Before enrolling your Windows Desktop (Windows 10) devices with Workspace ONE UEM, your end users must meet the listed requirements and configurations or enrollment does not work.

  • Active Environment – Your active Workspace ONE UEM environment and your access to the Workspace ONE UEM console.
  • App Center API URLs – These URLs are required to allow Workspace ONE Intelligent Hub for Windows to provide crash information to the Microsoft Store. Trust the listed URLs in your firewall policies.
    • api.appcenter.ms
    • api.mobile.azure.com
  • Appropriate Admin Permissions – A type of permission that allows you to create profiles, determine policies, and manage devices within the Workspace ONE UEM console.
  • PowerShell Execution - Workspace ONE UEM management of Windows Desktops devices uses PowerShell for installation and operational changes through the Workspace ONE Intelligent Hub.
  • Enrollment URL – This URL is unique to your enrollment environment and takes you directly to the enrollment screen. For example, mdm.example.com.
  • Group ID – This Group ID associates your device with your corporate role and is defined in the Workspace ONE UEM console.
  • Device Root Certificate - You must configure the Device Root Certificate in the System settings before enrolling devices. To configure the certificate, navigate to Groups & Settings > All Settings > System > Advanced > Device Root Certificate.
Important: If your enrollment server is behind a proxy, you must configure the Windows service WINHTTP to be proxy-aware when configuring your network settings.