Before you begin installing VMware Tunnel, you have to ensure that the API and AWCM are installed correctly, running, and communicating with the Workspace ONE UEM without any errors. Read through the following topic to configure the AWCM server.

Important:  If you are an on-premises customer, do not configure VMware Tunnel at the Global organization group level. Configure VMware Tunnel at the Company level or Customer type organization group. The REST API key can only be generated at a Customer type organization group.


  1. Navigate to Groups & Settings > All Settings > System > Advanced > Site URLs in the Workspace ONE UEM console.
  2. Validate the following URLs in Site URLs.
    Setting Description

    Enter in the format of "https://<url>/api".

    SaaS customers must contact Workspace ONE UEM support to get their REST API URL.

    AWCM Server External URL

    Enter in the format of "" and do not include a protocol such as https.

    AWCM Service Internal URL

    Enter in the format of "".

    For on-premises customers, the default port for AWCM is 2001. For SaaS customers, AWCM and API use port 443.

  3. Select Save.
  4. Navigate to Groups & Settings > All Settings > System > Advanced > API > REST API and select the Override radio button.
  5. Ensure that the Enable API Access check box is selected and an API Key is displayed in the text box.
  6. Select Save.