| Event | Link and description | Speakers | Date |
| Omnissa Tech Deep Dive: Horizon 8 and Nutanix AHV hypervisor | In this session, you’ll get a technical overview of how Horizon 8 integrates with the Nutanix AHV platform. We’ll walk you through the key features and architecture of AHV, explore why it’s a strategic choice for hypervisor support, and share Omnissa’s vision and launch plans around this integration.Whether you’re already working with Horizon or just beginning to explore hypervisor options, this event will give you the context and confidence to understand how Horizon 8 fits into the Nutanix ecosystem—and what it means for your environment moving forward.👉 Register here: https://community.omnissa.com/events/event/63-omnissa-tech-deep-dive-horizon-8-and-nutanix-ahv-hypervisor/ | 28 August5 PM – 6 PM CEST 11 AM – 12 PM EDT 8 AM – 9 AM PDT | |
| Omnissa ONE returns in 2025 | Omnissa ONE Global Las Vegas, Cosmopolitan Hotel Sept 15th – Sept 17th👉 More information and registration: Coming soon!Omnissa ONE EMEA Amsterdam, Maritim Hotel Amsterdam Oct 7th – Oct 9th 👉 More information and registration: https://emea.omnissa.one/event/af189fa7-8f11-4756-9957-b795571114a2/omnissa-one-amsterdamOmnissa ONE Japan Tokyo, ANA InterContinental Hotel Nov 17th – Nov 19th 👉 More information and registration: Coming soon! |
Release Updates:
Omnissa Dynamic Environment Manager 2506
- Support for creating and editing agent configuration files from DEM Management Console. We are excited to introduce the addition of a new Agent Configuration tab within the DEM Management Console. This tab provides user-friendly options to edit important agent configuration files directly from the console, saving time and reducing the risk of manual errors that could affect the agent behavior. For more information, see Using Agent Configuration Tab.
- Enhancements to Config File Versioning. Individual versions of a configuration file can now be deleted directly from the Version History tab.
- Enhancements to the User Environment Configuration. All user environment settings previously exclusive to DirectFlex-enabled configuration files are now fully supported for non-DirectFlex configuration files. You can configure Shortcuts, File Type Associations (FTAs), and Environment Variables for non-DirectFlex config files.
- Support for Horizon Agent Auto Upgrade feature. The DEM Agent (the FlexEngine component from Omnissa Dynamic Environment Manager) can be installed or upgraded using the Horizon Agent Auto Upgrade feature, enabling Horizon admins to seamlessly deploy or update the DEM Agent through the Horizon Console. For more information, see Auto Upgrade of Horizon Agents and other Supported Agents and Using Horizon Agent Auto Upgrade to Install or Upgrade DEM Agent.
- Updated Components. This release updates the main product components. Application Profiler, Helpdesk Support Tool, and SyncTool are not updated.
App Volumes 2506
- User Acceptance Testing and Sentiment FeedbackApp Volumes now enables end users to provide direct feedback after using an application by submitting a thumbs-up or thumbs-down rating and optional comments. Administrators and application owners can view sentiment trends by package and application, helping improve UAT efficiency and engagement.
- Concurrent and Peak Application Usage TrackingNew reporting capabilities display real-time concurrent application usage and historical peak usage since the last reset. This data supports license planning for applications based on concurrent use and applies to both classic delivery and on-demand packages.
- Entra ID IntegrationApp Volumes extends Microsoft Entra ID support beyond Azure Virtual Desktop to include on-premises and other cloud-based deployments. This support enables consistent identity-based entitlement across a wider range of environments.
- Simplified CLI Syntax for App Volumes Application Capture Command-line ProgramThe command-line interface for the command-line capture program has been standardized to follow the [action] [options] format, improving clarity and usability. Previous syntax remains to ensure backward compatibility with existing automation workflows.
- Logging Obfuscation ControlsAdministrators can now configure logging to obfuscate sensitive details like usernames, emails, IP addresses, and profile paths for internal security policies and compliance.
- Security Scan of App Volumes PackagesAdministrators can now perform security scans of application packages to help identify potential risks using the App Volumes Application Capture Command-line program. This ensures a higher level of trust and control across application delivery pipelines.
- Writable Volumes Off by Default and Moved to Advanced SettingsSince Writable Volumes only apply to select use cases, Writable Volumes must now be turned on for new deployments before they can be configured. Administrators supporting non-persistent desktops can re-enable this feature via the advanced settings in App Volumes Manager.
- Support for Horizon Agent Auto UpgradeOmnissa App Volumes agent supports a silent install and upgrade through the Horizon Agent Auto Upgrade feature. This integration allows Horizon administrators to seamlessly deploy or update the App Volumes agent as part of the broader Horizon Agent upgrade process, directly from the Horizon Console.NOTE: To use the Horizon Agent Auto Upgrade feature, you must have Horizon 8 version 2312 or later. You must also have an appropriate license that includes access to this feature.For information about the feature and licensing requirements and how to use the feature, see the Auto Upgrade Horizon Agent section in the Omnissa Horizon 8 Installation and Upgradedocumentation at Omnissa Product Documentation.
Unified Access Gateway 2506
- Support for Device X.509 certificate and SAML authenticationAdded support for Device X.509 certificate authentication (enabling mutual TLS authentication with Horizon Client) followed by SAML authentication. The feature is currently supported only on Horizon Client for Mac. For more information, see Configure Horizon Settings on Unified Access Gateway for SAML Integration and Omnissa Horizon Client for Mac Release Notes.
- Support all source locators of VMware OVF toolUnified Access Gateway PowerShell scripts now support the same source locators as the VMware OVF tool for vSphere deployments.
- Enhancements to Origin HTTP Header featureThe constraints mentioned in the Additional Notes section on the previous Unified Access Gateway (2503) release are now obsolete.
- Chrome native client users do not have to add the extension.
- If Origin Check Required setting is set to false, the Re-Write Origin setting is also set to false.
- By default, the common blast and tunnel external URLs are added to the auto-allowed list. There is no need to add a URL without the port explicitly.
- Support for using Unified Access Gateway for Horizon 8 on Nutanix AHV – Limited AvailabilityAs part of Horizon 8 support for Nutanix AHV Limited Availability, administrators can deploy Unified Access Gateway on Nutanix AHV. For more information, see Omnissa Horizon 8 Release Notes and PowerShell deployment to Nutanix AHV.
- Support IMDSv2 metadata in AWSUnified Access Gateway now defaults to using the IMDSv2 protocol for AWS deployments. This change aligns with AWS recommendations and enhances security compared to IMDSv1 protocol.
- Extended server certificate validation, if enabled, can now be selectively bypassed for entitlement launches using the Horizon BLAST protocol by specifying the Horizon Connection Server thumbprint in the Connection Server URL Thumbprint setting. For more information, see Configure Horizon Settings.
- iptables replacementUnified Access Gateway now supports nftables for network packet filtering and NAT as RHEL is set to deprecate iptables.
- AzureRM support deprecation
- Following the Microsoft announcement, PowerShell script used to deploy Unified Access Gateway on Azure no longer supports AzureRM module. For more information, see PowerShell deployment to Microsoft Azure.
- Logging improvements
- Updates to OS package versions and Java component versions
- Omnissa Workspace ONE Tunnel
- Improvement to rsyslog implementation. rsyslog supports streaming tunnel service log (tunnel.log and reporter.log) to a rsyslog server.
The rsyslog_over_tcp KVP is now deprecated in favor of a flexible and explicit configuration. This setting provides greater control and extensibility by supporting TLS for secure delivery in addition to TCP/UDP.- KVP: rsyslog_transport_type
- Purpose: Define the transport protocol used for forwarding service logs.
- Values:
- 0 – UDP (default)
- 1 – TCP
- 2 – TLS (encrypted syslog over TCP)
- Improvement to rsyslog implementation. rsyslog supports streaming tunnel service log (tunnel.log and reporter.log) to a rsyslog server.
- Content Gateway
- Enhanced support for custom values in Certificate-based authentication (CBA).
- Support for Move files operation in Network file share (NFS) repository.
Workspace ONE Assist for Control Center On Premise 25.06 and Android 25.06.1
- Support for App Config
In this release, we are excited to introduce a new App Config option in Assist that allows organizations to enforce permissions like Accessibility and Draw Over Apps. If configured, sessions automatically terminate if the required permissions aren’t granted. Admins will receive real-time notifications in the console. If not configured, Assist will continue to work as usual.
- Support for Remote Shell
In this release, we are excited to introduce Remote Shell support. It offers capabilities like our previous command line support, but with improved reliability and faster performance. No changes to the admin experience.
Release Notes for Control Center
- Introducing Assist Experience Controller – Full Control for Screen Share SessionsIn this release, we are excited to introduce Assist Experience Controller, a feature for console users to optimize remote sessions in real time.NoteWindows only with this release.
- Speed, Balanced & Custom modes: Choose the mode that fits your session. Speed for performance, Balanced for default optimization, or Custom for full control.
- Resolution Picker: Adjust the remote device’s screen resolution to balance clarity and performance for the duration of the Assist session.
- Advanced Settings: Disable animations, hide window contents while dragging, or blank the remote wallpaper for a better session experience.
- Image Scaling: Improve performance during low bandwidth connections by scaling images for a faster, more responsive remoting experience.
- Introducing Grayscale Mode – Optimized Screen share sessions in Low Bandwidth Use casesIn this release, we are excited to introduce Grayscale Mode, giving console users more ways to optimize remote sessions when network conditions are limited. Easily switch between color and grayscale anytime during a session.NoteWindows only with this release.
- Expanded Unattended Access Support with Assist Configurations for WindowsCustomers can now configure unattended mode to fit their needs through Assist configurations. When Unattended Mode is enabled, you can choose between Guest or Admin modes for your devices.NoteRequire Workspace ONE UEM console 25.06
- Unattended Mode: Acts as the parent setting—enable or disable unattended access for groups of devices. Once enabled, select either Guest or Admin mode.
- Guest Mode: Allows console users to join existing user sessions by entering an OTP. Ideal for kiosks, signage, and POS devices.
- Admin Mode: Notifies the device user when a connection is attempted. If no response is received, screen is locked, the session connects automatically. Ideal for shared devices.
- Support for App Config – AndroidIn this release, we are excited to introduce a new App Config option in Assist that allows organizations to enforce permissions like Accessibility and Draw Over Apps. If enabled, sessions will automatically terminate if the required permissions aren’t granted. Admins will receive real-time notifications in the console. If not configured, Assist will continue to work as usual.
- Support for Remote Shell – AndroidIn this release, we are excited to introduce Remote Shell support. It offers capabilities like our previous command land support, but with improved reliability and faster performance. No changes to the admin experience.
- Reduced latency and improved real-time streaming experience for macOS devicesWorkspace ONE Assist now supports improved streaming and controls for macOS devices during a screen share session by leveraging hardware acceleration and efficient adaptation algorithms.Improved remoting experience includes:
- Hardware accelerated video codec
- Dynamic video codec negotiation
- Adaptive bitrate based on measured network parameters
Omnissa Workspace ONE Hub Services
Conditional Entitlements Phase 2: Show or Hide Apps based on Access Policies
Access policy rules set by admins in Omnissa Access determine which apps an end user can launch, based on factors such as their network range, device type, or group membership. The new conditional entitlements enhancement to the Hub Catalog improves the user experience by hiding apps that a user is restricted from launching based on Access policy rules.
This is Phase 2 of the two-phase rollout of conditional entitlements. Hub Services admins now have the option to either display (as locked) restricted apps or hide them entirely from end users.
Workspace ONE Intelligent Hub for Windows 25.06
Intelligent Hub Application Version Control:
This new feature empowers administrators with precise control over which version of the Intelligent Hub is installed on Windows devices, supporting both Win32 and ARM platforms. You can now deploy Intelligent Hub updates independently of Workspace ONE UEM console upgrades and gain direct access to Beta builds without manual download/upload steps. Unified version control is available for both Intel/AMD (Win32) and ARM-based Windows devices.
Once enabled (available upon request via Omnissa Support or your Account Team), the existing setting Intelligent Hub Automatic Updates in the UEM Console (System Settings > Devices & Users > Microsoft > Windows > Intelligent Hub Application) is renamed to Use Intelligent Hub Version Control. A new section, Intelligent Hub Target Seeding, is introduced, allowing version assignment at the Organizational Group (OG) level.
Key Improvements:
- Assign a specific version to a production OG to ensure consistency, while using the latest GA or Beta version in a test OG for validation.
- After successful testing, update the production OG to the validated version.
- Applies instantly to newly enrolled devices (including OOBE and Autopilot). Existing devices will auto-update within 48 hours if running an older version.
- Devices already running a newer version will not be downgraded. Downgrades are not supported.
Behavior Based on Previous Settings:
- If Intelligent Hub Automatic Updates was previously enabled, the new setting is automatically enabled and defaults to Latest available —preserving current behavior.
- If it was disabled, the new version control setting remains disabled.
Note: This feature requires Workspace ONE UEM version 2506 or later
Faster SFD Delivery and Installation via the Intelligent Hub
Workspace ONE now supports a faster and more efficient installation of the Software Distribution Framework (SFD) by shifting the process from the traditional OMA-DM channel to a Hub-based installation. With this enhancement, SFD is bundled with Hub and is installed immediately after enrollment, enabling earlier application deployment and improving overall device readiness.
Key Improvements:
- SFD is now installed via the Intelligent Hub, independent of the OMA-DM workflow.
- Installation occurs immediately after enrollment as the SFD package is part of the Intelligent Hub, reducing delays in the provisioning process.
- Applications can begin installing sooner, accelerating time-to-productivity.
- Devices reach a usable state faster, enhancing the end-user experience.
This update addresses previous challenges associated with deployment timelines and ensures a smoother, more efficient onboarding experience.
Note: This feature requires Workspace ONE UEM version 2506 or later and Hub version 25.06.x.
Enhanced Offline Domain Join (ODJ) Configuration – Now Decoupled from Enrollment
The Offline Domain Join (ODJ) configuration process has been significantly enhanced to improve reliability, flexibility —especially in Autopilot Hybrid Join scenarios.
Key Improvements:
Configuring Offline Domain Join is no longer tied to the device enrollment process. It can now be applied at any time, significantly reducing the risk of failures caused by race conditions or timeouts during Autopilot enrollments.
With this update, ODJ can also be configured as a step within the Freestyle workflows, especially the new Onboarding workflows introduced recently, enabling IT teams to properly sequence and stage devices before they reach end users. This ensures a smoother onboarding experience and more consistent device readiness. For more information, see Offline Domain Join in Workflows
Administrators can now deploy ODJ even after a device has been moved to a different Organizational Group (OG), including child OGs. Additionally, to maintain naming consistency, a device’s computer name will only change if it is not already joined to a domain.
Note: This feature requires Workspace ONE UEM version 2506 or later and Hub version 25.06.x.
Support for Administrative Template (ADMX) with Profiles – Technical Preview
Workspace ONE UEM now supports Administrative Template (ADMX), giving IT administrators a unified and scalable way to manage Windows policies across their device fleet.
Key Improvements:
- Manage all administrative templates for Windows 10, Windows 11, and Windows Server directly from the UEM console.
- Pre-Uploaded ADMX templates for common applications—including those for Microsoft Office, Omnissa Horizon, Google Chrome, Mozilla Firefox, and more.
- Known Issue: Reapplying Baselines will reset policies applied via the ADMX profiles. Ability for Baselines and ADMX profiles to seamlessly co-exist will be introduced when this feature will be Generally Available. Please refrain from using this feature currently if you have baselines configured.
Launch Native and App Volumes MSI Apps Directly from Intelligent Hub for Windows:
With the introduction of this enhanced app catalog functionality, end users can now launch native applications and App Volumes MSI apps directly from the Intelligent Hub app catalog—alongside the existing ability to launch web and Horizon apps.
Key Improvements:
- App Launch Support: Native apps and App Volumes MSI apps can now be launched from within the Hub catalog.
- Admin Control: IT administrators can define custom launch commands for all applications in the app configuration within Workspace ONE UEM.
- Improved User Experience: End users no longer need to manually locate and open native apps post-installation—they can launch them directly from the Hub interface.
Previously, users could only install native applications via Intelligent Hub but were unable to launch them directly. Now, with launch commands configured in UEM, Hub will execute the defined command, providing a seamless way for users to both install and launch apps from a single interface. This enhancement simplifies app access and boosts productivity by reducing the number of steps needed to open frequently used apps
Note: This feature requires Workspace ONE UEM version 2506 or later and Hub version 25.06.x.
Intelligent Hub Deferred Enrollment:
Intelligent Hub now supports Deferred Enrollment, enabling simplified and automatic device onboarding into Workspace ONE UEM. Deferred Enrollment allows devices to be pre-configured with Intelligent Hub, but delays the actual enrollment until first user login. This is ideal for automating device enrollment of Horizon Cloud virtual machines (VMs) into UEM, reducing manual setup and streamlining the end-user experience.
How It Works:
- Intelligent Hub is installed in the Horizon Gold Image with the Deferred Enrollment parameter enabled.
- New VMs are provisioned with Hub pre-installed.
- Enrollment is triggered automatically when a user logs in for the first time.
- The device is enrolled into UEM and receives user-specific configurations.
Logging and Troubleshooting Enhancements
This release introduces several powerful enhancements to improve visibility, streamline troubleshooting, and reduce time-to-resolution for both end users and administrators.
- Log Submission from Intelligent Hub: End users can now send logs directly to Workspace ONE UEM from the Hub Support tab, with two new options added alongside the existing “Collect Logs” feature:
- Send Hub Logs to UEM: Automatically uploads all Intelligent Hub-related logs to the UEM console. Logs are accessible under Device Details → Attachments → Documents.
- Send Other Logs to UEM: Sends logs from DEEM, Workspace ONE Assist, and Workspace ONE Tunnel to the same location in the UEM console.
- Users receive a confirmation once the log upload is complete, improving transparency and support efficiency.
- Application Deployment Event Logging: To enhance visibility into application deployment, Intelligent Hub now sends detailed application deployment event summaries to the UEM console under Device Details → Troubleshooting → Event Logs.These event logs include the following event data: First detection status, Pre-condition checks, Final detection status, Exit codes and more. This provides administrators with deeper insights into app install/uninstall outcomes and helps identify root causes of deployment failures faster.
- Filter Logs by Duration and Component: Administrators can now filter collected logs based on timeframe and log source, making it easier to isolate relevant data during troubleshooting.
- Timeframe Filters: All logs, or logs from the last 1, 3, 7, or 14 days
- Component Filters:
- Hub: Logs from Intelligent Hub, App Deployment Agent, Provisioning Agent, Factory Provisioning, and MDM
- System: Windows and PCRefresh logs
- Other: Logs from Assist, DEEM Telemetry Agent, and Workspace ONE Tunnel
Note: This feature requires Workspace ONE UEM version 2506 or later and Hub version 25.06.x.
Support Tab Migrated to Native Experience
The Support Tab has been migrated to a native user interface, providing a more integrated and efficient experience. This transition from webview to native UI ensures faster load times and a smoother interaction. Key improvements include:
- Improved Performance: Experience quicker access to support features and resources.
- Seamless Navigation: Enjoy a more intuitive and responsive interface that enhances usability.
Enhanced Processor Architecture Selection for App Deployment:
This new feature provides administrators with granular control over app distribution based on processor architecture. Previously, administrators could only select one option among 32-bit, 64-bit, and ARM64 as the ‘Supported Processor Architecture’ during app deployment. UEM will then determine the distribution to device architectures in the backend, limiting flexibility.
Key Improvements:
- Multi-Selection Option: Administers can now select multiple processor architectures during app deployment. The available options include 32-bit, 64-bit, ARM32, and ARM64.
- Granular Control: This enhancement allows for more precise control over app distribution. For example:
- Distribute a 32-bit app ‘X’ to devices with 32-bit and 64-bit architectures only, excluding ARM64.
- Distribute a 64-bit app ‘Y’ to devices with 64-bit and ARM64 architectures, utilizing x64 emulation for compatibility.
This update empowers administrators to tailor app deployments to specific device architectures, accommodating a wide range of use cases and ensuring optimal app performance across diverse environments.
Note: This feature requires Workspace ONE UEM version 2506 or later and Hub version 25.06.x.
New Launch Option: Intelligent Hub in Maximized Screen Mode
We’ve added support for launching the Workspace ONE Intelligent Hub UI in maximized screen mode, offering a more immersive and centralized experience for end users.
What’s New:
A new Launch Type-> Maximize option is now available for the Hub UI. When enabled, the Intelligent Hub will open in a full-screen (maximized) window automatically upon user login or system boot. This enhancement is ideal for organizations that want to position the Hub as the primary interface for accessing Line of Business (LOB) applications—whether native apps or Horizon virtual apps.
Key Improvements:
- Example to launch Hub in Maximized mode via Powershell-> Start-Process ws1winhub:?LaunchType=Maximized
- Note: Unlike Kiosk mode, users can still minimize or close the Hub window at any time, preserving flexibility.
- The Hub will launch directly into the Favorites tab, streamlining access to key apps and resources.
Default User Mode Configuration During Windows Multiuser Enrollment
Workspace ONE UEM now supports configuring the default user mode (Single User Mode or Multi User Mode) at the Organization Group (OG) level. This setting is automatically applied to Windows devices during enrollment through the Intelligent Hub client.
- Configuration in UEM console: Administrators can define the default user mode in the UEM console under the OG settings. The available options include:
- Single User Mode
- Multi User Mode
- Hub behavior during enrollment:
- During the enrollment process, the Windows Intelligent Hub queries the UEM console for the default user mode setting.
- The retrieved mode is validated and stored locally by the Hub.
- Based on the setting, the Hub configures the Windows device accordingly.
Note: This feature requires Workspace ONE UEM version 2506 or later and Hub version 24.10.10+ or 25.06.x.
Current Omnissa Security Advisories
- OMSA-2025-0001: Horizon Client for Windows addresses local privilege escalation vulnerability (CVE-2025-25230)
- OMSA-2025-0002: Omnissa Unified Access Gateway (UAG) updates address Cross-Origin Resource Sharing Bypass vulnerability (CVE-2025-25234)
Find all latest advisories in the Omnissa Security Response Center
Omnissa UX Research Opportunities:
- Our goal is to gather insight into user behaviors, motivations, and goals, so we can use those insights to inform and strengthen product and design decisions.
- Interested in giving your opinion and making your voice heard? Check out what’s available!
NEW Opportunity: Sound the alarm – what custom alerts matter most to you?
- About: Omnissa Intelligence has a new feature called Custom Alerts, which will allow users to define conditions that trigger notifications based on metric thresholds. These can be aggregated across entities or evaluated over time windows.
- Opportunity: 5-minute survey via Qualtrics where you’ll get to rank different features/use cases. This won’t require talking or typing, just multiple choice, AND you can do this in your own time.
- Who’s this relevant for: Admins using/managing Omnissa Intelligence, Horizon, WS1 UEM, Experience Management, MTD, and/or Vulnerability Defense.
- Drag/drop and rank features HERE → available until end of day 8/06
Take the label challenge and shape the future of DEX [drawing for swag]
- About: Design’s improving the menu navigation, with some changes including:
- Grouping Core services (like Dashboards, Reports, and Workflows) under the WS1 Intelligence offering.
- Allowing direct access to these Core services without leaving the main console.
- Adapting to each user’s access level across Digital Employee Experience (DEX), WS1 UEM, and Horizon.
- Opportunity: 8-minute interaction where you’ll complete a variety of tasks and choose which menu item is best suited for. This won’t require talking or typing, just multiple choice, AND you can do this in your own time. Upon completing, enter a drawing for the chance to win Omnissa swag!
- Who is this relevant for: Anyone using Digital Employee Experience and/or Workspace One Intelligence.
- Take the label challenge here —> available until end of day 8/06
KB Highlights & Announcements:
Preparing for Workspace ONE Modern SaaS Rollout (Managed Hosting / Dedicated Cloud Customers)
- For Shared SaaS, environments have already been enabled or will be enabled automatically in the near future
- Familiarize yourselves with upcoming changes with Modern SaaS, including changes in workflows, terminology, and known issues. (See – TechZone article here.)
- Request environment migration with the Omnissa account team (CSM, TAM, AE, SE) once ready. The team will work internally to request an enablement week on your behalf.
- Environment clean-up* (resources outside of tenant boundary e.g., global resources).
- Remove/migrate invalid resources (apps, profiles, policies) from the console.
- Remove/migrate invalid SGs.
- Ensure all users/devices are at or under Customer/Partner OGs. If users exist above Customer/Partner OGs with devices enrolled, device enrollment may be required.
- Validate Smart Group & app exclusion. See KB here.
- Update Workspace ONE UEM to the latest version prior to Mod Stack enablement, minimum UEM 24.10.
- Review the list of known issues and changes aggregated in the weekly newsletter below. Ensure resolutions/workaround are implemented as applicable.
- Develop a testing plan post migration and communicate with internal stakeholders.
- KB Article Overview
- Announcement & Updates
- Administration changes for Workspace ONE UEM Modern SaaS Architecture | Omnissa
- Workspace ONE UEM – Modern SaaS Architecture Rollout – December Update (6000206)
- Smart Group exclusions now managed at version level in modern SaaS architecture enabled Workspace ONE UEM Environments (6000662)
- Application and Profile management restricted to Customer Organization Group (and Partner Organization Group) or below in Modern SaaS architecture enabled UEM environments (6000196)
- Introducing WS1 UEM Next-Gen SaaS: Device List View, Resource Delivery and Deployment Tracking Modernization Improvements in Tech Preview Environment CN135 (94042)
- Modernization Update: Consolidated Modernized Services for Hosted SaaS (91520)
- Known Issues – Resolved
- Intelligent Hub for macOS must be upgraded to version 24.07.1 to prevent macOS Profile removal from being blocked with Mod Stack (Resolved in macOS Hub 24.07.1+)
- Profiles Assigned Through Freestyle Workflows Installed on Unintended Devices (6000667) (Resolved in UEM 24.06.0.13+)
- macOS Profiles shows “Installed but not assigned” and contains profile duplicates (6000682) (Resolved in macOS Hub 24.07.2+)
- [Modern Architecture] ChromeOS Device Sync fails (6000731)
- ARES-28824 – Known Issue with Sorting Applications on Device Details Page with Modern SaaS Architecture Enabled UEM Environments (6000670)
- [Resolved] Tagging Operations Behavior Change in Mod Stack Enabled Environments (6000180)(Enhanced in Workspace ONE UEM 2406 Patch 22 and 2410)
- Known Issues – Ongoing
- ARES-28824 – Known Issue with Sorting Applications on Device Details Page with Modern SaaS Architecture Enabled UEM Environments (6000670)
- Evaluated device count higher than Assigned count in Deployment Tracking for Modern SaaS architecture enabled UEM Environments (6000191)
- Known issues of Product Provisioning in the UEM modernized stack (6000686)
- Workspace ONE UEM – Modern Stack Device-Based Events are not exported via Syslog Integration (6000677)
- ARES-30657 – For some internal apps, devices receive lower app version instead of the highest assigned version in modern-architecture enabled UEM environments (6000718)
- FileVault Recovery Keys are missing for macOS devices after Modern Stack Migration (6000719)
- FileVault Disk Encryption Pop Up for macOS Devices after Modern Stack Update (6000722)
- [Modern Architecture] Devices Removed from Assignment Groups with “Enterprise Version” Filter (6000730)
- Announcement & Updates
High Priority KBs:
- Upcoming Changes to the Cloud Distribution Network (CDN) URL for Omnissa Access and Hub Services (6000795)
- Horizon Cloud Service transition to Omnissa (6000824)
- Preparing for Omnissa Innovation Updates (6000840)
- Legacy Domain End of support and required action for Workspace ONE Cloud-Hosted domain vmwservices.com (6000843)
- Workspace ONE UEM – Upcoming Update to the Intelligence, Token Service, ESR, and CNS URL scheme – Action Required (6000867)
- Update Workspace ONE Boxer for iOS and Android with new Workspace ONE domain (6000868)
- Update Workspace ONE Content for iOS and Android with new Workspace ONE domain (6000869)
- Update Workspace ONE SDK for iOS and Android with new Workspace ONE domain (6000872)
- Update Workspace ONE Web for iOS and Android with new Workspace ONE domain (6000873)
- Update Workspace ONE Intelligent Hub for iOS and Android with new Workspace ONE domain (6000874)
- Update Workspace ONE PIV-D Manager for iOS and Android with new Workspace ONE domain (6000875)
- Omnissa Intelligence Migration to New Domains (6000876)
- Upcoming Changes to the Cloud Notification Service (CNS) URL for Omnissa Hub Services (6000877)
- Update Workspace ONE Email Notification Service (ENS) for OnPrem with updated Omnissa domain (6000878)
- Updates for WS1 Intelligence integration in UAG (6000879)
- Update to Workspace ONE Launcher (6000880)
- Update Workspace ONE App Wrapping & Plugins with new Workspace ONE domain (6000881)
- Upcoming Changes: Required Update to Intelligence SDK to Continue Sending Analytics Data to Omnissa Intelligence (6000882)
- Domain Migration :: Upcoming Changes to the Token URLs and Intelligence API URLs for Omnissa Workspace ONE ITSM Connector app for ServiceNow (6000883)
- Update Workspace ONE Intelligent Hub for MacOS with updated Omnissa domain (6000885)
- Update Workspace ONE Tunnel for iOS and Android and ChromeOS with updated Omnissa domain (6000886)
- Workspace ONE (on-prem) DEX for Windows and macOS (6000890)
- Workspace ONE DEX for Horizon (URL Migration) (6000891)
- DEX for UEM SaaS for Windows and macOS (URL updates) (6000892)
- Legacy domain suggested upgrade sequence (6000894)
- Omnissa World Link Directory
For an overview about links to customer portals and relevant information follow the above link. - System Migration Changes Impacting Workspace ONE and Horizon Customers (97841)
The end-user computing (EUC) division of Broadcom will transition from VMware-hosted systems to EUC-hosted systems in April and May 2024. This transition is part of our preparation to become a standalone entity following the acquisition of EUC by KKR.
Recently added KBs (Links)
- iOS VPN issue with Custom VPN Type and Custom data on UEM 2506 (6000998)
- SAML authentication fails in the Connection Server due to a ClassCastException encountered while resolving the SAML artifact. (6001000)
Recently updated KBs (Links)
- Auto-Update from macOS Intelligent Hub 24.11.1 and 24.11.2 Not Working as Expected (6000946)
- Horizon 8 support for Nutanix AHV Limited Availability (6000988)
- AD LDS Application Partition Migration (6000797)
- Omnissa Workspace ONE Applications Policy (81271)
- Omnissa Workspace ONE Assist IP ranges for SaaS Data centers (82567)
- On scheduling Horizon Agent upgrade for unmanaged Agent on RDSH, Horizon Agent upgrade fails (6000992)
- Supported Windows 10 and Windows 11 Guest Operating Systems for Horizon Agent and Remote Experience, for Omnissa Horizon 8.x (2006 and Later) (78714)
- UAG cannot receive Access-Accept from the Radius server unexpectedly, when the reply delays 30+ seconds after the request (93796)
- Enabling Windows 2025 Support in Horizon Brownfield Environments (6000960)
Community and YouTube Updates
3rd Party Blog Updates & Industry News
Beta, Lab and Tech Preview Updates
Currently available:
- Intelligent Hub for Android Managed API Feature – Available until further notice
- MSAL Global Sign-in/Sign-out for Shared Devices– Available until further notice
- HCS for Partners – Available until 01/30/2026
- Horizon 8 on VCD – Available until 12/31/2025
- HCS vSphere Edge – Available until 01/30/2026
- Horizon 8 on Nutanix (Select customers only)
- Omni – Available until 7/31/2025
- Windows Server Management (Select customers only) – Available until 7/31/2025
- Omnissa Security Events Service – Available until 7/19/2025
- Conditional Access – iOS Shared Device Mode for Entra ID Beta– Available until further notice
- Apple macOS Platform SSO with Omnissa Access* – Available until 7/17/2025
- Device Trust for WS1 Tunnel* – Available until 7/17/2025
Coming soon:
- Identity Services – Migration to Entra ID for UEM* (Limited Availability) – July
- Launcher – July
Past Omnissa Event Recordings
| Omnissa Online | Recording of Omnissa Online Event: YouTube Recording | Various | |
| Omnissa Tech Deep Dive: Bringing VDI goodies to your physical desktops and laptops | We invite you to a demo-packed session, where you will learn how to bring the benefits of App Volumes and DEM (Dynamic Environment Manager) to your physical Windows devices.This brings the same benefits and features you know from your Horizon VDI environments to your desktops and laptops. You have full control over the application lifecycle, ensuring the best user experience and more!Omnissa Tech Deep Dive: Bringing VDI goodies to your physical desktops and laptops | Pim van de Vis | Jun 18 |
| Unified Windows Management: Windows Server Management (Beta) and Windows Multi-user in Workspace ONE UEM | This webcast will focus on the Omnissa Workspace ONE Windows Server Management Beta and Windows Multi-user management support.https://www.brighttalk.com/webcast/19382/644453 | Grischa Ernst, Product Line ManagerCamille Debay, Product Line Manager – Windows ManagementSaurabh Jhunjhunwala, Staff Customer Success Engineer | 17 June |
| Omnissa Tech Deep Dive: Bringing VDI goodies to your physical desktops and laptops | We invite you to a demo-packed session, where you will learn how to bring the benefits of App Volumes and DEM(Dynamic Environment Manager) to your physical Windows devices.This brings the same benefits and features you know from your Horizon VDI environments to your desktops and laptops. You have full control over the application lifecycle, ensuring the best user experience and more! https://community.omnissa.com/webinars/omnissa-tech-deep-dive-bringing-vdi-goodies-to-your-physical-desktops-and-laptops-r13/ | Pim Van De Vis, Customer Success Engineer | 18 June |
| Omnissa Tech Deep Dive: Enrich your access policies with more data for better security | @Peter Björk will cover the security capabilities in the Omnissa platform, real-time and continuous data sharing, and access decisions based on more data about the user, devices, and session.https://community.omnissa.com/webinars/omnissa-tech-deep-dive-enrich-your-access-policies-with-more-data-for-better-security-r11/ | Peter Björk | Apr 16 2025 |
| Increase the value of your Omnissa deployment with advanced data and automation: powered by Intelligence and Freestyle Orchestrator | Join us to discover how Omnissa Intelligence and Omnissa Freestyle Orchestrator can help you unlock advanced data insights and automation, maximizing the value of your Omnissa deployment.https://community.omnissa.com/webinars/increase-the-value-of-your-omnissa-deployment-with-advanced-data-and-automation-powered-by-intelligence-and-freestyle-orchestrator-r10/ | Evan HurstNigitha AlugubelliMitch Berk | Apr 2 2025 |
Latest Patch & Seed Script Updates:
- Most recent update :
- iPadOS 18.6 (22G86)
iOS 18.6 (22G86)
visionOS 2.6 (22O785)
tvOS 18.6 (22M84)
macOS 15.6 (24G84)
- iPadOS 18.6 (22G86)
- Last Update: CW31
- Seed Script to support
- iPad Air 11-inch (M3) Wi-Fi
- Last update: CW26
- Patch level 23.10.0.53
- FCA-210523 – Add fallback support for old domain.
- Patch level 23.10.0.55
- AAPP-19421 – Improvements to dissociation logic for Apple VPP.
- Last Update: CW30
- Patch Level: 24.2.0.34
- AAPP-18714 – Unable to install a few internal and purchased apps due to error 12008 – MDM Command invalid.
- Last Update: CW29
- Patch level 24.6.0.42All EnvironmentsModernized Enviroments
- MACOS-6224 – Extensible Single Sign-on Kerberos payload updates.
- MACOS-4586 – System Policy Control payload updates.
- MACOS-4581 – Extensible Single Sign-on Kerberos payload updates.
- ESI-608 – Staging User unable to enroll an Android device registered to an end user in Registered Devices Only mode.
- ESI-549 – Launcher CICO fails when enrolment restriction for device model is present, despite device being in allowlist.
- AGGL-18954 – Profile installation and removal intermittently fails on shared iPads.
- Last Update: CW31
- Patch level 24.10.0.20All EnvironmentsModernized Environments
- PPAT-19169 – UEM console Tunnel Config test connection shows old results for UAG versions.
- AGGL-18988 – Certificate profiles are installed twice after Android device enrollment when a compliance policy is assigned.
- AAPP-19398 – Mismatch between Total Eligible Devices and Device Status charts when reviewing iOS OS Update Details.
- AAPP-19394 – Readability updates to iOS Device Updates Details page.
- ATL-25688 – Seed Windows Hub 24.10.13.0 x86 and ARM64 MSI to UEM 2410 patch.
- ATL-25619 – Seeding – latest SFD 24.10.7 build to UEM 2410 latest patch.
- ARES-33371 – Device preview displays incorrect counts while updating assignments of Purchased apps supporting multiple platforms.
- Last Update: CW30
- Patch level 25.06 Patch 1
All Environments
- UM-9814: Checkout for a basic user fails on an Android shared device.
- UM-9813: Basic user authentication fails at a child OG with Omnissa Identity Services integration.
- MACOS-5941: Editing a Declarative Profile from the profile list view fails.
- FS-7926: Freestyle Orchestrator Application Version Exist Condition Fails with UI Error.
- 62849: Not all installed applications are visible in the preview report when filters are applied.
- CRSVC-59993: Delete Certificate API does not consider reference of certificate in profile.
- AMST-44005: Introduced API to enable updating LaunchCommand for existing apps.
- AAPP-19505: Profile samples fails to update when queried on macOS devices.
Modernized Environments
- RUGG-13687: Device Details page crashes when a device has a profile product with regular and force-reprocessed job.
- ARES-33610: Assignment and installation data misreported for devices assigned to Internal app versions with exclusions.
- ARES-32051: Device Profile list not updated when user checks out a Windows device.
- Last Update: CW30
Disclaimer
Please note: All information in this Newsletter is statically copied from various sources. Once published, these sources won’t be checked and the Newsletter won’t be updated retrospectively. In case of doubts, always check and refer to the linked source in Omnissa Docs, Techzone or Knowledgebase.

Leave a Reply