VMworld 2019 Europe is getting started today in Barcelona. In some years, the news out of the European show is relatively light, but this year, it’s almost equal to what we saw at the US edition of VMworld 2019. There’s a lot to get through, so let’s just dive right in.
Microsoft Endpoint Manager partnership
First comes word of “VMware Workspace ONE for Microsoft Endpoint Manager.” (Microsoft Endpoint Manager is the new term for SCCM and Intune, revealed all of a day ago at Microsoft Ignite 2019.) We’ve only had a chance to look at the press release, but this is part of their broader, ongoing partnership.
This solution will manage Windows 10 devices from the Workspace ONE console, while pulling in “data and cloud insights” from Microsoft Endpoint Manager. It also promises “unique onboarding workflows, proactive employee experience management, and self-service access to enterprise services and apps.” It will be available in the middle of 2020, and VMware will provide migration assistance. The VMware and Microsoft collaboration will also cover conditional access to Microsoft 365 apps from BYO devices, coming as a tech preview soon.
There are a lot of companies out there that have had AirWatch for close to a decade and SCCM for over two decades (to use the old terms), and I’m sure they wanted a way for these two products to play nice, similar to what we saw when VMware struck up a partnership with Okta.
Between this new solution and Microsoft Endpoint Manager itself, I can tell you what I want to spend my time on over the next few weeks! Either way, it’s great to see this push behind modern management.
Workspace ONE Intelligence Trust Network updates
Just last week, VMware announced the Automation Connector, which allows events in Workspace ONE Intelligence to be pushed out to any third party service, via a REST API. Now, they’re announcing the open Trust Network Ingest API, so anyone can push data into the platform. Together, these will really open up the possibilities around the Trust Network, and there will be no more need to wait for VMware to build custom integrations with partners. This is something we’ve been wanting to see for a while.
VMware also has a couple of new Trust Network partners to announce. Zscaler, Wandera, and Zimperium have all committed to building integrations against the API. And speaking of Trust Network partners, now that the Carbon Black acquisition has closed, VMware is renamed all the SKUs, and created a new SKU to bundle it with Workspace ONE.
On this front, VMware is publishing a Zero Trust reference architecture. They’ve had just about all the elements they need for a while, but now they’re starting to talk about it more and take more ownership of the term, as we learned at VMworld US. (Even Brian Madden, the person, has written about it.) To go along with the reference architecture, VMware is writing implementation guides and spinning up professional services offerings. It’s been impossible to miss the buzz around zero trust; now it’s good to see more ways to help customers implement it.
More on employee experience
The entire EUC space is now talking about employee experience, and along these lines, VMware announced Day 1 employee onboarding features back VMworld US. Today, they’re following up with something they call the “Candidate Experience,” which is a way for new hires to use Workspace ONE Intelligent Hub even before their official start date. This will focus on things like signing paperwork, picking out devices, and accessing directories and HR documents.
Another new VMware partner is HID Global. Workspace ONE Intelligent Hub will have support for virtual ID cards that users can show to security guards.
I’m curious what might or might not be possible in the future based on smartphone hardware (NFC, etc.) and HID’s readers. And, you can also imagine a lot of cool ways this could someday feed into conditional access policies and Workspace ONE Intelligence, so I’m looking forward to seeing where this blending of physical and virtual goes.
After VMworld, I wrote about the whole strategy behind Horizon Services for Multi-Cloud. Today, there are several updates to cover:
- Monitoring is GA for all delivery models, and the new image management features will go into beta in Q4.
- App Volumes 4.0 will be available for Horizon 7 and Horizon 7 on AWS next year. The idea going forward will be to just have one app per stack, instead of several apps.
- Using Workspace ONE Unified Endpoint Management to manage persistent desktops in Horizon is now certified and validated.
- For Horizon Cloud on Azure, the tech preview for WVD is coming in Q4.
- Support for Microsoft Teams is now available.
- And the Horizon management console API is available.
Again, I’m pretty amazed at all the news that VMware is putting out, just two months after VMworld Europe. Check it out these other new features:
- There are new integrations with Jira, BMC Remedy, and PagerDuty.
- The Privacy Guard SDK (which is available to developers in addition to being part of the Workspace ONE apps) will be able to notify users about important UEM policy changes in real time.
- Verify, the built-in MFA available in Workspace ONE, will no longer be a freestanding app. Instead, it will be available in Workspace ONE Intelligent Hub and Access, and the current Verify app will eventually be deprecated.
- Workspace ONE Smartfolio is a new app intended to deliver select documents to specific user roles. The idea grew out of AirWatch’s electronic flight bag work; VMware realized they could apply the concept to other verticals.
- The old Apteligent features for consumer apps, which VMware had stopped selling to new customers a while back, are now being relaunched as Workspace ONE Intelligence for Consumer Apps. This will use the Workspace ONE console, but it will be sold as a freestanding product.
- Workspace ONE Assist now supports macOS; after recently adding support for Windows 10. So, VMware has taken the AetherPal acquisition and gone from just rugged use cases to all devices.