Think of products as an ordered installation of device profiles, applications, and files/actions to be either published to the relay server or pushed to devices based on the conditions you create. Products are the main feature of the Product Provisioning system in Workspace ONE UEM.

Product Basics

Products are made of individual components which include Hub/Agent Packages, Applications, Conditions, Event Actions, File Servers, Files/Actions, and Profiles. Not every Product has each of these types of components. No matter how many or how few components your product has, each individual component must be created BEFORE you can make and provision a product.

Product Push to Device

After products are created and activated, they can be pushed to the device based on conditions you define. Conditions determine when a product is downloaded and when it is installed. Content in products is pushed to devices through optional relay servers or content delivery networks (CDN). Applications (Android only) provisioned by way of products can be optionally run through a tunnel.

Products are pushed to devices by way of smart group assignments. These groups control which devices get which product based on how the group is created, including software qualifiers like build version, currently installed apps, and hardware qualifiers like model number. You can also use Assignment Rules to target products to devices.

Note: In addition, you can ensure the product you provision from the console or from an API call is the exact same product that gets received by the device. This product verification is built into the provisioning process. If the product status is Compliant, then the product on the device matches the product provisioned. If validation discovers a mismatch, the console pushes the content to the device again to ensure compliance between the product and the device. In this way, the product ensures that your devices remain up-to-date.

Product List View

Navigate to Devices > Provisioning > Product List View and see a full listing of all products in your environment.

You can download an XLSX or CSV (comma-separated values) file of the entire Product List View. You can then view and analyze this file with MS Excel. Select the Export button and choose a download location.

Publish Product to Relay Server

You can publish products to the relay server even if there are no devices in the organization group (OG) associated with it. Publishing content directly to the relay server is ideal for when you have a complex product and you want to stage the server before device enrollment.

  1. Navigate to Groups & Settings > All Settings > Admin > Product Provisioning and select the Enable slider for Queue Contents on Relay Servers without Assigned Devices.
  2. Move into the appropriate OG that is associated with the relay server onto which you intend to publish the product.
  3. Navigate to Devices > Provisioning > Product List View and select the product you want to publish to the relay server. Do this by selecting the radio button above the edit icon.

  4. Select the Publish on Relay Servers button. The Organization Group screen displays with a drop-down menu. The drop-down menu contains a listing of all child OGs and their parent, which you are currently in based on the move you made in step 2.
  5. Select the specific OG which you intend to be the enrollment OG for devices. These devices are the future recipient of the product you are staging the server with.
  6. Select the Publish button to publish the product to the relay server. If you select the parent OG in step 5, then any device that enrolls in any of its child OGs will receive this product upon enrollment. If you want to select individual child OGs, you must repeat steps 4 through 6 for each OG.

Active and inactive products remain on the relay server. Active products are pushed immediately to devices once they enroll in the OG selected in step 5.

You can check the relay server file listing for the product. See View Remote Files on Relay Server.

Prioritize Your Product With Expedited Deployment

You can give priority to selected products while uploading them to relay servers ahead of other products. This option moves these products to the "front of the line" when deploying to devices, ahead of other products, making it ideal for mission critical content.

Expedited Role Permission Required

Your administrator account must have a role assigned that includes the resource / permission called Expedited Provisioning Policy Edit.

For more information about applying this permission to a role and adding to or editing a role in an admin account, see View or Edit the Resources of an Admin Role and Assign a Role or Edit the Role Loadout of an Admin.

Expedited Product List View

You can identify expedited products in the Products List View by looking for the tag in the listing.

Product Push Automatic Retry

In the product provisioning system of Workspace ONE UEM, when a provisioned product's Last Job Status is "Failed" on a device for whatever reason, the product push may be automatically retried up to three times per device.

This feature helps to minimize the amount of force reprocessing you must request. Enable this feature when you make a new product by navigating to Devices > Provisioning > Product List View and select the Add Product button followed by the platform selection. The Auto Retry check box is in the Deployment tab.

You can monitor for product push failures by navigating to Devices > Provisioning > Product Dashboard.

Automatic Retry Trigger

The automatic retry trigger audits each product job by making a rolling calculation of the product push failure rate. If the amount of failed product pushes is 5% or less, then an automatic retry is triggered. At this stage, individual devices are sampled and if the auto retry fails again, then another retry is attempted. This retry happens a maximum of three times per device.

If the amount of failed pushes is greater than 5% (or the rolling calculation increases to greater than 5%), then automatic retry is not triggered or the retry stops.

Manual Force Reprocess

Outside of the automatic retry flow, you can perform a manual Force Reprocess for a single device, multiple devices, or all devices for which the product is assigned.

Perform a manual Force Reprocess on a single device by taking the following steps.

  1. Navigate to Devices > List View, locate and enter the device's Details View by selecting the device from the listing.
  2. Select More > Products.
  3. Select the radio button of product you want to reprocess.
  4. Select the Force Reprocess button.

For details on how to request a Force Reprocess for multiple devices or the entire set of assigned devices for the product, see Products List View.

Product Verification

Workspace ONE UEM lets you ensure the product you provision from the console or from an API call is the exact same product that gets received by the device. This product verification is built into the product provisioning process.

Verification happens on the device Hub side but both the device end user and the administrator on the console side is made aware of the product's status.

You can review each product status by navigating to Devices > Provisioning > Products List View. The policy engine re-evaluates this compliance status whenever the device reports a change in the state of the applications, profiles, and other content on the device.

Product Persistence, Android, and WinRugg

Workspace ONE UEM lets you direct profiles, files-actions, and applications to remain on a device even after an enterprise reset. Content marked to persist is reinstalled after 1) an enterprise reset, 2) the Workspace ONE Intelligent Hub installs, and 3) the device restarts.

The help desk benefits the most from Product Persistence since it reinstalls required products and applications even after an enterprise reset.

Supported Devices

  • Product Persistence for Windows Rugged only applies to Motorola, Honeywell, Psion, Pideon, and Intermec devices running Windows Mobile.
  • Product Persistence for Android applies to the following.

How Persistence Works

  • A device must contain a staging configuration so that the Workspace ONE Intelligent Hub and enrollment reinstall following the enterprise reset. Staging configurations persist on a device.
  • Set to persist any profiles, files-actions, or applications that you want to remain on the device after the enterprise reset.
  • The device resets when the Enterprise Reset command is sent (see Product Management). After resetting, the restore process begins.
  • The Workspace ONE Intelligent Hub for the device reinstalls during the restore process.
  • After the Workspace ONE Intelligent Hub is installed, any persisted profiles, such as Wi-Fi, reinstall.
  • Any persisted files-actions or applications are reinstalled.