Workspace ONE Assist is a remote management service that provides IT and Helps Desk personnel with the ability to remotely troubleshoot, support, maintain, and provide training on mobile and desktop devices, without requiring physical access to the device. Assist offers tremendous value for our Knowledge Worker/Enterprise customers and the Rugged/Business critical market. Assist provides several tools to enable IT to troubleshoot and resolve various classes of device issues across the various platforms; Assist includes Remote View/Control, File Manager, Command Line/Shell, and Registry Editor. Assist eliminates end-user downtime, lost productivity, device returns, visits to Help Desks, and site visits by IT.
Workspace ONE Assist includes the following components:
Workspace ONE Assist Core Services: Services responsible for coordinating communication and providing service discovery for all other Workspace ONE Assist services. All database communication is handled through these services.
Workspace ONE Assist Portal Services: Services that host the Workspace ONE Assist administration portal that manages remote device sessions and registration.
Workspace ONE Assist Application Services: Services responsible for communicating with devices available for remote management which already been enrolled before, please check devices enrollment from the basic guide: Deploy Workspace One 101 – For Beginners.
Workspace ONE Assist Connection Proctor: Proctor for managing device connections to the Workspace ONE Assist server. Simultaneously handles multiple requests for remote management sessions.
Database: Microsoft SQL Server database that stores the Workspace ONE Assist system and tenant configuration, operations, and logging, such as the accrual of historical data showing when a device was enrolled in remote management.
Install Workspace ONE Assist to an On-Premises Environment:
1. we will Generate the Workspace ONE Assist T10 API Certificate:
Download the installer package, Workspace ONE Assist installer from VMware Workspace ONE Assist 5.3 Installer (You must generate the T10 API root and intermediate certificates used during an on-premises installation).
Note: The certificate generator is called RemoteManagementCertificateGenerator_9_2. This installer must be run on a machine with the same locale settings as the database server to ensure that the same date format is set in the SQL script. You must run this certificate generator as an administrator.
Run the Remote Management Certificate Generator which is included in the installer package.
From Workspace ONE UEM console, go to GROUPS & SETTINGS.
Click All Settings.
Click System.
Click Advanced.
Click Site URLs.
Go to Workspace ONE section, then copy the string in the Remote Management CN text box.
Set the connection type to be Remote Management.
Set the deployment to be On-Premises.
Put the Remote Management CN which we copied before at the Certificate Common Name.
Click Generate Certificates.
Set a password for the certificate, we will use it later.
Go to the folder that contains the certificate, Copy the p7b file to c:\temp\certs folder on the Workspace ONE Assist Server.
The certificate has been generated successfully.
2. Install Site SSL Certificate, Assist On-Premises Only:
SSL certificates provide secure, encrypted communications between a website and an Internet browser. The SSL certificate secures HTTPS binding for the management website for port 443 and allows a secure connection. This secure connection is between the admin and Web services. Also, the SSL certificate secures the connection to the Connection Proctor on port 8443 (or port 443 when the Connection Proctor (CP) Service runs on a separate server). You must provide the SSL certificate is a wildcard or SAN certificate.
Run the Microsoft Management Console (MMC).
Click file then click Add/Remove Snap-in.
Click Certificates, then click Add.
Click Computer Account, then click Next.
Click Local Computer, then click Finish.
Click Ok.
Click Certificates (Local Computer), then click Personal.
Click Certificates.
In the Action menu of the MMC application, click All Tasks.
Click Import.
Click Next to begin the Wizard.
Click Browse to locate the SSL certificate in the PFX file format which we generated before, then give it a name.
Click Open to import it.
Enter the Certificate password.
Add checkmarks to the two boxes labeled Mark this key as exportable and Include all extended properties.
Click Next.
Select Place all certificates in the following store and set the Certificate store to ‘Personal’.
Click Next.
Confirm all the presented information is correct, then click Finish.
Your SSL certificate has been installed successfully.
We are installing Workspace ONE Assist for the first time, so you do not need to bind the SSL certificate to a website or renew the site thumbprint.
3. Standard (Basic) Installation of Workspace ONE Assist:
Download Workspace ONE Assist installer from https://my.workspaceone.com, then save it to the Workspace ONE Assist server.
Right-click the installer file and select Run as administrator.
Click Next.
Choose any directory to install Workspace ONE Assist on it.
Click Standard Installation (Basic) and then select Next.
Click Connect to existing SQL Server, then enter all required data for it.
Enter your Tenant FQDN (we explained it before, please click here).
In the SSL Certificate text box, select the folder button, then select the SSL certificate which we generated before.
click OK.
Uncheck Apply Default Settings.
Select the folder icon to attach the T10 certificate.
Browse for the T10 certificate which we downloaded before.
Click Open.
Click Save.
Click Next.
Click Install.
Click Next after the installation is finished.
Leave the Execute Resource pack check box selected, then click Finish.
You have successfully installed the Workspace ONE Assist.