Geofence Areas

Workspace ONE UEM enables you to define your profile with a Geofencing Area, which limits the use of the device to specific areas. You can think of a geofence area as a virtual perimeter for a real-world geographic area.

For example, a geofence area with a 1-mile radius can apply to your office, while a much larger geofence area can apply to an entire state. Once you have defined a geofence area you can apply it to profiles, SDK applications, and Workspace ONE UEM apps.

  • Enabling a Geofence Area is a two-step process.

    1. Add a Geofencing Area.
    2. Apply a Geofence to a Profile.
  • Geofencing is available for Android and iOS devices.

  • Remember that while Geofencing combines with another payload to enable security profiles based on location, consider having only one payload per profile.

For more information about how Workspace ONE UEM tracks GPS location, see the following VMware Knowledge Base article:

Add Geofencing Area

You must define a Geofencing area before you can apply one to a device.

This screenshot shows the Devices & Users, Advanced, Area System Setting page, which is where you go to define a geofence.

  1. Access the Area settings page by navigating to Resources > Profiles & Baselines > Settings > Areas.

    Result: System Settings displays.

  2. Select the Geofencing Area button.

  3. Enter an Address and the Radius of the geofence in kilometers or miles.

    You can double-click any area on the map to set the central location.

  4. Select Click to Search to send the entered address as a search parameter to Bing maps. If the search is successful, the map view updates to display the entered location with the address as the epicenter of the geofence.

    Note: Integration with Bing maps requires that “insecure content” is loaded on this page. If a location search does not load as expected, you might need to allow “Show all Content” for your browser.

  5. Enter the Area Name (how it appears in the Workspace ONE UEM console) and select Save.

What to do next: Next, you must apply a geofence to a profile.

Apply a Geofence to a Profile

Once you have added a Geofencing area, you can apply it to a profile and combine it with other payloads to create more robust profiles.

If a user manually deactivates location services on their iOS device, Workspace ONE UEM can no longer collect location updates. Workspace ONE UEM considers the device to be in the location where services were deactivated.

This screenshot shows the Profiles list view in the Resources, Profiles & Baselines, where you go to select an existing device profile to assign a geofence.

  1. Navigate to Resources > Profiles & Baselines > Profiles and locate the profile you want to apply a geofence to.
  2. Select the Edit pencil icon (The edit icon is in the shape of a pencil.) of the profile.

    This screenshot shows the Profiles Edit screen, which enables you to assign a geofence to an existing device profile.

  3. Select Install only on devices inside selected areas on the General tab. If this check box is deactivated, select the Add Version button. Making a new version means republishing the profile.

    An Assigned Geofence Areas box displays. If no Geofence Area has been defined, the menu directs you back to the Geofence Area creation menu.

  4. Enter one or multiple Geofencing areas to this profile.

  5. Configure a payload such as Passcode, Restrictions, or Wi-Fi that you want to apply only while devices are inside the selected Geofencing areas.
  6. Select Save & Publish.

For example, you can define geofence areas around each of your offices. Then add a Restrictions payload that disallows access to the Game Center, multiplayer gaming, YouTube content, and other settings. Once activated, employees of the organization group to whom the profile is applied no longer have access to these functions while in the office.

Geofencing Support on iOS Devices

Geofencing for apps only works on iOS devices that have Location Services running. In order for location services to function, the device must be connected to either a cellular network or a Wi-Fi hotspot. Otherwise, the device must have integrated GPS capabilities.

For Wi-Fi only devices, GPS data is reported when the device is on, unlocked, and the Workspace ONE Intelligent Hub is open and being used. For cellular devices, GPS data is reported when the device changes cell towers.

Devices in an “airplane mode” result in location services (and therefore Geofencing) being deactivated.

Device Wi-Fi Cellular Network Built-in GPS
iPad Wi-Fi + 3G/4G
iPad Wi-Fi
iPod Touch

The following requirements must all be met for the GPS location to be updated.

  • The device must have the Workspace ONE Intelligent Hub running.
  • Privacy settings must allow GPS location data to be collected (Groups & Settings > All Settings > Devices & Users > General > Privacy).
  • The settings for Workspace ONE Intelligent Hub for Apple iOS must enable “Collect Location Data” (Groups & Settings > All Settings > Devices & Users > Apple > Apple iOS > Hub Settings).

    Set the Workspace ONE Intelligent Hub SDK settings to the Default SDK settings instead of “None”.


iBeacon is a bluetooth-based proximity sensing protocol developed by Apple. As such, it is exclusive to certain Apple products.

iBeacon is specific to iOS and is used to manage location awareness. For more information, see Apple iBeacon Overview.

Parent topic: Device Profiles

check-circle-line exclamation-circle-line close-line
Scroll to top icon