deploying third-party macos applications: vmware workspace ... · note the link to directly...

GUIDE – MARCH 2019

PRINTED 19 AUGUST 2019

DEPLOYING THIRD-PARTYMACOS APPLICATIONS:VMWARE WORKSPACE ONEOPERATIONAL TUTORIALVMware Workspace ONE

DEPLOYING THIRD-PARTY MACOS APPLICATIONS: VMWARE WORKSPACE ONE OPERATIONAL TUTORIAL

GUIDE | 2

Table of Contents

Overview

– Introduction

– Audience

Deploying Third-Party macOS Applications as Internal Applications

– Introduction

– Prerequisites

– Logging In to the Workspace ONE UEM Console

– Enabling macOS Software Management

– Configuring the Application Catalog

– Preparing macOS Applications for Deployment

– Deploying a Third-Party macOS Application

– Validating Application Install

Deploying Third-Party macOS Applications as Products (Legacy)

– Introduction

– Prerequisites

– Creating a Custom Attribute Profile

– Locating Custom Attributes

– Downloading BBEdit Installer

– Creating Files/Actions

– Creating a Product from Files/Actions


GUIDE | 3

– Validating Product Installation

Summary and Additional Resources

– Conclusion

– Terminology Used in This Tutorial

– Additional Resources

– About the Authors

– Feedback


GUIDE | 4

Deploying Third-Party macOS Applications: VMwareWorkspace ONE Operational Tutorial

OverviewIntroductionVMware provides this operational tutorial to help you with your VMware Workspace ONE®environment. In this tutorial, you enablemacOS software management, deploy a macOS application as an internal application, create a custom attributes profile, and createand assign a product to a device.

AudienceThis operational tutorial is intended for IT professionals and Workspace ONE administrators of existing production environments. Bothcurrent and new administrators can benefit from using this tutorial. Familiarity with networking and storage in a virtual environment isassumed, including Active Directory, identity management, and directory services. Knowledge of additional technologies such asVMware Workspace ONE® Access (formerly VMware Identity Manager) and VMware Workspace ONE® UEM is also helpful.

Deploying Third-Party macOS Applications as InternalApplicationsIntroductionThis exercise helps you to deploy third-party macOS applications as internal apps.

Workspace ONE UEM supports a few different methods for delivering software to managed macOS devices. In this section, learnabout the software delivery methods that are available, and when each method is appropriate to use.

The following software delivery methods are available for macOS:

Apple Business Manager or Apple School Manager — Delivers macOS App Store applications to devices as volume-licensed, purchased applicationsSoftware Distribution — Delivers third-party, non-store applications as internal apps in Workspace ONE UEM 9.3 and later.We cover the procedure to deliver third-party macOS applications as internal apps in this exercise. Product Provisioning — Deploys non-store applications and scripts as products in Workspace ONE UEM (or AirWatch) 9.2and earlier. We recommend that you use either Apple Business Manager or Software Distribution to deliver software. However,if you encounter issues with software distribution, you can follow the legacy method, which is covered in Deploying Third-PartymacOS Applications as Products (Legacy).

The type of software being delivered determines the appropriate delivery method. The following table lists different types of software,and their recommended delivery method.

http://www.vmware.com/products/workspace-one.html

https://www.vmware.com/products/workspace-one/access.html

https://www.vmware.com/products/airwatch-enterprise-mobility-management.html


GUIDE | 5

macOS App Store Applications Non-Store Applications

Delivery Method Apple Business Manager Software Distribution

Examples - xCode - Slack - Microsoft Remote Desktop- Apple's iWork suite- TextWrangler- F5 Access (VPN)- iBooks Author- Microsoft OneDrive- Microsoft OneNote- Quickbooks- VMware Tunnel

- Adobe Creative Suite- Microsoft Office 2016 for macOS- BlueJeans- Camtasia- Audacity - Shell scripts, Python scripts

PrerequisitesBefore you can perform the procedures in this tutorial, you must satisfy the following requirements.

Apple device running macOS version 10.12.6 (Sierra) or laterVMware Workspace ONE Intelligent Hub for macOS version 3.0 or laterWorkspace ONE UEM version 9.3 or later

For more information, see the VMware Identity Manager Documentation and VMware Workspace ONE UEM Documentation.

Logging In to the Workspace ONE UEM ConsoleTo perform most of the steps in this exercise, you must first log in to the Workspace ONE UEM Console.

1. Launch Chrome Browser

On your desktop, double-click the Google Chrome icon.

2. Navigate to the VMware Workspace ONE UEM ConsoleFor example, navigate to https://<WorkspaceONEUEMHostname> where WorkspaceONEUEMHostname is the host name of theWorkspace ONE UEM console.

3. Authenticate In to the Workspace ONE UEM Console

https://www.vmware.com/support/pubs/identitymanager-pubs.html

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/index.html


GUIDE | 6

Enter your Username, for example, administrator.1.Click Next. After you click Next, the Password text box is displayed.2.


GUIDE | 7

Enter your Password, for example, VMware1!1.Click Login.2.

Note: If you see a Captcha, be aware that it is case sensitive.

Enabling macOS Software ManagementIn this section, you configure file storage and macOS software management settings.

1. Access All Settings


GUIDE | 8

Log in to the Workspace ONE UEM Console as an administrator and view the Global Organization Group:

Select Groups & Settings.1.Select All Settings.2.

2. Enable File Storage


GUIDE | 9

Ensure you are at the Global Organization Group unless your particular setup requires configuring at child Organization1.Groups. Expand Installation.2.Select File Path.3.Scroll through the file paths pane and select Enabled for File Storage Enabled.4.Enter the path of a file share accessible from your Device Services and Console servers.5.Select Disabled for File Storage Caching Enabled unless you have planned and sized your Device Services server6.accordingly.Select Enabled for File Storage Impersonation Enabled.7.Enter the username credentials to impersonate to access the file storage path.8.Enter the password for the impersonation user.9.Confirm the password for the impersonation user.10.Click Test Connection and ensure you see Connection Succeeded.11.Click Save.12.

3. Enable Software Management

https://media.screensteps.com/image_assets/assets/001/727/199/original/8cedcd4c-9fd7-4554-b1d5-0268a8cc2ba3.png


GUIDE | 10

In the Settings screen, perform the following steps.

Expand Devices & Users.1.Expand Apple.2.Expand Apple macOS.3.Select Software Management.4.Select Override.5.Select Enabled for Enable Software Management.6.Click Save.7.Ensure settings are Saved Successfully.8.

Configuring the Application CatalogConfigure the application catalog for macOS.

1. Open Safari Web Browser

On your macOS device, click the Safari icon on the dock.

https://media.screensteps.com/image_assets/assets/001/727/195/original/060eebea-5fbc-48d5-9730-88bfaa9beed5.png


GUIDE | 11

2. View Settings

In the Workspace ONE UEM Console:

Select Apps & Books.1.Select All Apps & Books Settings.2.

3. Access Catalog Settings


GUIDE | 12

Select Apps.1.Expand Workspace ONE.2.Expand AirWatch Catalog.3.Select General.4.

4. Enable the Application Catalog


GUIDE | 13

Select the Publishing tab.1.Select Override.2.Enter the Catalog title as App Catalog.3.

5. Enable macOS Platform


GUIDE | 14

Scroll down until you see the platform macOS.1.Select Enabled for macOS.2.Click Save.3.Scroll to the top and click X to exit the pop-up window.4.

Preparing macOS Applications for DeploymentIn this section, you download the VMware AirWatch Admin Assistant tool and use it to prepare another third-party application fordeployment.

1. Open New Browser Tab

On your macOS device, open a new Safari tab.


GUIDE | 15

2. Download Skitch

In Safari, navigate to https://evernote.com/products/skitch.1.Click Download for Mac.2.Do not download the app from the Mac App Store to complete this exercise.3.

The zip file for Skitch will download to the Downloads folder.

3. Download VMware AirWatch Admin Assistant Tool

In the same tab as you downloaded Skitch, paste the link to the VMware AirWatch Admin Assistant tool and press Enter:https://awagent.com/AdminAssistant/VMwareAirWatchAdminAssistant.dmg

The DMG file will download to the Downloads folder.


GUIDE | 16

4. Begin VMware AirWatch Admin Assistant Tool Installation

On the dock, perform the following steps:

Click the Downloads folder (next to the Trash).1.Click VMwareAirWatchAdminAssistant.dmg.2.

5. Launch Installer Package

Double-click the VMware AirWatch Admin Assistant.pkg file.

6. Continue Installer


GUIDE | 17

Click Continue.

7. Review and Continue Installer


GUIDE | 18

Review the License Agreement and click Continue.1.Click Agree if you agree to the license agreement.2.

8. Install Admin Assistant Tool


GUIDE | 19

Click Install.

9. Enter Admin Credentials

If prompted for administrative credentials, enter the credentials required to install.

Enter the Administrator as the Admin User Name on the macOS device.1.Enter the VMware1! as the password for the admin user.2.Click Install Software.3.


GUIDE | 20

10. Close the Installer

Click Close when the installer completes.1.Click Move to Trash to clean up the installer.2.

11. Prepare VMware Admin Assistant Tool


GUIDE | 21

Click the Launchpad on the Dock.1.Click VMware AirWatch Admin Assistant.2.

12. Drag and Drop Skitch


GUIDE | 22

Click the Downloads folder on the Dock.1.Click and HOLD Skitch.2.Drag-and-drop Skitch onto the VMware AirWatch Admin Assistant in the box.3.

The VMware Admin Assistant Tool begins parsing the file to extract information necessary to deploy the software.

13. Monitor Process and Reveal Files


GUIDE | 23

Monitor the progress of the parsing. When it is complete, the wheel changes to a green checkmark.1.In the pop-up window, click Reveal in Finder.2.

14. Review Generated Files

In the Finder window:

Change to Column view.1.Note the Path of the Output for the Skitch files: ~/Documents/VMware AirWatch Admin Assistant/Skitch-2.8.12.


GUIDE | 24

Note the output from the Assistant tool as described here:3.

Skitch-2.8.1.dmg -- The Application has been packaged into a DMG file. (Note:MPKG and PKG files will not be modified)Skitch-2.8.1.plist -- A metadata file (referenced as the pkginfo.plist in munkidocumentation) which contains information used by the munki framework todetermine how to install/uninstall the softwareSkitch.png -- An icon image extracted from the app used for user-friendly displayin the console and Workspace ONE app for macOS

Important: All output for the Admin Assistant tool follows the convention ~/Documents/VMware AirWatch AdminAssistant/{AppName-Version}. At the time this exercise was created, Skitch was at version 2.8.1.

Deploying a Third-Party macOS ApplicationIn this exercise, deploy Skitch, a third-party macOS application, as an internal application in Workspace ONE UEM.

1. Return to Workspace ONE UEM Console

In Safari, select the tab labeled Devices > Dashboard.

2. View Native Internal Apps

Select Apps & Books.1.Expand Applications.2.

https://media.screensteps.com/image_assets/assets/001/727/343/original/fbb94492-d5af-465b-a44c-e098509aef60.png


GUIDE | 25

Select Native.3.Select Internal.4.Select Add Application.5.

3. Upload the Application File

Click Upload.

4. Choose File

Click Choose File.

5. Select Application File


GUIDE | 26

Choose the Documents folder.1.Select VMware AirWatch Admin Assistant.2.Select Skitch-{version} (for example, Skitch-2.8.1).3.Select Skitch-{version}.dmg.4.Click Choose.5.

6. Save Local File

Click Save.


GUIDE | 27

7. Continue Adding Application

Click Continue.

8. Upload Metadata File

Note the link to directly download the VMware AirWatch Assistant (in case you forgot to generate the metadata file and are1.working from a computer where the VMware AirWatch Assistant is not installed).Click Upload.2.


GUIDE | 28

9. Choose File

Click Choose File.

10. Navigate to Plist File

Choose the Documents folder.1.Select VMware AirWatch Admin Assistant.2.Select Skitch-{version} (for example, Skitch-2.8.1).3.

11. Select Plist File


GUIDE | 29

Select Skitch-{version}.plist.1.Click Choose.2.

12. Save Plist File

Click Save.


GUIDE | 30

13. Continue Adding Application

Note the Application File is shown.1.Note the Plist File is shown.2.Click Continue.3.

14. Add Image File


GUIDE | 31

Select the Images tab.1.Select Click or Drag Files Here.2.

15. Navigate to Image File

Choose the Documents folder.1.Select VMware AirWatch Admin Assistant.2.Select Skitch-{version} (for example, Skitch-2.8.1).3.


GUIDE | 32

16. Select Image File

Select {App Name}.png (for example, Skitch.png).1.Click Choose.2.

17. Review Scripts Tab


GUIDE | 33


GUIDE | 34

Select the Scripts tab.1.The Pre-Install Script runs before the Workspace ONE Intelligent Hub runs the dmg/pkg/mpkg file that installs the2.application and can be used to set-up prerequisite items before the installer runs. The pre-install script must have an exit codeof zero (0) for the install to proceed.The Post-Install Script runs after the Workspace ONE Intelligent Hub executes the dmg/pkg/mpkg file. This can be useful3.for applying configurations after the software completes the installation.The Pre-Uninstall Script runs before the Workspace ONE Intelligent Hub initiates the uninstall. The pre-uninstall script must4.have an exit code of zero (0) for the uninstall to proceed.The Uninstall Method defines how the Workspace ONE Intelligent Hub uninstalls software. Typically, Remove Copied Items5.is used for a DMG installer, and Remove Packages is used for a PKG installer. The Post-Uninstall Script provides a method to validate an uninstall was completed and potentially handle any cleanup for6.the uninstall.The Install Check script assists the Workspace ONE Intelligent Hub with determining whether an install needs to happen. This7.script can be useful for desired state purposes and ensuring that a software install remains intact on a user's machine. If thescript has an exit code of zero (0), the agent assumes an Install is needed.The Uninstall Check Script validates whether an uninstall has occurred. If the script has an exit code of zero (0), the agent8.determines an uninstall is (or is still) required.

Note: Use the pre and post install scripts to avoid repackaging installers. By including scripts, you can automate tasks that wouldnormally require user input before/after an install.

For more information, see Pre And Postinstall Scripts on the Munki wiki.

Important: Scripts must include the shebang (#!) statement on the first line. Examples include the following:

#!/bin/bash#!/bin/sh#!/usr/bin/python

18. Review Deployment Tab

Select the Deployment tab.1.Note the different Restart actions.2.Note the section to include conditions which can further constrain the deployment.3.

For more information, see Conditions on the munki wiki.

https://github.com/munki/munki/wiki/Pre-And-Postinstall-Scripts

https://github.com/munki/munki/wiki/Conditional-Items


GUIDE | 35

19. Save and Assign Application

Select Terms of Use.1.Review the ability to add terms of use to a software title. 2.Click Save & Assign.3.

20. Open Assignment Settings

Click Add Assignment.


GUIDE | 36

21. Configure Assignment Settings

Select the assignment group associated with your organization group (formatted like your email address).1.Select Auto for App Delivery Method.2.Select Enabled for Remove on Unenroll.3.Click Add.4.

22. Save and Publish the Application


GUIDE | 37

Ensure your recently added Assignment shows in the list of Assignments.1.Click Save & Publish.2.

23. Publish the Application

Click Publish.


GUIDE | 38

24. Review Published Application Information

Review the newly published application.

Validating Application InstallWith the macOS device enrolled, the published application should begin downloading and installing immediately. This exercise helpsyou to manually validate the application is installing and/or installed.

1. Check the Agent Status

Click the Workspace ONE shield in the menubar.1.As the agent processes application installs, you will see a note about Handling Application Updates. Depending on the2.speed of your connection, the agent may finish processing the install before you have a chance to see the status on themenubar applet.

Note: In a Workspace ONE UEM environment integrated with VMware Identity Manager, the end-user will see more verboseinstallation feedback from within the macOS native Workspace ONE application. Feedback using this method is outside the scope ofthis exercise.

https://media.screensteps.com/image_assets/assets/001/727/325/original/596a6076-2b03-4eb3-aa74-1c42bb027d0a.png


GUIDE | 39

2. Launch Terminal

Click the LaunchPad on the Dock.1.Enter terminal to filter the LaunchPad apps.2.Click Terminal.3.

3. Review ManagedSoftwareUpdate Log

Tail the ManagedSoftwareUpdate.log file by running the following command. Note: The -F parameter means the tail1.command continually monitors the file for updates (displaying progress as the software installation continues).

tail -n 20 -F /Library/Application\ Support/AirWatch/Data/Munki/Managed\Installs/Logs/ManagedSoftwareUpdate.log

https://media.screensteps.com/image_assets/assets/001/520/811/original/46f92703-462e-4909-9160-075c3e7afab7.png


GUIDE | 40

Search for a line in the results stating Skitch version [version] (or newer) is already installed. This1.indicates the software has been installed.

Note: The agent initiates a Managed Software Update within the munki framework multiple times. Depending on where the agent iswithin the process of the install, the tail command may output lines similar to the following:

[Date/Time] Need to install Skitch[Date/Time] Downloading Skitch-2.8.1.dmg from Skitch-2.8.1.dmg[Date/Time] The following items will be installed or upgraded:[Date/Time] + Skitch-2.8.1[Date/Time] Processing installs[Date/Time] Installing Skitch (1 of 1)[Date/Time] Mounting disk image Skitch-2.8.1.dmg[Date/Time] The software was successfully installed.

4. Check for App in the Launchpad

Click the Launchpad icon on the Dock.1.Check if the Skitch application is present.2.

5. View the Application Status in the Workspace ONE UEMApplication Catalog


GUIDE | 41

Click the Application Catalog weblink on the Dock.1.Note the Installation Status for Skitch.2.

Key TakeawaysmacOS applications can be deployed using the Munki framework (Internal Application) or a detailed manifest of scripts andpackages (Product Provisioning, not covered in this exercise).Detailed status on installation progress is delivered to the end-user using the Workspace ONE native application for macOS(not covered in this exercise)Workspace ONE UEM provides an application catalog to allow user and device specific self-service requests for applicationinstallation.

Deploying Third-Party macOS Applications as Products(Legacy)IntroductionThis exercise helps you to use the legacy method of product provisioning to deploy third-party macOS applications.

Workspace ONE UEM supports a few different methods for delivering software to managed macOS devices. In this section, learnabout the software delivery methods that are available, and when each method is appropriate to use.

The following software delivery methods are available for macOS:

Apple Business Manager or Apple School Manager — Delivers macOS App Store applications to devices as volume-licensed, purchased applicationsSoftware Distribution — Delivers third-party, non-store applications as internal apps in Workspace ONE UEM 9.3 and later.This method is covered in Deploy Third-Party macOS Applications as Internal Applications.Product Provisioning — Deploys non-store applications and scripts as products in Workspace ONE UEM (or AirWatch) 9.2and earlier. We recommend that you use either Apple Business Manager or Software Distribution to deliver software. However,if you encounter issues with software distribution, you can follow the legacy method, which is covered in this exercise.

The type of software being delivered determines the appropriate delivery method. The following table lists different types of software,and their recommended delivery method.


GUIDE | 42

macOS App Store Applications Non-Store Applications

Delivery Method Apple Business Manager Software Distribution

Examples - xCode - Slack - Microsoft Remote Desktop- Apple's iWork suite- TextWrangler- F5 Access (VPN)- iBooks Author- Microsoft OneDrive- Microsoft OneNote- Quickbooks- VMware Tunnel

- Adobe Creative Suite- Microsoft Office 2016 for macOS- BlueJeans- Camtasia- Audacity - Shell scripts, Python scripts

PrerequisitesBefore you can perform the procedures in this tutorial, you must satisfy the following requirements.

Apple device running macOS version 10.12.6 (Sierra) or laterVMware Workspace ONE Intelligent Hub for macOS version 3.0 or laterWorkspace ONE UEM version 9.3 or later

For more information, see the VMware Identity Manager Documentation and VMware Workspace ONE UEM Documentation.

Creating a Custom Attribute ProfileCustom Attributes are a built-in function of the VMware Workspace ONE Intelligent Hub for macOS. An administrator can deliver ashell script in a profile payload, and the echo result of that script is returned to the console as custom information about that device. Inthe context of product provisioning, one or more custom attributes can be used to further constrain product deployment to deviceswithin an assignment group.

This section demonstrates how to create a custom attribute profile.

1. Create Custom Attribute Profile

In the Workspace ONE UEM console:

Select Devices.1.

https://www.vmware.com/support/pubs/identitymanager-pubs.html

https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/index.html


GUIDE | 43

Select Profiles & Resources.2.Select Profiles.3.Select Add.4.Select Add Profile.5.

2. Select Profile Platform

Select the macOS icon.

3. Select the Profile Context

Select the Device Profile icon.

4. Configure General Profile Settings


GUIDE | 44

Click General if it is not already selected.1.Enter BBEdit Version for the Name.2.Select Auto for the Assignment Type.3.Click in the Assigned Groups field. This will pop-up the list of created Assignment Groups. Enter All Devices and select the4.All Devices ([email protected]) Smart Group.Note: You may need to scroll down to find the Assigned Groups field.

NOTE: You do not need to click Save or Save & Publish at this point. This interface allows you to move around to different payloadconfiguration screens before saving.

5. Configure Custom Attributes Payload


GUIDE | 45

Scroll down on the list of Payload Types on the left side.1.Click Custom Attributes.2.Click Configure.3.

6. Enter Local Host Name Custom Attribute Command


GUIDE | 46

Enter BBEdit-Version as the Attribute Name.1.Enter the following command. Be sure to use the correct slash, two hyphens, and proper capitalization.2.if [ -x "/Applications/BBEdit.app" ]; then /usr/bin/defaults read/Applications/BBEdit.app/Contents/Info.plist CFBundleShortVersionString ; else echo "0.0"; fi

Select 1 Hour as the Reporting.3.Click Save & Publish.4.

7. Publish to Device Assignment


GUIDE | 47

Click Publish.

Locating Custom AttributesAfter Workspace ONE UEM delivers a custom attributes profile/payload to a device, the agent reports the initial value of the customattribute back to Workspace ONE UEM and begin the Schedule or Event monitoring. Custom attribute values that have been reportedback to the console can be viewed in the device details.

1. Select Your Enrolled Device


GUIDE | 48

Select Devices.1.Select List View.2.Select your enrolled macOS device to access the Device Details view.3.

2. Access Custom Attributes

Click More.1.Click Custom Attributes.2.

3. Review Custom Attributes

https://media.screensteps.com/image_assets/assets/001/846/031/original/3f32f53b-4089-4ef9-80ef-53b8be6d96a3.png


GUIDE | 49

Note that the Source of the Attributes is Device Sourced, meaning it was gathered at the device and sent to Workspace ONE1.UEM.Note the list of Attributes. 2.Note the value of each Attribute. These values were generated by the output of your command/script in the Custom Attributes3.payload.

The value is currently 0.0 because BBEdit is not installed on the device.

Downloading BBEdit InstallerNext, download the BBEdit installer file.

1. Open Safari Browser

If not already open, click the Safari icon in the Dock.

2. Browse to BareBones Software Website

Navigate to https://www.barebones.com/products/bbedit/download.html.


GUIDE | 50

3. Download BBEdit 12 Evaluation for macOS

Click Download.

Creating Files/ActionsA product can comprise one or more Files/Actions. Files/Actions are the building blocks of a product, containing a set of files and amanifest of actions to take against those files. A Files/Actions set can also contain a corresponding uninstall manifest which directs theWorkspace ONE Intelligent Hub as to how a product should be removed during an Enterprise Wipe. This exercise demonstrates howto create a basic set of files/actions in order to install and uninstall BBEdit.

1. Browse to Files/Actions


GUIDE | 51

In the Workspace ONE UEM Console, perform the following:

Select Devices.1.Expand Staging & Provisioning.2.Expand Components.3.Select Files/Actions.4.Click Add Files/Actions.5.

2. Choose the macOS Platform


GUIDE | 52

Select Apple macOS.

3. Name the Files/Actions Item

Enter BBEdit Install as the Name.1.Select the Files tab.2.

4. Add Files to Files/Actions


GUIDE | 53

Select Add Files.

4.1. Choose Files to Upload

Select Choose Files.

4.2. Select File from Finder


GUIDE | 54

Click the Downloads folder.1.Select the BBEdit_<version>.dmg file.2.Select Choose.3.

Note: The BBEdit Installer will be located in your default Downloads folder. Common folders to check are the Desktop andDownloads folders.

4.3. Save the File to Files/Actions

Click Save.


GUIDE | 55

5. Enter Download Path

Enter /tmp as the download path.1.Click Save.2.

Note: In this example, we use /tmp as the download path as it is automatically cleaned up by macOS. If you want Product Downloadsto persist on the file system, you must choose a different download path.

6. Copy File Path


GUIDE | 56

Click and drag to highlight the Path field.1.Right-click (or Control-click) the highlighted path and select Copy.2.Select the Manifest tab.3.

7. Add Action to Install Manifest

Click Add Action under Install Manifest.

7.1. Configure Add Manifest Action


GUIDE | 57

The Install Manifest comprises the sequence of actions that must be performed to install the files you have included in theFiles/Actions. This could involve copying or moving files, installing dmg/pkgs, and running scripts.

Select Install as the action.1.Paste the File Path you copied previously: /tmp/BBEdit_<version>.dmg. 2.Select Save.3.

8. Add Action to Uninstall Manifest

Click Add Action under Uninstall Manifest.

8.1. Add Action to Uninstall Manifest


GUIDE | 58

The Uninstall Manifest comprises the sequence of actions that must be performed in order to remove or revert the files and actionsyou have taken as part of an install. The Uninstall Manifest also instructs the agent how to remove the product during an EnterpriseWipe.

Select Uninstall as the action.1.Enter the name of the App as it appears in the list of Applications when installed: BBEdit2.Select Save.3.

9. Save File/Actions


GUIDE | 59

Select Save.

Creating a Product from Files/ActionsThis exercise helps you to create a product from Files/Actions.

1. Add Product


GUIDE | 60

In the Workspace ONE UEM Console:

Select Devices.1.Expand Staging & Provisioning.2.Select Product List View.3.Select Add Product.4.

2. Choose Product Platform

Select Apple macOS.

3. Complete General Information


GUIDE | 61

Enter Install BBEdit for the Product Name.1.Click in the Assigned Groups field and select All Devices ([email protected]).2.Click Add Rules.3.

4. Add Dependency Rules


GUIDE | 62

Click Add Rule.1.Select BBEdit-Version @ AirWatchAgent for the Attribute/Application.2.Select <> for the Operator.3.Select Enter Manually for the Value.4.Enter 12.1.5 (or the most current version of BBEdit).5.Note that the Rule Logic field is built out automatically based on your selections and inputs.6.Select Save.7.

5. Add Manifest to Product

https://media.screensteps.com/image_assets/assets/001/826/785/original/8c6d0781-0fd8-4ebf-817a-a0aeff115ab0.png


GUIDE | 63

Select the Manifest tab.1.Select Add.2.

6. Choose Manifest Item

Select Install Files/Actions in the action(s) menu.1.Select BBEdit Install as the Files/Actions item.2.Select Save.3.

7. Set Product Type and Activate


GUIDE | 64

Select the Deployment tab.1.Select Required as the product type.2.Select Activate.3.

8. Confirm Device Assignment


GUIDE | 65

Select Activate.

Validating Product InstallationAfter activating the Product, you are taken back to the Product List View in the Workspace ONE UEM Console, which is located underDevices > Staging & Provisioning > Product List View.

https://media.screensteps.com/image_assets/assets/001/826/791/original/77bd6e9a-702f-49ca-9ee6-1487f03a7a54.png


GUIDE | 66

You may need to click the Refresh button if the shown values are not populated.1.Note the number of Compliant devices (the product installed successfully).2.Note the number of devices where product installation is in progress.3.Note the number of failed product installs.4.

Note: All the status counts are clickable and display a list view of all devices with that status (for example, Compliant, In Progress, andFailed).

1. Validate Install on Managed macOS Device

Select the Finder icon in the Dock.1.Select Applications.2.Validate BBEdit is present in the application list.3.

https://media.screensteps.com/image_assets/assets/001/846/036/original/049745df-7fdb-412c-9551-1a02862d10c3.png


GUIDE | 67

Summary and Additional ResourcesConclusionThis operational tutorial provided steps to deploy third-party macOS applications in two ways; as internal apps and as products.

Procedures included:

Enabling macOS software managementPreparing and deploying a macOS application as an internal applicationCreating a custom attributes profileCreating and assigning a product to a device

Terminology Used in This TutorialThe following terms are used in this tutorial:

application storeA user interface (UI) framework that provides access to a self-service catalog, publicexamples of which include the Apple App Store, the Google Play Store, and the MicrosoftStore.

auto-enrollmentAuto-enrollment simplifies the enrollment process by automatically enrolling registereddevices following the Out-of-Box-Experience.

catalogA user interface (UI) that displays a personalized set of virtual desktops and applications tousers and administrators. These resources are available to be launched upon selection.

cloudAsset of securely accessed, network-based services and applications. A cloud can also hostdata storage. Clouds can be private or public, as well as hybrid, which is both private andpublic.

device enrollmentThe process of installing the mobile device management agent on an authorized device.This allows access to VMware products with application stores, such as Workspace ONEAccess (formerly VMware Identity Manager).

identity provider (IdP)A mechanism used in a single-sign-on (SSO) framework to automatically give a user accessto a resource based on their authentication to a different resource.

mobile devicemanagement(MDM) agent

Software installed on an authorized device to monitor, manage, and secure end-user accessto enterprise resources.

one-touch loginA mechanism that provides single sign-on (SSO) from an authorized device to enterpriseresources.

service provider (SP) A host that offers resources, tools, and applications to users and devices.

virtual desktop The user interface of a virtual machine that is made available to an end user.

virtual machineA software-based computer, running an operating system or application environment, that islocated in the data center and backed by the resources of a physical computer.

For more information, see the VMware Glossary.

https://www.vmware.com/support/pubs/


GUIDE | 68

Additional ResourcesFor more information about Workspace ONE, explore the VMware Workspace ONE Activity Path. The activity path provides step-by-step guidance to help you level-up in your Workspace ONE knowledge. You will find everything from beginner to advanced curatedassets in the form of articles, videos, and labs.

Additionally, you can check out the VMware Workspace ONE and VMware Horizon Reference Architecture which provides aframework and guidance for architecting an integrated digital workspace using VMware Workspace ONE and VMware Horizon.

About the AuthorsThis tutorial was written by:

Robert Terakedis, Senior Technical Marketing Manager, End-User-Computing Technical Marketing, VMwareHannah Jernigan, Technical Marketing Manager, End-User-Computing Technical Marketing, VMware

FeedbackThe purpose of this tutorial is to assist you. Your feedback is valuable. To comment on this tutorial, contact VMware End-User-Computing Technical Marketing at [email protected].

https://techzone.vmware.com/becoming-workspace-one-hero

https://techzone.vmware.com/resource/workspace-one-and-horizon-reference-architecture

https://techzone.vmware.com/users/robert-terakedis

https://techzone.vmware.com/users/hannah-jernigan

mailto:[email protected]

VMware, Inc. 3401 Hillview Avenue Palo Alto CA 94304 USA Tel 877-486-9273 Fax 650-427-5001

www.vmware.com

Copyright © 2019 VMware, Inc. All rights reserved. This product is protected by U.S. and international

copyright and intellectual property laws. VMware products are covered by one or more patents listed at

http://www.vmware.com/go/patents. VMware is a registered trademark or trademark of VMware, Inc. in

the United States and/or other jurisdictions. All other marks and names mentioned herein may be

trademarks of their respective companies.