You might encounter access denied error if the device details are not present on the Tunnel server or when the device is non-compliant.


  1. Open the Workspace ONE Intelligent Hub and verify the complaince status.
  2. Navigate to the Device detail page for the affected device and verify the device complaince status.
  3. From the /opt/vmware/tunnel/vpnd directory, run ./vpnreport whitelist --udid=<Device_udid>.
    In the result xml, the ComplianceStatusId must be 3 or 5 for the affected device UUID.
    Note: The connection between the Tunnel server and the API server connection must be successful to achieve the expected result.