Enrollment On Behalf Of (EOBO) with ADCS on Microsoft's Distributed Component Object Model (DCOM) substrate can be deployed on the VMware Enterprise Systems Connector in a SaaS environment and as such, additional configuration steps are required.

If using VMware Enterprise Systems Connector, the VMware Enterprise Systems Connector server must comply with the hardware sizing requirements mentioned in the Workspace ONE UEM Recommended Architecture Guide, which is available by name on the Workspace ONE UEM Resource Portal. Refer to the guidelines described for the Admin Console server.

VMware Enterprise Systems Connector Configuration Steps

If your Workspace ONE UEM deployment is strictly on-premises, then you may skip ahead to Configuring the Workspace ONE UEM console, otherwise, configure the VMware Enterprise Systems Connector by completing the following steps.

  1. On the VMware Enterprise Systems Connector server, run services.msc
  2. Stop the VMware Enterprise Systems Connector service.
  3. Right-click the VMware Enterprise Systems Connector service.
  4. Select Properties.
  5. Select the Log On tab.
  6. Under Log on as:, choose Local System account and enable the check box Allow Service to Interact with Desktop.
  7. Click OK to save settings and close the Properties page.

If necessary, see Troubleshooting the VMware Enterprise Systems Connector Configuration for additional information.