailed in the Workspace ONE UEM Recommended Architecture Guide, available on If you are not using one of these architectures, contact VMware AirWatch for additional assistance.

A Note About Screenshots in this Document

Where applicable, this documentation uses screenshots from Windows Server 2012. If you are using Windows Server 2008 R2 or 2016, then perform the same actions documented in this guide, with the knowledge that the exact steps may slightly differ.