With Self-Registration for Workspace ONE Drop Ship Provisioning (Online), you can register your Windows devices in Workspace ONE UEM instead of having your Windows device manufacturer (OEM) register them for you. You can use this process to test the Workspace ONE Drop Ship Provisioning (Online) process with a single device to ensure a desired outcome. Workspace ONE Drop Ship Provisioning (Online) is supported for SaaS customers only.

What is Self-Registration for Workspace ONE Drop Ship Provisioning (Online)?

In the current Workspace ONE Drop Ship Provisioning (Online) process, you work with your OEM to provision your Windows devices. We've now updated the process so that you can register and provision your own Windows devices without your OEM.

To self-provision using Workspace ONE Drop Ship Provisioning (Online), you must first stage your windows devices with a provisioning bundle, and then register the device into the Workspace ONE OEM Provisioning Service from the Workspace ONE UEM console. You must complete both these tasks before powering on the device to launch the zero-touch provisioning process.

Requirements

Before you can configure Workspace ONE Drop Ship Provisioning (Online) with self-registration, you must meet the following requirements.
  • Tasks required for the admin.
    • Complete the console-side tasks to register devices in the Workspace ONE UEM console.
    • Use the Workspace ONE Intelligent Hub for Windows 20.10 or later.
    • From the UEM console, navigate to Groups & Settings > All Settings > Devices & Users > Windows > Windows Desktop > Intelligent Hub Application.
      • Publish Intelligent Hub
        • Check Publish Workspace ONE Intelligent Hub for “Unknown or has not been set” as well as any other Device Ownership Types in use by the OG.
      • Configure Intelligent to Update automatically
        • Check Intelligent Hub Automatic Updates.
    • Configure Software Distribution in the organization group where your Workspace ONE Drop Ship Provisioning (Online) settings reside. For details about this system, access Software Distribution of Win32 Applications.
    • Use Workspace ONE UEM 2210 or later.
    • Workspace ONE Drop Ship Provisioning (Online) does not support On-Demand or User context applications. Ensure your app assignments are in the Device context, and are set to Automatic deployment.
  • Tasks and packages required for the device.
Note: At this time, Drop Ship Provisioning (Online) is only supported for workgroup or on-premises domain join flows.

Console-side: create a tag in the Workspace ONE UEM console.

The Workspace ONE Drop Ship Provisioning (Online) system uses this tag to match your Workspace ONE UEM configurations with your registered devices. You can select the Create Tags card on the Drop Ship Provisioning page to start this process. Find the card located at Devices > Lifecycle > Drop Ship Provisioning.
  1. Select the applicable organization group.
  2. Go to Groups & Settings > All Settings > Devices & Users > Advanced > Tags and select Create Tag.
  3. Enter a name for the tag. You can use any name you want. Consider using a name that identifies the business unit that uses these provisioned devices. For example, enter the name RnD for the research and development unit.
  4. Save your tag.

Console-side: create a smart group in the Workspace ONE UEM console and assign the tag to it.

Workspace ONE UEM uses the tag to match your configurations to the devices in the smart group. You can select the Create Smart Groups card on the Drop Ship Provisioning page to start this process. Find the card located at Devices > Lifecycle > Drop Ship Provisioning.
  1. Ensure you are in the right organization group.
  2. Go to Groups & Settings > Groups > Assignment Groups and select Add Smart Group.
  3. Enter a name for the smart group and use the Criteria type.
  4. Select the Tag section and enter the tag you previously created.
  5. Save your smart group.

Console-side: configure the log in experience in the Workspace ONE UEM console for end users.

To create local accounts for access, create a local administrator account using a Custom Settings profile and using Microsoft's Accounts CSP. For access to the SyncML for this profile, see VMware Policy Builder.

If you have an on-premises domain, you can join your devices to the domain and enable users to login with their Active Directory credentials. Find information on domain join through Workspace ONE UEM at How Do You Deploy Domain Join Configurations for Windows Desktop?.

Console-side: assign profiles and apps to the Workspace ONE Drop Ship Provisioning (Online) smart group in the Workspace ONE UEM console.

Configure or edit profiles and assign them to the provisioning smart group you previously created. Also, publish apps to applicable smart groups. Workspace ONE Drop Ship Provisioning (Online) does not support On-Demand or User context applications. Ensure your app assignments are in the Device context, and are set to Automatic deployment.

Console-side: register devices in the Workspace ONE UEM console.

You can register your devices with the Workspace ONE OEM Provisioning Service using the tag previously created (optional), your organization groups (OGs), and your device serial numbers. The listed process outlines the menu items you see when you register the first time.
  1. Enable Workspace ONE Drop Ship Provisioning (Online).
    1. Ensure you are in the correct organization group.
    2. Go to Devices > Lifecycle > Drop Ship Provisioning.
    3. Select Enable Drop Ship Provisioning.
    4. As an option, you can add child OGs in the Drop Ship Provisioning page. Go to the Enable Child Organization Groups menu item and select child groups where you want to register devices.
  2. Enter Windows device information for registration.
    1. Go to Devices > Lifecycle > Drop Ship Provisioning.
    2. Select Add Device.
    3. Complete the menu options in the Add Drop Ship Device page. Most of the menu items are optional except for the Serial Number menu item. You must enter this string. Although optional, you can select the tag you created previously in the Tag menu item.

See your device in the Drop Ship Provisioning list view. The page displays the Sync Status for the device.

Console side: sync device records in the Workspace ONE UEM console, either manually or wait for the scheduler.

Sync your device records with the Workspace ONE OEM Provisioning Service. You can wait for the scheduler job to sync your registered device records in the console or you can initiate a sync. Additions or changes to the Drop Ship Provisioning page must sync with the Workspace ONE OEM Provisioning Service to display in the console.
  1. Ensure you are in the correct organization group.
  2. Go to Devices > Lifecycle > Drop Ship Provisioning.
  3. Select Sync and refresh your browser to refresh the Sync Status column for the devices in the list view.
Your registered devices display on the Drop Ship Provisioning page.

Device-side: stage your devices for provisioning.

Prepare your Windows devices for self-registration for Workspace ONE Drop Ship Provisioning (Online). You can get the bundle from My Workspace One.
  1. Download a bundle that contains the listed files.
    • VMware Workspace ONE Provisioning Tool
    • Generic PPKG
    • Generic answer file (unattend.xml)
    • RunPPKGandXML.bat file that contains a one line script to orchestrate the staging process
    • License file
  2. Start the device in Audit mode and extract the tool, the PPKG, the unattend file, and the script file to the device.
  3. Double-click the RunPPKGandXML.bat file.
    • The VMware Workspace ONE Provisioning Tool staging process starts zero-touch provisioning.
    • After staging completes, the device automatically runs Sysprep and powers down, as it prepares to launch the zero-touch process.
  4. Initiate the zero-touch provisioning process by starting the device after the device completes staging and its registration steps.
  5. Results: After the process completes, the device displays a green screen that reads Workspace One Provisioning complete.

Add device tags in bulk.

You can add a tag to devices in bulk using the Drop Ship Provisioning list view.
Note: You cannot change or remove tags in bulk. If you want to change a tag, you must perform this task for each device.
  1. Ensure you are in the correct organization group.
  2. Go to Devices > Lifecycle > Drop Ship Provisioning.
  3. Select the check box for all devices for which you want to add the tag.
  4. Select the Tag button.
  5. Select the desired tag from the drop-down list.
  6. Wait for the sync scheduler job to sync your changes with the Workspace ONE OEM Provisioning Service or use the Sync button to initiate the sync. For updates to display, additions or changes to the Drop Ship Provisioning page must sync with the Workspace ONE OEM Provisioning Service.