Is Android Enterprise support broken with Workspace ONE UEM 9.4.0.3?

[pmeuser]

Since ich have upgraded from 9.3 to 9.4.0.3 I observe massive issues with the following features:
1. Auto app deployment with Android Enterprise (work profile) enrollment
2. VMware Tunnel support with Android Enterprise (work profile) incl. MobileSSO (vIDM)

Without going into details at this point - are there similar experiences out there?

[admin]

Hi Peter,
We have also similar issues in CN556 SaaS environment.... suddenly AFW auto install apps wont install after enrollment of new devices...
if everything is build back.. ( new smart groups and assigments ) then it might work.. but can suddenly broke again...
I open the support ticket for this but they have not a clue what is going on...
I assume that something is broking smart groups and those cannot fixed or i cannot find how... 😞
also we encountered corrupted profiles on iOS devices...

best regards,
MirkoS

[pmeuser]

Hi Mirko, thank you for confirming my observations.
I spent yesterday quite some time with a very experienced VMware engineer to find a pattern that points to the source of the issue. What I can see so far is only, that the troubleshooting log of the device lists all requests to auto install apps, but only Boxer (untouched app config since upgrade) really arives at the device. I will collect more details from the device service log to get better insights, what is going on at the backend. I have also access to CN556.
BTW: Do you see the AirWatch Agent in the App list?

Best regards,
Peter

[admin]

Hi Peter,
Yes i can see aw agent if it's published as public app... we commonly use internal deployment of Agent and then it will not show as app list...

We are service provider which have multiple customers in one AirWatch console and now we have 2 broken AFW configs and 3 working...
I do not know what cause this exactly but if I just make new smart groups and assigments and delete old ones suddenly afw app auto install start working...
This mysterious issue...

Br,
MirkoS

[admin]

HI Peter,

I found a workaround at this issue and in my case it helps everytime... and also speed up app installation quite a lot...

Publish a Application Control profile whit whitelist which include all your public apps that you want to install to devices... after that app installation
You need to do this even if you do not want to use application control... ( I fixed this way 3 enviroments today ) ( I also report this to Vmware support )
will work... this is old bug somewhere 9.0.x version AirWatch but now it's back again...

Hope this help you also...

Br,
MirkoS

[pmeuser]

Mirko, thanks a lot for your suggestion - this solved my issue, too! I was not aware, that my app whitelist was limited to VMware Boxer, only (seems not to be of impact in the previous version). After adding all apps and activating app control, automatic app installation with enrollment works again. In my case there seems to be still an annoying bug: App selection for the whitelist is not filling in the application is. This needs to be done manually.

[admin]

HI Peter,
Good to know that this help you also...
This is only a CN556 issue and hope they somehow fix it because it's big job to add every apps in the list...
I also have this annoying bug which prevents add app id's automatically...

I tested this Cn801 and there's is not a such a issue...
I just don't get support to understand that this is issue... they just told is how it works... ( Indian engineer )
Cn556 have maintenance in next Saturday so I will test this after that again if it will help...
and then we get WS1 9.5 in 3.7.2018 so there will be next potential fix for this...
I talked this about SQL specialist which is working VMware partner and he assume this is something to do whit SQL or job queue and server rebooting might solved this...

Br,
MirkoS

[GolanNave]

cn763 Here. Managed to get some apps to auto install with the above-suggested solution. But boxer will not auto install.
Did anyone manage to resolve this?

[MathieuCLAIR]

Hi,

Do you initialy have any whitelisted apps group ? For example to allow the Samsung Gallery application which is not natively available on Managed Device without an app control profile ?
If yes, this is the cause of the auto app deployment issue.

There are 2 workarounds :
- add all apps to the whitelisted apps group
- de-assign the app control profile AND the whitelisted apps group during the enrollment (configured with user group assignment, and not smart group assignment)

The Boxer app is also automatically installed.

Add application with auto deployment AFTER the enrollment also works like a charm.

According to the AW support, it's an Android issue and Google has been notified. The AW internal team is currently looking into fix. Reference PR number: PR-197209
FYI, I faced this issue on several Cloud AW environments (CN556, CN801, CN1108). So I think it's a general issue.

Hope it'll help.
BR

Mathieu

[nickknightAU]

Thanks for that Mathieu, we switched to your second suggestion and simply set the required Samsung apps to auto install once we removed the whitelisting and app control profile.

Would there be any long term implications to not having the application control profile? We have a COBU environment with Samsung, some COPE in the future.

As far as I can see, the application control and whitelisting is not really necessary anymore, as we have systems apps only enabled on enrolment and most Samsung apps can now be found on the Play Store.

Nick

[SumitVedi]

Hi Guys

I am facing the same issue on 18.10 version. Please help and provide the solution.

When I reassigned the assignment group to app then
o Works apps will install now on a newly installed device. But if we enroll another one, we have to reassign all the apps again in order to get a push action on that device.
o When we go to the device details page and click on Installing an app, the app will install as well.

[Stansfield]

Do you have the firebase cloud messaging patch? https://support.workspaceone.com/articles/360015465213

[SumitVedi]

Yes...It's installed. Current version is 18.10.0.11

[admin]

Hi Sumit V.

You have same kind of issue that was in console version 1903 when they release it.

https://support.workspaceone.com/articles/360021271394-FDB-2551-Smart-Group-device-events-interrupte...

I think you should raise a support ticket to VMware at that...

[KevinAddison]

Updated our test server (on-prem) from 1902 to 1903 and have the same problem. The workaround doesn't really help, yes publishing the app again installs to the devices that are enrolled,however install another device after that and again the apps don't get pushed.

[SumitVedi]

Can anybody please suggest, Is there any patch released for 18.10 (On-Prem) to fix this issue?

[PeterAir]

Related to Android for Work / Android for Enterprise I've seen issues with automatic app installation ever since 9.4.

There are some hotfixes that are supposed to address issues, but the core thing I found to break automatic application deployment is usage of white-list/black-list in combination with application control payload.

After removal of application control payload from devices and removal of white-list/black-list, automatic app installation has been working.

[SumitVedi]

That's quite strange. There is no Application control profile configure in OG. Even after that facing this issue.

[KevinAddison]

I can confirm (at least for us it was) if you have any type  app group that points to the OG where the Enterprise Devices are, then no apps get installed automatically. Doesn't matter if black list, white list or required apps.

[williamjones]

Does anyone have a definitive fix for this? Still having trouble auto deploying/silent installing Apps on AfW CoPE samsung devices, even with combinations of app control and whitelisting.