Workspace ONE Launcher is an app launcher that enables you to lock down Android devices for individual use cases and customize the look and behavior of managed Android devices. The Workspace ONE Launcher is pushed with Workspace ONE UEM powered by AirWatch and replaces your device interface with one that is custom- tailored to your business needs. The biggest advantage of Workspace ONE Launcher is that it can give administrators complete control over mobile use without using the OEM-specific MDM APIs.

Configuring Workspace ONE Launcher settings in the VMware Workspace ONE UEM™ console tailors devices for deployment in any number of situations, such as:

  • Retail Kiosk Mode – Lock each device into a single app with no access to other features or settings. Customers can browse store products or place food orders without employee interaction.
  • Education – Load a single education or research app for students to use while in class. Students are unable to surf the Web or download more apps onto devices.
  • Healthcare – Loan out devices with whitelisted apps for patient-use, such as games and entertainment apps. Enable phone features and customize an address book with important hospital contact information.

You can configure Workspace ONE Launcher in one of three app modes:

  • Single App mode enables you to lock each device into a single app and prevent access to other features or settings on the device. You can provide access to dependent apps, set as hidden apps.
  • Multi App mode enables you to restrict the Launcher profile to a limited set of whitelisted apps and customize the layout.
  • Template Mode enables you to customize the entire user interface of the Launcher app such as app spaces, images, and text.

Note: Workspace ONE Launcher only supported in Android 6.0+ Work Managed Device enrollment mode. Workspace ONE Launcher is not supported in Work Profile enrollment.

Workspace ONE Launcher can be provisioned and deployed as a seeded application, internal application, or pushed through Product Provisioning. Depending on the use case for your device fleet, push the profile accordingly.

Supported OS Versions**

Workspace ONE Launcher only supported in Android 6.0+ Work Managed Device enrollment mode. Workspace ONE Launcher is not supported in Work Profile enrollment.

Workspace ONE Launcher supports the following OS versions:

  • 4.4.X
  • 5.0.X
  • 6.0.X
  • 7.0.X
  • 8.0.X
  • 9.0.X
  • 10.0.X

After you configure all desired settings for your organization and selected app mode, determine what version of Workspace ONE Launcher you are pushing to our device fleet. You can control which devices receive the Workspace ONE Launcher by configuring the smart group assignment within the General profile when creating the Launcher profile.

Using Workspace ONE Launcher with Android versus Android (Legacy)

How you use Workspace ONE Launcher depends on how you've configured setup in the Workspace ONE UEM console and the version of your Android devices:

  • If you have completed Android EMM Registration and are using Android 6.0+ Work managed devices:
    • Deploy Workspace ONE Launcherusing the Android profile. Using Workspace ONE Launcher with the Android profile configures devices for a single purpose such as kiosk mode by whitelisting supported internal and public applications. This hides certain settings on the device to prevent users from exiting from the Workspace ONE Launcher app. For more information on Workspace ONE UEM integration with Android, see the VMware AirWatch Android Platform Guide.
  • If you opted out of Android EMM Registration with Google:
    • Deploy Workspace ONE Launcher using the Android (Legacy) method.

Configure Workspace ONE Launcher Profile

Locking down your devices with Workspace ONE Launcher includes the configuration of a profile and the deployment of the application to your device fleet.

Tip:Consider viewing the tutorial that launches when you first open the Launcher profile in the Workspace ONE UEM console. The tutorial introduces the seven elements or steps to configure as you customize your Launcher profile. You can exit the tutorial and return later by selecting the question mark icon in the top right corner if you need to review.

You can deploy Workspace ONE Launcher to be used on Android 6.0+ Work managed devices for Android or Android (Legacy) if you've opted out of Android EMM registration with Google. Workspace ONE Launcher is not supported in Work Profile enrollment.

Here is the basic process to configure the Launcher profile:

  1. Navigate to Devices > Profiles & Resources > Profiles > Add > Add Profile > Android..

    Alternatively, select Android (Legacy) to configure the Launcher profile if you've opted out of Android EMM registration.

  2. Configure the General profile settings as desired.

  3. Select the Launcher > Configure.

  4. Configure devices with your custom home-screen by selecting an app mode: Single App, Multi App, or Template Mode.

  5. Configure Layout elements which lets you control design elements such as icon grid and orientation preference, as well as upload images to customize the Launcher with your unique brand look and feel. The available settings depends on the mode.

    Setting Description
    Manufacturer Select from Generic, Samsung, or Nexus as the device types. Available on Multi App and Template Mode.
    Model Select whether the Launcher profile is being pushed to a phone or to a tablet. Available on Multi App and Template Mode.
    Orientation Allows you to select the preview of the Workspace ONE LauncherWorkspace ONE Launcher in Portrait or Landscape view for all app modes. The Preview window adjusts according to selection depending on the app mode. CAUTION:If you change the orientation while configuring Template mode, all settings are lost and you have to start your configuration over.
    Lock Enable this text box to lock the device into a single orientation.
    Grid Select the grid size from the drop-down menu to specify how the icons appear with the specified numbers of grid rows and columns. Select Hide to remove the grid lines on the canvas. Available on Multi App mode only. You can select Hide to hide the gridlines in the layout.
    Minimize Title Bar Select to hide the title bar on the user's device.The user van still swipe down on the screen to access the title bar and additional settings.
    Add Row for Pinned Apps Select to create a bottom bar in the launcher configuration to pin application icons that will remain visible on every screen. Multi App mode only.
    Title Bar Icon Upload a customized icon to appear in the title bar. Available on Multi App Mode only.
    Wallpaper Upload a custom wallpaper to display in the background of the Launcher setup. Available on Multi App mode only.
  6. Determine if your devices need to be used in Offline Mode.

    Offline mode is used when devices are being used in check-in check-out mode. It allows users to continue their work even when they are unable to log in as themselves or are in areas where network connectivity is unstable.

    This setting should be applied to both the end-user and staging user or an organization group that includes both. Assigning to all users ensures the offline mode profile is present when moving between users.

  7. Move to the Apps section and use the drop-down menu to select Public, Internal, or Miscellaneous or to add Bookmarks.

  8. Organize the Launcher Canvas with apps, view App Attributes, remove apps, and create folders for apps to group apps together.

    Canvas Settings

    Settings Description
    Title Bar Customize the title bar within the Launcher to support device-specific or user-specific names.
    Remove Remove apps or folders from the profile if they are no longer needed in the mode. Select the app then select the Remove button. You can also drag apps outside of the canvas area and they will be added back to the Apps section.
    App Attribute Display the properties of the selected app.
    Create Folder Group apps together in a folder for further organization.
    Layout Click to configure Launcher layout design elements such as icon grid and orientation preference. The available layout options can be found in Layout Settings.
    Settings Click to configure Launcher settings such as device settings and utilities to be allowed and the admin passcode to control exit from Launcher.

    View App Attributes

    Settings Description
    Application Name Enter the name of the application displayed to the user. For a public or internal app, the application name is static and is pulled from the Application name present in Apps and Books. For Miscellaneous apps, the name is editable and the app on the device will show the name that is entered in this field.
    Application ID Enter the unique identifier for a given Android application. The format is com. .For example, for Workspace ONE Launcher: com.airwatch.lockdown.launcher.For a public or internal app, the application name is static and is pulled from the Application name present in Apps and Books. For Miscellaneous apps, the name is editable and changing the app ID directly affects whether the app would be whitelisted on the Launcher, meaning if it is wrong, the app will not show. For Miscellaneous apps, add a wildcard * character to create a rule for dynamic rule for automatic whitelisting. This will automatically add all the whitelisted apps for this App ID package without having to repush the Launcher profile everytime a new app is added. If there are multiple apps with the same Application ID say through Miscellaneous apps), this will cause a conflict on the device side. Instead, if one of the apps with the given Application ID is added to the canvas screen, all the other apps carrying that same Application ID should be greyed out.
    Launch App on Start Up Enable to force an app to automatically start on Launcher start up or reboot. If your Launcher profile has more than one app, you can only set this field for one app.
    Allow Certain Sub Packages Allows you to whitelist certain apps that install alongside a main application. You cannot add sub packages within Hidden apps. By default, all sub packages should be whitelisted.
    Sub Package Name Create a whitelist that prevents the installation of all subpackages. For example, only whitelisting the Sub Package Name for AirWatch Calendar, this whitelist prevents the installation of AirWatch Contacts.
  9. Configure Hidden Apps, if needed.

    1. Select Hidden App tab.

    2. Drag and drop apps to add them to the canvas. You can also select the desired app and select Add To Launcher.

    3. Select the app and hit Removeto remove any apps you do not need.

    Hidden apps are apps that have been whitelisted in the Workspace ONE UEM console to allow users to access resources outside a specified app. You will add Hidden apps after you have walked through the setup for either app mode.

    When a user selects a link inside a main app, if the app needed for that content has not been whitelisted they will see an error message. For example, if you have an app configured in the Workspace ONE Launcher profile that has a web link that will direct users to the browser, you have to whitelist the browser as a hidden app. The browser will not show up in the Workspace ONE Launcher profile on the device but will direct users specifically to the content needed. You can view App Attributes for Hidden Apps but the details cannot be edited.

  10. Click the Settings button to configure device settings and utilities to be allowed and to configure the admin passcode.

    The available settings for the Workspace ONE Launcher profile varies depending on if you are opted into Android using EMM Registration or using Android (Legacy).

    Workspace ONE Launcher Profile Settings - Administrative Passcode

    Setting Description
    Administrative Passcode Set a passcode to allow authorized users to perform admin tasks on the device. This passcode is provided only to authorized users. The profile cannot be saved unless an administrative passcode is entered. If someone is trying to exit the launcher and enters the Administrative Passcode incorrectly, the option disappears after 10 unsuccessful attempts, you can restart the device and the option reappears.
    Persist Admin Passcode If Launcher Profile Is Removed From Device Require the passcode to be entered if the Launcher profile has been removed from the device.

    Workspace ONE Launcher Profile Settings - Icon Settings

    Setting Description
    Prevent Icon Rearranging Enable to disable users from moving icons around on the Launcher screen from the device.
    Icon Size Select as Small, Medium, or Large to determine how an icon appears on the display.

    Workspace ONE Launcher Profile Settings - Device Preferences

    Setting Description
    App Icons Allow app icons on the device home screen.
    Settings Allow device network and other granular settings to be enabled.
    Utilities Allow devices management settings to be enabled.
    Hardware Keys Enable or disable hardware keys on the device.
    Quick Launch Icons Allow shortcut icons on the device home screen.
  11. Select the Preview button to view how the configuration will appear on the user's device.

    In the preview window, you can view Alerts to fix issues before pushing your configured Launcher mode to devices.

    The Alerts icon displays the number of errors in red. You will not be alerted for warnings. Click the icon to view all alerts. You cannot save the mode until the errors are resolved. Note: Alerts will only display while configuring Template Mode.

    Two types of alerts will display:

    Alert Type Description
    Warning Alerts you if two elements are overlapping.
    Error Alerts you if you are missing primary properties in the element. For example, missing text for the text element will result in an alert.
  12. Select Save to add the profile to the Workspace ONE UEM console or Save & Publish to add the profile and immediately deploy it to applicable Android devices.

After the profile is created and deployed to devices, the Device Details page shows the status of the Launcher as "Launcher is the home app." If install was not successful or Workspace ONE Launcher is not the default app, the status shows " Launcher is not set at the home app or is not installed."

Configure Launcher version settings which determines which version of the Workspace ONE Launcher is pushed to you devices.

Configure Launcher Version Settings

Determine which version of Workspace ONE Launcher is pushed to devices with the Launcher Version setting. Note: Only upgrade across one version at a time as updating many versions at a time can cause issues.

  1. Navigate to Devices > Device Settings > Android > Service Applications.

  2. Configure the applicable settings.

    Setting Description
    Always use the Latest Version of Workspace ONE Launcher If this setting is enabled, the latest version of the app automatically pushes to devices when it becomes available. Once this setting is enabled, it applies across all devices you have enrolled into Workspace ONE UEM using Launcher.
    Workspace ONE Launcher Version If this setting is enabled, manually choose the version you want to deploy from the drop-down menu. Select Upload to add a new Launcher version to be seeded into the environment. Once uploaded, the Workspace ONE Launcher APK shows in the dropdown so you can select it immediately.
  3. Select Save.

Workspace ONE Launcher Status

The Device Details page in the console displays the status of Workspace ONE Launcher on a device which helps you quickly and easily view and check the Launcher status on multiple devices.

When the Workspace ONE Launcher is pushed to devices under a standard Android deployment, the Launcher is set as the default with no additional steps required from the user. For Android (Legacy), most OEMs will push the Launcher automatically with the help of the signed service such as the Platform OEM Service (POEM.

The Launcher status only displays when the following criteria is met:

  • User is multi-user staging user
  • Launcher payload is assigned to the device through Profiles or Products.

The status will show as follows:

Status Description
Launcher is the Home App Workspace ONE LauncherWorkspace ONE Launcher is set at the default launcher for the devices.
Launcher is not set as the home app or is not installed This status indicates the profile push failed, did not install, or is not set as the default launcher on the selected device.If Launcher fails, you can check the network requirements for CDN to make sure it is up to date.

Apps for Workspace ONE Launcher

Workspace ONE UEM classifies applications as internal, public, and miscellaneous and you upload applications depending on the type.

Public and internal apps are pulled from your managed apps list from Apps & Books menu in the Workspace ONE UEM console. These apps are not whitelisted through Miscellaneous apps. Miscellaneous apps are only used for native device apps. You will need the Application Name and Application ID to whitelist miscellaneous apps.

Note: When deploying Workspace ONE Launcher with Android for Work, make sure apps are approved for Android.

Approve Applications for Android

Approve applications for integration so that you can upload them to the Workspace ONE UEM console.

  1. Navigate to Google Play for Work, https://play.google.com/work.

  2. Login to the site using an Enterprise account for Google Play for Work.

  3. Search for applications you want to add to the integration and select the Approve option.

  4. View the permissions for the applications and follow the prompts to confirm approval. Check to make sure the application has been imported after approval.

Bookmarks

Bookmarks provide users a simple way to access a URL directly from the Workspace ONE Launcher home screen. The end-user sees the bookmark icon and title similar to any other app on the Launcher home screen. When a user taps on a bookmark icon, Launcher navigates to the specified URL.

In addition to navigating to any webpage, you can use these icons to connect to internal content repositories or login screens without having to open a browser and type out a long URL.

Adding bookmarks differ based on the enrollment method of your device fleet.

How to Add Bookmarks for Android

You can add bookmarks for through Web Links in the UEM console. To add bookmarks:

  1. Navigate to Resources > Apps > Native > Public > Add Application and select Android from the Platform field.
  2. Select Next. The Google Play store appears.
  3. Once the Google Play store opens, add a web app by using the plus sign in the bottom right.
  4. Complete the app details, select Next, then click on the icon for the web app you just created.
  5. Assign the web app as you would any other native application.
  6. To add it to the Launcher screen, navigate to the Native tab in the Launcher configuration screen and drag this icon to the home screen.

Note: The native web app is only accessible through Google Chrome so be sure to add Google Chrome to the home screen or as a hidden app.

Template Mode Settings

Template Mode is the fully customizable mode of Workspace ONE Launcher. You can add apps, images, text, and other layout settings to customize a device locked down in kiosk mode with Template Mode. Common use cases are hospital waiting rooms, cabs, restaurants, and filing forms.

Template Mode Settings- Basic Properties

Setting Description
Size Drag the borders of the widget to adjust size of the icon.
Position Move the widget around the canvas to adjust the placement on the template.

Template Mode Settings - App Selection

Setting Description
Filter App List Search for Public, Internal, or Miscellaneous apps to add to the Launcher profile. For Public and Internal apps, select the desired apps that appear in the filtered list. These apps are pulled from your managed apps list from Apps & Books menu in the Workspace ONE UEM console . The Public and Internal apps are not whitelisted through Miscellaneous apps. Miscellaneous apps are only used for native device apps.
To add Miscellaneous apps Select Add an App and enter the Application Name and Application ID under the Miscellaneous option. Select the app to add it to the Launcher preview

Template Mode Settings - Text Properties

Setting Description
Text Enter the text display. The default text displays as Label View.
Text Color Change the text color by selecting the color icons and selecting the desired color.
Background Color Change the background color by selecting the color icon and selecting the desired color.
Text Position Align the text in the desired area by selecting the circle from the box.
Font Weight Select Bold or Normal.
Underline Select Yes or No to underline the text.
Font Style Select Normal or Italic.
Font Size Move the bar to determine the size of the text.

Template Mode Settings - Background Properties

Setting Description
Background Image Select Upload to load an image file from your desktop.
Background Image Size Select Fit To Wrapper, Keep Original, or Keep Aspect Ratio.
Aspect Ratio Size Move the bar to determine the aspect ratio. This option only applies if you have selected to Keep Aspect Ratio from the Background Image Size field.
Background Image Position Align the app in the desired area by selecting the circle from the box.

Template Mode Settings - App Icon Properties

Setting Description
App Image Size Select Fit To Wrapper, Keep Original, or Keep Aspect Ratio.
App Aspect Ratio Move the bar to determine the aspect ratio. This option only applies if you have selected to Keep Aspect Ratio from the App Icon Size field.
App Icon Position Align the app in the desired area by selecting the circle from the box.

Administrative Passcode

The administrative passcode allows users to access the device menu to add applications or to exit from the Workspace ONE Launcher mode. The passcode is required to perform all actions in Admin Mode from the device.

The Preference tab from each app mode allows you to establish the passcode. The Persist Admin Passcode If Kiosk Profile is Removed From Device check box prompts the user for the admin passcode if they are attempting to remove the Launcher profile from their device.

If someone tries to use the Exit Launcher setting from the device and enters the Administrative Passcode incorrectly, the option disappears after 10 unsuccessful attempts, you can restart the device and the option reappears.

There are two use cases for this option:

  • Remove Profile – Removes the Workspace ONE Launcher profile from the device. This option restricts users from using any launcher apps and the device will be locked down and display a standard screen saver
  • Check In/Check Out – Displays the Check Out credentials page when a user checks in a device after use. The user can access device side functions but not Launcher apps or settings.
check-circle-line exclamation-circle-line close-line
Scroll to top icon