Omnissa Newsletter 2025 Week 20

Upcoming Omnissa Events

EventLink and descriptionSpeakersDate
EUC TechInsights – Omnissa Connect: Streamlined, Secure Acces to the Omnissa EcosystemThis session introduces the core capabilities of Omnissa Connect, focusing on its robust identity and access management features—including Enterprise Federation, multi-factor authentication (MFA), and single sign-on (SSO)—to ensure secure and efficient administrator access. 👉 Register here: Welcome! You are invited to join a webinar: EUC TechInsights – Omnissa Connect: Streamlined, Secure Acces to the Omnissa Ecosystem. After registering, you will receive a confirmation email about joining the webinar.Anant Baderdinni, Product leader and Technologist3 Jun4 PM
CEST
“Walk This Way” webinar series: DEX for Windows 365We are excited to invite you to our exclusive Solutions webinar series, “Walk This Way” with WWT and Omnissa, where we will explore the latest trends and innovations in Digital Employee Experience (DEX)Apps on Demand, and Horizon. Join us for insightful discussions and expert insights across four engaging sessions.👉 Registere here: Welcome! You are invited to join a webinar: Walk This Way Webinar Series by WWT and Omnissa. After registering, you will receive a confirmation email about joining the webinar.   12 June7 PM – 8 PM CEST
1 PM – 2 PM EDT
10 AM – 11 AM PDT
Technology Roadshow – The Omnissa path to the autonomous workspaceAfter London, Paris, and Frankfurt, the Omnissa Technology Roadshow will stop in Bern and Madrid. Join us for a one-day event where we’ll dive deep into the latest technical advancements of the Omnissa solutions and introduce the Omnissa Platform.👉 Registere here: https://eventregistrations.co.uk/omnissa/technologyroadshow/ 17 June – Bern26 June – Madrid
Omnissa Tech Deep Dive: Bringing VDI goodies to your physical desktops and laptopsWe invite you to a demo-packed session, where you will learn how to bring the benefits of App Volumes and DEM (Dynamic Environment Manager) to your physical Windows devices.This brings the same benefits and features you know from your Horizon VDI environments to your desktops and laptops. You have full control over the application lifecycle, ensuring the best user experience and more!
Omnissa Tech Deep Dive: Bringing VDI goodies to your physical desktops and laptops
Pim Van De Vis, Customer Success Engineer18 June
“Walk This Way” webinar series: Horizon on NutanixWe are excited to invite you to our exclusive Solutions webinar series, “Walk This Way” with WWT and Omnissa, where we will explore the latest trends and innovations in Digital Employee Experience (DEX)Apps on Demand, and Horizon. Join us for insightful discussions and expert insights across four engaging sessions.👉 Registere here: Welcome! You are invited to join a webinar: Walk This Way Webinar Series by WWT and Omnissa. After registering, you will receive a confirmation email about joining the webinar.   17 July7 PM – 8 PM CEST
1 PM – 2 PM EDT
10 AM – 11 AM PDT
Omnissa Tech Deep Dive: Windows device provisioningWhat’s the difference between Drop Ship Online vs. Offline and which to use when?  What’s a PPKG file? This tech deep dive session will clearly explain and demonstrate the behind-the-scenes activities that enable provisioning new Windows devices.
Join our subject matter experts @Jo Harder and @Joshua Spencer for some valuable tech content!
Jo Harder,
Joshua Spencer
23 July5 PM – 6 PM
11 AM – 12 PM
8 AM – 9 AM
Omnissa ONE returns in 2025 SAVE THE DATEOmnissa ONE America
Las Vegas, Cosmopolitan Hotel
Sept 15th – Sept 17th Omnissa ONE Europe
Amsterdam, Maritim Hotel Amsterdam
Oct 7th – Oct 9th Omnissa ONE Asia
Tokyo, ANA InterContinental Hotel 
Nov 17th – Nov 19th 
  

Release Updates:

Omnissa Connect

What’s New in the May 2025 Release

 New Features

  • New Sign-Up Experience
  • System for Cross-domain Identity Management (SCIM) provisioning allows for full user life cycle management at the identity provider (IdP) level.
  • Enterprise Federation now supports SCIM provisioning for IdPs that support it.
  • For details on how to configure SCIM provisioning, see the listed topics.
  • OpenID Connect (OIDC) is an identity layer built on top of the OAuth 2.0 framework. It allows third-party applications to verify the identity of the end-user and to obtain basic user profile information.
  • Enterprise Federation now supports the OIDC authentication protocol.
  • For details on how to configure OIDC for authentication, see the listed topics.

Workspace ONE Boxer 25.04 for Android

New Features

  • (Experimental) Rich Text formatting includes the ability to add links to word selections

Rich text formatting allows users to add links to their emails and signatures with a dialog interface that can be applied to a single word, multiple words, or lines.

  • Health Check Indicators Control Setting
  • Administrators can control the display of health check indicators in the Workspace ONE Boxer interface using an application-level, boolean, KVP HealthCheckIndicators
    By default, the value of the KVP is True.
  • When the KVP value is True, all health indicators are displayed. 
    As a result, end users can monitor system health and performance effectively.
  • When the KVP is set to False, all health indicators are hidden. 
    This option can be used when the health check indicators are not required in the current context for the end users.
  • Control Setting for Blocking External Inline Images
  • Administrators can control the loading of external inline images using an application-level, boolean, KVP PolicyBlockExternalImages. By default, the value of the KVP is false.
  • When the KVP value is False, both internal and external images are loaded.
  • When the KVP value is True, external images are not loaded. Administrators can use this option to enhance end user’s privacy. Internal inline images are not affected.
  • End users can also control the loading of external inline images using a new toggle, Block external images, in the Workspace ONE Boxer Settings > More Mail settings section.
  • When the KVP value is set to False, the toggle is available for end users to turn on or turn off. When the toggle is turned on, external images are not loaded. By default, the toggle is turned off.
  • When the KVP value is set to True, the toggle is always turned on. The toggle is grayed out and cannot be turned off by the end users. As a result, end users have no control on this setting.
  • Quality improvements and crash fixes

Minimum Requirements

Following are the minimum requirements for Workspace ONE Boxer for Android:

  • Android 12 or later
  • Workspace ONE UEM Console 2212 or later

Resolved Issues

  • BINXA-21206 [Email SMIME] Workspace ONE Boxer is unable to open S/MIME signed attachment and fails with the following error Unable to open this document since the file format doesn’t match with the file extension

Known Issues

We have not identified any notable known issues in this release. If you are facing any problems, feel free to reach out to our support team.

Horizon 8 ESB 2312.2 Release

What’s New

Horizon 8 2312.2 is an Extended Service Branch (ESB). Approximately once a year, one Horizon release is designated as an Extended Service Branch (ESB). An ESB is a parallel release branch to the existing Current Releases (CR) of the product. By choosing to deploy an ESB, customers receive periodic service packs (SP) updates, which include cumulative critical bug fixes and security fixes. Most importantly, there are no new features in the SP updates, so customers can rely on a stable Horizon platform for their critical deployments. For more information on the ESB and the Horizon versions that have been designated an ESB, see KB 86477.

Horizon 8 version 2312.2 includes the following new features and enhancements.

  • Horizon HTML Access was renamed to Horizon Web Client in this release.

License Activation

Following Omnissa’s divestiture from Broadcom, this release introduces a new licensing module for term and perpetual licenses. While existing license keys remain supported, we strongly recommend activating Horizon 8 2312.2 with a new Omnissa license if you are using a term or perpetual license. 

  • The new Omnissa Horizon license key is available through the Customer Connect portal. A banner notification will prompt you to upgrade to the new Omnissa license, and you will have 60 days to complete this transition. Failure to update the license keys within this period will result in Horizon Console entering restricted mode.

Omnissa Workspace ONE Tunnel 25.04

New Features

  • Multi-profile support. You can now configure Tunnel with multiple Tunnel profiles. Users now have an in-app option to switch between Tunnel configurations.
  • New Refresh Log option for the Diagnostics window.
  • Admins can now restrict users from disabling Tunnel.
  • Set this restriction by adding the following KVP under the Tunnel Payload, Custom Configuration section.
  • KVP: allow_disabling_tunnel
  • Value: True/ False | Default Value: True. When set to True, users will not be permitted to disable Tunnel through the app.

Minimum Requirements

  • macOS version 12.0 or later
  • Workspace ONE UEM Console 2310 or later

Resolved Issues

We are always working to improve Workspace ONE Tunnel with every release. There are no major bug fixes to report.

No Known Issues

  • PPAT-18976: Block Action not working when client is configured in Multi-Tunnel mode. The client will be blocked on the next Gateway configuration update.

Omnissa Workspace ONE Hub Services

What’s New in the May 2025 Release

Conditional Entitlements Phase 1: Lock Apps based on Access Policy (Preview only)

Access policy rules set by admins in Omnissa Access determine which apps an end user can launch, based on factors such as their network range, device type, or group membership. Currently, all apps are available to the user in the Hub catalog, and when they launch an app that is restricted by Access policy rules, they are denied access during the launch process.

The conditional entitlements enhancement to the Hub catalog improves the user experience by locking (greying out) apps that a user is restricted from launching based on Access policy rules. The user interface only reflects existing restrictions that have been configured in the customer tenant, and does not change any behavior for unrestricted apps.

This is Phase 1 of a two-phase rollout of conditional entitlements. In Phase 2, Hub Services admins will have the option to either display (as locked) restricted apps or hide them entirely from end users.

This feature is limited to the Hub web portal only.

The scope of this feature is limited to only those apps on which Access policies are applicable.

Note: This feature is available in preview environments only. As with all preview releases, certain aspects of this feature might change before it is released for general availability.

End User Rating and Statistics Report for Horizon Cloud Service Next-Gen resources

From Intelligent Hub, end users can now like or dislike (thumbs up or thumbs down) a Horizon Cloud Service Next-Gen app or desktop.

Hub Services admins can now download a consolidated report of all apps and their ratings statistics. The statistics include the number of likes and dislikes for each Horizon Cloud Service Next-Gen app.

Apple Books in iOS Hub

End users can now access Apple books on their iOS Hub app.

Email Recipients and Archive Notifications

Hub Services admins can now save email recipients to an archived notification so that an archived notification can be resent to the same audience without re-entering their email addresses.

Workspace ONE Tunnel for iOS 25.04

New Features

  • Improvements to PCP workflow to address slowness observed on iOS 18.4 devices.
  • Reintroducing support for udp:* in DTR. This may be useful for applications that leverage bypass flows or rely heavily on UDP, such as VOIP applications.

Minimum Requirements

The following are the minimum requirements for this release.

  • iOS 15+, iPadOS 15+
  • Workspace ONE UEM Console 2310 or later

Resolved Issues

We are always working to improve Workspace ONE Tunnel with every release. There are no major bug fixes to report.

Known Issues

We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Workspace ONE Intelligent Hub for Windows 24.10.9

New Features

  • Introducing the Enhanced View Activity Section in Hub App Catalog: We are excited to announce the new and improved View Activity section, also known as the Activity Monitor, within the Hub App Catalog. Users can now navigate to the View Activity pill within the Apps tab to track applications being installed or uninstalled on their devices.

In the Hub 24.10.6 release, we introduced the Native Apps tab, which offered better performance and real-time app updates. However, the Activity Monitor was missing in that release. With this update, we have re-added the Activity Monitor, ensuring that status updates are real-time, resilient, and accurate. Now, users can easily see which apps are being installed or uninstalled without having to scroll through the entire app catalog to find apps undergoing active deployment.

  • Bug Fixes

Minimum Requirements

The following are the minimum requirements for this release.

  • A Microsoft supported Semi-Annual Channel Windows 11 Build / Windows 11 Version 21H2 + or Windows 10 Build / Windows 10 Version 20H2+
  • Workspace ONE UEM Console 2402 Note: Certain enhancements mentioned above require an upgraded version of UEM for full support.
  • .NET Framework 4.6.2
  • Support Matrix for Workspace ONE Intelligent Hub and Application Deployment Agent (SFD)
  • Internet access for Code Signing
  • Recommended Hardware Specifications:
  • 1Ghz processor with minimum of 4 cores
  • 8GB RAM
  • 256GB Hard disk space

Resolved Issues

  • HUBW-18176 – Win 11 device profile installation status does not match in the modern stack enabled environment
  • HUBW-18149 – Fixed an issue with Web Links missing from the Hub Favorites tab
  • HUBW-18037 – Fixed an issue with incorrect provisioning tool name used in Hub
  • HUBW-18007 – Migrated Hub from using WMIC to MMI as WMIC is deprecated in Windows 11
  • HUBW-17982 – Enhanced BitLocker to go, now start encryption only after recovery key is saved to DB
  • HUBW-17918 – Improved the Profile list sampling to show accurate deployment status on UEM console
  • HUBW-17915 – Fixed an issue with Multiuser device reassignment not working when enrolled with AssignToLoggedInUser = Y

Known Issues

We haven’t identified any notable known issues in this release. If you’re facing any problems, feel free to reach out to our support team.

Current Omnissa Security Advisories

Find all latest advisories in the Omnissa Security Response Center

Omnissa UX Research Opportunities: 

  • Our goal is to gather insight into user behaviors, motivations, and goals, so we can use those insights to inform and strengthen product and design decisions.
  • Interested in giving your opinion and making your voice heard? Check out what’s available!

WS1 UEM: Test Drive the Windows Server Beta

  • About: Now bringing efficient onboarding, real-time configuration, flexible app management, and full inventory tracking to WS1 UEM.
  • Opportunity: Interactive Beta sessions on May 21 or 22 to explore features and share feedback. Can’t join live? Still fill out this form to request access and test it on your own.  
  • SIGN UP HERE

Help design the Horizon Admin Console around the way you work

  • About: Omnissa Research invites you to be a design partner, giving you a direct voice in crafting experiences that truly understand Horizon Admins as people—not just users. We’re focused on designing around your job responsibilities, challenges, and goals.
  • Opportunity: 8-minute multiple-choice survey. Upon completing, you can enter a drawing for the chance to win Omnissa swag!
  • Relevant for: Admins using/managing Horizon 8 and/or Horizon Cloud: First-Gen / Next-Gen.
  • SURVEY HERE

KB Highlights & Announcements:

Preparing for Workspace ONE Modern SaaS Rollout (Managed Hosting / Dedicated Cloud Customers)

  • For Shared SaaS, environments have already been enabled or will be enabled automatically in the near future
  • Familiarize yourselves with upcoming changes with Modern SaaS, including changes in workflows, terminology, and known issues. (See – TechZone article here.)​
  • Request environment migration with the Omnissa account team (CSM, TAM, AE, SE) once ready. The team will work internally to request an enablement week on your behalf.​
  • Environment clean-up* (resources outside of tenant boundary e.g., global resources).​
  • Remove/migrate invalid resources (apps, profiles, policies) from the console.​
  • Remove/migrate invalid SGs.​
  • Ensure all users/devices are at or under Customer/Partner OGs. If users exist above Customer/Partner OGs with devices enrolled, device enrollment may be required.​
  • Validate Smart Group & app exclusion. See KB here.​
  • Update Workspace ONE UEM to the latest version prior to Mod Stack enablement, minimum UEM 24.10.​
  • Review the list of known issues and changes aggregated in the weekly newsletter below. Ensure resolutions/workaround are implemented as applicable.​
  • Develop a testing plan post migration and communicate with internal stakeholders.​
  • KB Article Overview
  • Announcement & Updates​

High Priority KBs: 

Recently updated KBs (Links)

Beta, Lab and Tech Preview Updates 

Currently available: 

Coming soon:

  • Boxer for iOS — mid May
  • Hub for iOS — mid May
  • Web (iOS, Android) — May
  • Content for iOS — June
  • App Volumes Physical Endpoint support with ALM* (Tech Preview) — May
  • WS1 MQTT Printer* (Tech Preview) — July
  • Horizon 8 on Nutanix* — end of May/June
  • Apple macOS Platform SSO with Omnissa Access* — end of May

Past Omnissa Event Recordings

Omnissa Online Recording of Omnissa Online Event: YouTube RecordingVarious 
[Community webinar] Big Game Hunting: Ransomware’s High-Stakes War on EnterprisesYou are welcome to join an insightful session, where we will focus on the most successful cybercrime operation in history. We’ll also cover what Omnissa architects and subject matter experts can do to harden defenses and prevent breaches. Join this session for critical insights into the ever-evolving threat landscape.https://community.omnissa.com/webinars/community-webinar-big-game-hunting-ransomwares-high-stakes-war-on-enterprises-r12/ Huib DijkstraMay 7, 2025
EUC TechInsights – Reimagine Application Management: Unlock the Power of App Volumes Is your application management strategy ready for a transformation? Join us to explore how decoupling applications from operating systems with portable VHDs can simplify deployments, enhance scalability, and boost efficiency. Discover Jeff UlatoskiDirector Product ManagementFeb 4, 2025
EUC TechInsights – Stay Ahead in IT Management with Workspace ONE, why best things in life are not always freeChoosing the right device management platform goes beyond upfront costs and basic features. As your business grows, will your solution scale with you? Some platforms offer a solid start, but others require complex scripting, third-party add-ons, and workarounds—leading to hidden costs and increased risk. Welcome! You are invited to join a webinar: EUC TechInsights – Stay Ahead in IT Management with Workspace ONE, why best things in life are not always free. After registering, you will receive a confirmation email about joining the webinar.Pim van de VisFeb 25, 2025
Exploring Workspace ONE UEM Frontline and What’s New with Android Management APIo Session 1 – Omnissa Workspace ONE UEM and DEX for Frontline Use Cases – What’s new in Analytics for Frontline Deployments – What’s new in configuring the experience for Frontline devices (Launcher) – What’s new in managing and maintaining Frontline devices o Session 2 – What’s New with Android Management API – What is Android Management API? – AMAPI enhancements with Workspace ONE UEM 2410 – What’s next for AMAPI in 2025 Exploring Workspace ONE UEM Frontline and What’s New with Android Management APIMitch Berk, Senior Director of Product Management; Owais Syed, Product Line Manager; Nick Brouillette, Group Product Line Manager & Manuel Perez, Product ManagerFeb 25 2025
Omnissa Tech Deep Dive: What’s new with Windows software distribution?Whether you’re a newbie or a veteran of deploying Windows apps, this session will provide an A to Z discussion about software distribution, as well as best practices, troubleshooting, and new functionality.Join Omnissa subject experts @Jo Harder@Grischa Ernst@Phillip Helmling@Saurabh Jhunjhunwala@Sujay Gopalan@Camille Debay to learn about new options and improved ways to streamline configuration and deployment of applications.Omnissa Tech Deep Dive: What’s new with Windows software distribution?@Jo Harder,
@Grischa Ernst,
@Phillip Helmling,
@Saurabh Jhunjhunwala,
@Sujay Gopalan,
@Camille Debay
Mar 26 2025
Increase the value of your Omnissa deployment with advanced data and automation: powered by Intelligence and Freestyle OrchestratorJoin us to discover how Omnissa Intelligence and Omnissa Freestyle Orchestrator can help you unlock advanced data insights and automation, maximizing the value of your Omnissa deployment.Increase the value of your Omnissa deployment with advanced data and automation: powered by Intelligence and Freestyle OrchestratorEvan HurstNigitha AlugubelliMitch BerkApr 2 2025
Omnissa Tech Deep Dive: Enrich your access policies with more data for better security @Peter Björk will cover the security capabilities in the Omnissa platform, real-time and continuous data sharing, and access decisions based on more data about the user, devices, and session.Omnissa Tech Deep Dive: Enrich your access policies with more data for better securityPeter BjörkApr 16 2025

Latest Patch & Seed Script Updates:

OS Updates Seed Script

  • Most recent update :
  • iOS : 18.5 (22F6076)
  • visionOS 2.5 (22O6473)
  • Last Update: CW20

Device Model Seed Script

  • Seed Script to support
  • iPad Air 11-inch (M3) Wi-Fi
  • Last update: CW12

Workspace ONE UEM 23.10

  • Patch level 23.10.0.48
  • FCA-207991 – Updated console notification templates.
  • Last Update: CW16

Workspace ONE UEM 24.02

  • Patch Level: 24.2.0.29
  • RUGG-13436 – RSCC fails to pull content with duplicate entries for same relay server mapped to different RSCCs.
  • FCA-210103 – UEM Device Location Log support for non DST time zones.
  • CRSVC-60875 – Resolved scenario where Device Wipe Log did not load successfully.
  • ARES-31049 – Legacy app catalog is not removing from Android and iOS devices after disabling it from UEM.
  • Last Update: CW20

Workspace ONE UEM 2406

  • Patch level 24.6.0.34

All Environments

  • MACOS-5499 – User profile removal from profile deployment tracking page was not working.
  • MACOS-5296 – Duplicate entries in ApplicationList sample.
  • FCA-210103 – UEM Device Location Log support for non DST time zones.
  • ESI-499 – An end user is able to enroll a device in an OG when the registration token is mapped to a different user.
  • CRSVC-61651 – Remove enrollment and authentication method filtering in ListCAProfiles method.
  • CRSVC-61437 – User information is not partially changed in the Multi User function.
  • CRSVC-59850 – Enhanced attribute metadata flows for Android and Apple devices.
  • CMSVC-20130 – Assigning or unassigning tags to multiple devices through API was failing.
  • ARES-32252 – Certificates nearing expiration or expired certificates cannot be renewed on Linux devices.
  • ARES-32215 – Updating app assignments from the UEM console displays an error after upgrade to UEM 2406.
  • AMST-43407 – Admin account stuck in DELETE IN PROGRESS state when trying to remove admin.
  • AMST-43125 – System.Data.SqlClient.SqlException: Error executing the method SaveSamplesWithEntries for sample type ‘ManagedLicenseListSample’ for some devices.
  • AGGL-18311 – AMAPI Tunnel profile fails to configure Workspace ONE Tunnel for Android.
  • AAPP-18753 – VPN profile was not installing due to missing VPNUUID.
  • AAPP-18578 – Schedule OS Update commands in Queueing state were not removed when excluding the device at the smart group.
  • AAPP-17274 – The status for VPP apps displays as “Update Pushed” in the list view even though auto-update is disabled.
  • AMST-43388 – Seed Windows Hub 24.04.17.0 MSI to UEM 2406 patch.

Modernized Environments

  • ARES-32318 – App configured to be installed through Product Provisioning gets removed automatically from devices.
  • ARES-32296 – Unable to apply Dependency App filter for Windows Internal apps on Internal App List View page.
  • ARES-32114 – Profile name was missing from the ‘Install’ and ‘Remove’ events in the device log for Desktop devices for admin-triggered force actions from the UEM console.
  • ARES-31983 – Deleted profiles were visible on the Profile List View.
  • ARES-31818 – Hub app catalog intermittently does not display assigned apps.
  • ARES-31103 – Spaceman Error received while viewing app details on the Device Details apps tab for macOS device.
  • ARES-30528 – Admin not able to export XML of Declarative profiles.
  • Last Update: CW20

Workspace ONE UEM 2410

  • Patch level 24.10.0.10

All Environments

  • UM-9658 – User Group Enrollment Mapping – Unable to map User Group to a lower Organization Group.
  • UM-9396 – Unable to add user groups to a customer-type organization group (OG) from a partner-type OG.
  • RUGG-13566 – Failed Products are being marked as Compliant in mod stack enabled environments.
  • MACOS-5777 – macOS device not updating OS version in UEM.
  • LUEM-913 – Date/Time Profile for Linux.
  • LAUN-54 – Adding apps to an existing Launcher profile under Products fails.
  • FS-7589 – macOS Workflows failing due to timeout errors.
  • CRSVC-62204 – Administrator at a child OG is unable to perform operations for Compliance Policies managed by a parent OG.
  • CRSVC-61975 – OID-SID option visible for incorrect CAs.
  • CRSVC-61277 – Update UEM to support additional YATs Domain endpoints (Workspace ONE® Unified Endpoint Management™ ).
  • CRSVC-59946 – Remove unnecessary metrics created in RPS.
  • CRSVC-59830 – Data hydration service skips the 1st batch of events intermittently.
  • ARES-32140 – Admins with the pre-existing ‘Application Management’ role unable to publish app assignments after UEM console 2410 upgrade.
  • AMST-43407 – Admin account stuck in DELETE IN PROGRESS state when trying to remove admin.
  • AMST-42419 – Add Device Reassignment pause status to WinRT agent setting payload.
  • AGGL-17989 – Android Device Sampling handle samples from unenrolled device.
  • Last Update: CW20


Disclaimer

Please note: All information in this Newsletter is statically copied from various sources. Once published, these sources won’t be checked and the Newsletter won’t be updated retrospectively. In case of doubts, always check and refer to the linked source in Omnissa Docs, Techzone or Knowledgebase.

Leave a Reply

Your email address will not be published. Required fields are marked *