Archives

6482146642362368

Switching from ACC to VMware IDM Connector made easy!

If you have been integrating VMware IDM with Active Directory using AirWatch Cloud Connector (ACC), and need to switch to IDM connector to take advantage of various features such as MFA integration, Horizon & Citrix desktops/apps integration and others, then we have made it easier to switch without having to reconfigure application entitlements.

If you have been holding off from deploying the IDM connector because you don’t havevSphere license to deploy the virtual appliance, then there’s good news. IDM connector is now available on the Windows platform and integrated with the ACC installer. Read this blog post for details.

Using ACC Switch to Using IDM connector

Readdetailed description below on how to make this switchby Vishal Gupta, Product Managerwho drove this feature.

How to switch?

We believe switching should as easy as flipping a switch!

And that is why we have introduced an easy step-by-step few click process to switch from ACC to IDM connector. New &#rsquo;Convert&#rdquo; feature will eliminate significant downtime.

Watch this video for step-by-step how-to instructions.

After the conversion is complete ensure to disablethe sync settings from AirWatch console.

The post Switching from ACC to VMware IDM Connector made easy! appeared first on VMware End-User Computing Blog.

Read more..

Switching from ACC to VMware IDM Connector made easy!

If you have been integrating VMware IDM with Active Directory using AirWatch Cloud Connector (ACC), and need to switch to IDM connector to take advantage of various features such as MFA integration, Horizon & Citrix desktops/apps integration and others, then we have made it easier to switch without having to reconfigure application entitlements.

If you have been holding off from deploying the IDM connector because you don’t havevSphere license to deploy the virtual appliance, then there’s good news. IDM connector is now available on the Windows platform and integrated with the ACC installer. Read this blog post for details.

Using ACC Switch to Using IDM connector

Readdetailed description below on how to make this switchby Vishal Gupta, Product Managerwho drove this feature.

How to switch?

We believe switching should as easy as flipping a switch!

And that is why we have introduced an easy step-by-step few click process to switch from ACC to IDM connector. New &#rsquo;Convert&#rdquo; feature will eliminate significant downtime.

Watch this video for step-by-step how-to instructions.

After the conversion is complete ensure to disablethe sync settings from AirWatch console.

The post Switching from ACC to VMware IDM Connector made easy! appeared first on VMware End-User Computing Blog.

Read more..

Introducing VMware Enterprise Systems Connector

You asked for it, and we delivered. Happy to announce availability ofVMware Enterprise Systems Connector (VESC), a unified installer to install bothVMware IDM connector and AirWatch Cloud Connector (ACC)on the Windows platform starting with AirWatch 9.1 release. You can download the VESC installer from the AirWatch console.

Here’s detailed description onVMware Enterprise Systems Connector by Andrew Hornsby, Product Manager responsible for this component.

Overview

In AirWatch 9.1, the AirWatch Cloud Connector (ACC) and VMware Identity Manager connector have been included as components in a new Windows installer called the VMware Enterprise Systems Connector. During the installation process, you will be able to choose which components to install, as shown below.

With the VMware Identity Manager connector now available on Windows, vSphere license and an additional server are no longer required to connect your identity manager tenant to your on-premises enterprise systems like Active Directory. Prior to the release of the VMware Enterprise Systems connector, the identity manager component was only available as a Linux virtual appliance.

Both components are recommended for anyone upgrading to Workspace ONE, and are necessary for environments utilizing identity centric features not supported by the &#rsquo;use AirWatch to authenticate users&#rdquo; option in the Workspace ONE Getting Started Wizard. These use cases include Horizon and Citrix integration, RSA Secure ID integration, Integrated Windows authentication, and complex multi-domain and multi-forest Active Directory. The &#rsquo;use AirWatch for authentication&#rdquo; option, sometimes referred to as VMware Identity Manager &#rsquo;ACC integration&#rdquo; is still supported, but we encourage utilization of the full functionality of the Enterprise Systems Connector for the best compatibility and user experience. If you have already deployed and are utilizing Workspace ONE, but now want to start using the identity component of the VMware Enterprise Systems connector, you will be able to migrate without removing your directory or user entitlements.

Deployment Model:

Both the VMware IDM Connector and ACC components offer outbound only connections to their respective services. They can also coexist on the same Windows server, allowing you to effectively upgrade your existing ACC instances to the full VMware Enterprise Systems Connector. The resulting deployment model is shown below.

Automatic Upgrades:

As long as .NET 4.6.2 has been installed on the server, automatic update for existing ACC deployments will continue without any change in existing functionality. However, if you wish to install the VMware IDM Connector component offered by the VMware Enterprise Systems Connector, you must download and run the installer. Automatic update is not yet supported for the VMware IDM Connector, so it must be manually updated by downloading and running the installer for each new version.

Availability:

VMware Enterprise Systems Connector is available with AirWatch 9.1. The installer is available in the AirWatch Console in Enterprise Integration settings, the same location where the ACC Installer was previously available, as well as within the Workspace ONE Getting Started wizard.

Documentation:

With the release of AirWatch 9.1, existing ACC documentation is updated to reflect the updated branding and additional component installation and configuration. This documentation is available on myAirWatch here.

The post Introducing VMware Enterprise Systems Connector appeared first on VMware End-User Computing Blog.

Read more..

Welcome to VMware: A New Hire’s True Story of Lost Luggage, Bug Registers & Workspace ONE

My first week at VMware was daunting: flying from Ireland to our head office in Palo Alto, losing my luggage and credit cards not working. On my first day, I ran around like a headless chicken trying to meet with my new team with nothing but worn clothes and trainers. In all, it was an absolute nightmare. Sometimes life throws lemons at you with such energy that it&#rsquo;s hard to do anything useful.

Arriving &#rsquo;relatively&#rdquo; on time for my first day, my next hurdle was onboarding with VMware IT. Having worked in the field for the last decade and consulting with many customers, I know first-hand just how unproductive and frustrating first days can be. Despite being eager to please and trying to hit the ground running, most workers find that IT is not ready for them. With all the personal panic that morning, the last thing I wanted to do was perform the ever-familiar &#rsquo;first day&#rdquo; dance that us consultants are all too familiar with.

You probably will not be surprised that at VMware, we drink our own Champaign when it comes to end-user computing (EUC) technologies. For the first time, I experienced VMware Workspace ONE as a user, and I was productive within minutes. In only a few clicks, my phone, personal iPad and work laptop were registered and enabled with Single Sign-On (SSO) to company email, data, Office 365, apps and intranet. I quickly checked my work email and took a few notes in Microsoft OneNote. By lunch, I reviewed roadmaps and bug registers. By the end of the day, I was sending IMs and scheduling follow-up meetings with my new colleagues (who are awesome, by the way).

Workspace ONE gave me a single identity and a familiar look and feel. Moreover, I had every single resource I needed in one place on every device (both corporate and BYO)—securely and efficiently. I did not have 20 passwords to remember or lists of internal URLs bookmarked on my local device. I was cloud-enabled and ready to charge. As a consultant and customer in my past life, this onboarding process is everything my customers asked me for. It amazed me to see it working so fluidly at VMware. My first day in VMware was a mess of personal stress and pressure, but for once, not because of IT or my employer.

[Related: Simplifying App Access & Management with Workspace ONE]

As I am a remote worker and global business traveller, Workspace ONE continues to bridge the gap to my corporate network, allowing me true freedom to stay productive &#rsquo;anywhere on any device.&#rdquo; Historically, I am cynical of this claim, having walked this walk before with other vendors and having my hands burnt. Workspace ONE finally showed me this can be achieved today. I can tell you first hand that it can be done, and Workspace ONE can help you achieve it—today.

We welcome our competitors focus on this market. It really validates what we achieved with our digital workspace vision and Workspace ONE. We will welcome them with open arms to the market when they execute on this vision. In the meantime, Workspace ONE will continue to innovate and deliver a unified workspace for you and your workers—today.

Learn more about Workspace ONE here, and see it for yourself in our free hands-on lab.

Because you liked this blog:

  • What Does a Digital Workspace Mean to You?
  • Better Together: Workspace ONE & Office 365
  • New Research: Top 10 Identity & Access Management Challenges

The post Welcome to VMware: A New Hire&#rsquo;s True Story of Lost Luggage, Bug Registers & Workspace ONE appeared first on VMware End-User Computing Blog.

Read more..

[Case Study] Halton Healthcare Modernizes Data Centers & Expands with New Hospital

Award-winning Halton Healthcare operates three community hospitals in the Region of Halton in southern Ontario, Canada. The organization is expanding to meet the needs of the growing area it serves.

Old IT systems could not adequately serve a patient population expected to double by 2031. Building a completely new hospital and expanding other facilities provided opportunities for a fresh start with truly integrated IT systems.

Halton Healthcare chose VMware Horizon, Vblock systems from EMC and technology expertise from VMware partner Teknicor for a virtual desktop infrastructure (VDI) and disaster recovery solution. The organization now has the largest VDI implementation in Canadian healthcare, serving as a model for hospitals across Canada.

&#rsquo;These VMware systems are part of the central nervous system of our hospital sites. Without them, we wouldn&#rsquo;t be able to help enable clinicians to provide the care they do today.&#rdquo;
—Sandy Saggar, Chief Information Officer, Halton Healthcare

Read more about how Halton Healthcare standardized IT across hospital sites in our case study.

Read the case study.

 

Related:

  • American Red Cross Uses VDI for Faster Disaster Relief through VMware Workspace ONE
  • VMware Horizon VDI Powers WCH&#rsquo;s New Hospital of the Future
  • Flushing Bank Locks Down Data with VMware Horizon VDI

The post [Case Study] Halton Healthcare Modernizes Data Centers & Expands with New Hospital appeared first on VMware End-User Computing Blog.

Read more..

Memorial Healthcare Protects Patient Data with a Secure Digital Clinical Workspace

Memorial Healthcare, a top-rated community hospital in Michigan that&#rsquo;s won awards for patient engagement, sees technology as a key to advancing healthcare in its region. Their secure clinical digital workspace allows staff to access the apps and data they need anytime, anywhere. To transform security and protect patient data, Memorial Healthcare deployed VMware NSX, AirWatch and Horizon to secure endpoints and app infrastructure, while streamlining compliance.

Technology ultimately supports the hospital&#rsquo;s mission of helping patients in its region. To aid smaller hospitals that are critical to the area, Memorial Healthcare uses its infrastructure to provide easier access to shared services, including disaster recovery. Having access to secure information on mobile devices and virtual desktops let physicians and staff keep a consistent workflow no matter where they are, in the hospital or in the wider community.

Click here to learn more about how you can empower the digital workspace, such as the secure clinical digital workspace for healthcare, in your company.

More stories you might like:

  • American Red Cross Uses VDI for Faster Disaster Relief
  • Explore Sally Beauty’s Innovative Digital Workspace
  • 3BD/2BA with Security & Simplicity: TCAD Streamlines with Digital Workspace Solutions

The post Memorial Healthcare Protects Patient Data with a Secure Digital Clinical Workspace appeared first on VMware End-User Computing Blog.

Read more..

VMware Horizon FIRST Certified VDI Solution with Dassault Systèmes’ 3DEXPERIENCE Platform

We are excited to announce that VMware Horizon 7 is the first certified VDI solution with Dassault Systèmes&#rsquo; 3DEXPERIENCE Platform R2016x and R2017x. The 3DEXPERIENCE Platform leverages Dassault Systèmes&#rsquo; world-class 3D software applications that transform the way products are designed, produced and supported, including:

  • 3D modeling apps (CATIA 6, SOLIDWORKS, GEOVIA and BIOVIA).
  • Content and simulation Apps (SIMULIA, DELMIA, and 3DVIA).
  • Social and Collaboration apps (ENOVIA and 3DExcite).

 

Horizon is the market-leading desktop and applications virtualization solution, recognized as a leader in virtual client computing by IDC. This certification helps Dassault Systèmes&#rsquo; 3DEXPERIENCE Platform customers take advantage of the flexibility, cost savings and simplified management of Horizon 7 desktop virtualization. With this powerful combination, workers can work anytime, anywhere and on any device. With the hardware-backed GPU from NVIDIA, users have high-performance workstations at their fingertips.

Leading aerospace, automotive, consumer goods and industrial machinery organizations utilize Dassault Systèmes&#rsquo; 3DEXPERIENCE Platform for design and engineering, simulation, 3D design experience, simulation, modeling and collaboration to create delightful customer experiences.

The certified configurationincludes:

  • Dassault Systèmes&#rsquo; 3DEXPERIENCE Platform R2016x and R2017x
  • HPE Apollo 2000 XL190r
  • Horizon and ESXi
  • NVIDIA GRID and Tesla M60

For complete details on the certification, please refer to the Dassault Systèmes press release.

The post VMware Horizon FIRST Certified VDI Solution with Dassault Systèmes&#rsquo; 3DEXPERIENCE Platform appeared first on VMware End-User Computing Blog.

Read more..

VMware AirWatch 101: AirWatch REST APIs

With contributions from:

Hannah Jernigan, Technical Writer, End User Computing Technical Marketing, VMware

Do you ever wish the productivity apps your end-users love had more security features? VMware AirWatch REST APIs can help make this idea a reality by integratingAirWatch REST APIswith existing IT infrastructures and third-party applications. AirWatch API integration extends enterprise mobility management functionality toexternal programs, and is an efficient, cost-effective alternativeto buildingin-house applications.No wonder REST APIsareapillar of the AirWatch Developer’s Toolkit!

This post is most appropriate for the following audiences:

  • Anyone new to VMware AirWatch Enterprise Mobility Management
  • Anyone new to VMware AirWatch REST API capabilities

If you fall into one of these categories, keep reading to learn about:

  • Security features ofAirWatch REST APIs
  • AirWatch REST APIs available for integration
  • Authentication Methods for AirWatch REST APIs
  • Getting Started configurations in the AirWatch Console
If you are already familiar with the topics listed above, and were looking for moretechnical resources, jump straight to the Learn More section and follow the recommended links

AirWatch REST API Security Features

  • Encrypted Communication – REST API calls take place over HTTPS with a certificate signed by a publicly trusted CA.
  • Two-Factor Authentication – Along with the standard headers, API server authentication requires the following headers:
    • Authorization- Authorization header with base 64 encoding of API admin credentials.
    • aw-tenant-code- Header value same as API key randomly generated in the AirWatch Console.
  • Multiple Authentication Options – AirWatch API Admin can authenticate with the API server usingBasic/ NTLM, Directory, orCertificate authentication.
  • ConfigurableAPI Admin Permissions– Default and custom admin roles can restrict the API admin to a limited set of API actions.
  • Advanced On-Premise Settings – On-premises deployments can restrict server throttling and set daily quotas to prevent API overflows and potential service crashes.

AvailableAirWatch REST APIs

Integrate VMware AirWatch’s REST APIs with third party applications, programs, and processes, and take enterprise mobility management beyond the VMware AirWatch solution.

Authentication Methods for AirWatch REST APIs

VMware AirWatch supports multiple ways for Console Admin Users to authenticate into the API server:

Basic Authentication

Authentication into the API server uses a generic username and password. Implementation is simple. However,this authentication model does not integrate with existing corporate user accounts.

Basic Authentication Authorization Header

The authorization header should hold the value in the following example format:

 GET https://host/api/mdm/devices/bulksettings HTTP/1.1 User-Agent: Fiddler aw-tenant-code: 1FC5H4JAAAG5A4SQAMQA Host – host.com Authorization – Basic bW9oYW46bW9oYW4=

Certificate Authentication

Uses a self-signed certificate generated by the AirWatch Console for API Server authentication. AirWatch certificate-basedAPI authentication acceptsincoming requests with CMS signatures and CMSURL authentication schemes.

CMS Signatures Authorization Header

Expects the signature against the message content, and takes the following format.

Authorization:CMS&#rsquo;< Version >< CREDENTIALS >

< Version > information.

< CREDENTIALS > is the Base64 Encoded data of &#rsquo;message content&#rdquo; signed with client certificate using PKCS9 signing.

CMSURL Scheme Authorization Header

Expects the signature against the application path in the URL, and takes the following format.

Authorization:CMSURL&#rsquo;< Version >< CREDENTIALS >

< Version > information.

< CREDENTIALS > is the Base64 Encoded data of &#rsquo;canonical URI resource encoded using UTF-8 format&#rdquo; signed with client certificate using PKCS9 signing.

Directory-Based Authentication

Authentication into the API server uses existing corporate credentials. This method integrates existing corporate accounts from Directory Services withAirWatch user and admin accounts.

Enable AirWatch REST APIs

To enable API access in the AirWatch Console:

  1. Log into the AirWatch Console.
  2. Navigate toGroups & Settings>All Settings>System>Advanced>API>REST API.
  3. Configure the General, Authentication, and the Advanced tab.

a. Configure General tab settings.

  • Enable API Access - SelectEnabled to generate the API authentication key.
  • Add -Select to generate multipletheAPI key for one or multiple servers. Then, configure the related settings.

  • Service – Enter one or multiple service(s) and generate their independent API keys.
  • Account Type – Select the type of the account. To accessthe Mobile Content Management Personal Content APIs, select Enrollment User.
  • Description – Provide ashort description for the service and generated API key.
  • Whitelisted Domains – Specifythedomains where the API key is valid.

b. Configure the Authentication Tab

Enable Basic, Directory, or Certificate based authentication.

c. Configure the Advanced tab.

At the Global Organization Group level, specify default service throttling and daily quota values.

  • Server Throttling -Set the server bandwidth throttling. When server reaches the specified throttling limit, it offloads new requests and not respond to them.
  • Daily Quota -Set the number of API calls to be sent per day.

Configure API Access

After enablingAPIs, configure API access. First, create adedicatedadministrator account for API authentication. Then, select anauthenticationmethod. Finally, provision roles with specific API privileges to the administrator.

  1. Navigate to Accounts > Administrators > List View.
  2. Click Add> Add Admin.
  3. Configure the following tabs:

    a. On the Basic tab, complete the required fields to create a dedicated admin for API access.

    b. Click the Roles tab, and specify the admin role's API authentication permissions.

    c. On the API tab, select the Authentication method from the drop-down menu.

    If configuring certificate authentication, selectCertificates from the Authentication drop-down menu, and enter the same password provided on theBasic tab for Certificate Password.

  4. Select Save to create theAPI Admin Account with defined access permissions.

Summary

Use VMware AirWatch REST APIs as an efficient way to leverage core enterprise mobility management functionality in enterprise servers, programs, and processes. These APIs facilitate custom application development and integration with AirWatch.

Learn More

  • API Help Page - Learn about REST APIs setup and view comprehensive documentation Navigate to https://{apiURL}/api/help and authenticate using API admin credentials.
  • Hands-On Lab- Select Module 5, Introduction to AirWatch REST APIs. Complete the exercises in roughly 30 minutes.
  • VMware AirWatch REST API Guide- Accesstechnical reference material in the manual.

The post VMware AirWatch 101: AirWatch REST APIs appeared first on VMware End-User Computing Blog.

Read more..

This Week’s Top EUC News Will Blow Your Mind

Never miss an announcement. Get top end-user computing (EUC) news in your inbox every Friday. Sign up to the right.

&#rsquo;Microsoft Azure users now have access to genuine desktop as a service solution.&#rdquo;

That&#rsquo;s SiliconANGLE on our huge news this week: We&#rsquo;re delivering VMware Horizon Cloud on Microsoft Azure. By connecting Azure to the Horizon Cloud control plane, our joint customers are empowered with more flexibility to deliver virtual desktops and apps. Get the FAQs here.

&#rsquo;Our customers have their preference of public cloud offerings and should be able to choose the industry leader in desktop and app virtualization regardless of that cloud preference.&#rdquo;
—Dave Grant, VP of Product Marketing for VMware End-User Computing, at VMware Radius

Plus, using Horizon Cloud with on-premises infrastructure? Here&#rsquo;s what&#rsquo;s new for you.

The digital workspace just upped its IQ.

VMware also announced the acquisition of Apteligent this week and the integration of the mobile app intelligence solution into our digital workspace platform. Read the juicy details here.

&#rsquo;The Apteligent platform enables both mobile app developers and IT organizations to analyze mobile application performance in real time, enabling them to understand user behavior to address the issues that matter the most—and directly impact business and revenue.&#rdquo;
—Sumit Dhawan, VMware EUC SVP & GM of Desktop Products & Solutions

Forget stereotypes. We&#rsquo;re all Generation Digital.

Millennials aren&#rsquo;t the only generation demanding mobile technology at work. Employees of all ages recently said mobile tech makes them more productive (60%), more creative (45%) and more satisfied at work (53%). Read more in this new VMware Radius series.

It&#rsquo;s a &#rsquo;privilege&#rdquo; to meet you, VMware User Environment Manager 9.2.

User Environment Manager (UEM) essentially separates a user&#rsquo;s personality from the underlying Windows machine, said Andy Morris, virtualizing their preferences. Version 9.2 offers a cool new trick: User privilege elevation. Here&#rsquo;s what it does.

Plus, watch these six videos for a technical deep dive into UEM 9.2.

And IT lived happily ever after.

User satisfaction is up, and costs are down at Memorial Healthcare after the hospital deployed VMware NSX, VMware AirWatch and Horizon. Hear their digital clinical workspace story.

&#rsquo;I don&#rsquo;t think there&#rsquo;s much within our infrastructure that VMware hasn&#rsquo;t enabled.&#rdquo;
—Thomas Kurtz, Ph. D, VP of Information Services & CIO for Memorial Healthcare

Let&#rsquo;s talk tech.

  • Citrix Synergy, May 23–25 in Orlando (VMware booth 309)
  • VMware SociaLabs—Horizon 7 & AirWatch, May 23 (San Diego), June 6 (Reston) & June 20 (Halifax)
  • Boston Summer VMUG UserCon, June 1
  • Unlocking Mobility with Derived Credentials &AirWatch, June 23 online
  • VMworld 2017, Aug. 27–31 in Vegas

The post This Week&#rsquo;s Top EUC News Will Blow Your Mind appeared first on VMware End-User Computing Blog.

Read more..

Coming Soon: VMware Horizon Virtualization Pack for Skype for Business GA Release

As a follow up to our previous announcement on VMware Horizon with Skype for Business, we are happy to share that we will be releasing the generally available (GA) version of the VMware Horizon Virtualization Pack for Skype for Business next month.

The upcoming release of the Horizon Virtualization Pack will include a GA release of the Horizon Media Engine for Windows clients and a private beta release of the Horizon Media Engine for Linux clients. Additionally, an updated Horizon Media Proxy will be embedded with the Horizon agent as an optional install.

Some highlights of the new virtualization pack include:

  • Point-to-point audio and video calls
  • PSTN calls using the dial-pad
  • Remote connectivity through the Microsoft Edge Server
  • Call-forward, transfer, hold and resume
  • Voicemail integration
  • Music on hold
  • Support for Skype for Business 2015 and 2016 clients (see release notes)
  • Support for Lync Server 2013, Skype for Business 2015 Server and Office365 deployments
  • Support for VMware Blast Extreme and PCoIP
  • Support for persistent and non-persistent desktops
  • Support for Horizon desktops (on premise and cloud)

 

The Horizon Media Engine for Windows clients will be available as an optional install with the Horizon Windows client. For customers interested in testing out the private beta of the Horizon Media Engine for Linux, please email .

Come visit us at Citrix Synergy booth 309 next week to see Horizon + Skype for Business in action.

Because you liked this blog:

  • VMware + Microsoft: Delivering an Even Better Skype for Business Experience
  • The Next Horizon: Introducing Horizon 7.1, Horizon Apps & Horizon Cloud
  • Get Ready for Horizon Cloud on Microsoft Azure

The post Coming Soon: VMware Horizon Virtualization Pack for Skype for Business GA Release appeared first on VMware End-User Computing Blog.

Read more..

Go Que Newsroom

Categories