Vmware Airlift

airlift is a bridge..helps migrate device collections into airlift product..
then
map to UEM..airlift doens't do the mgmt..just help to bridge sccm with UEM..can
also use to to migrate applications..saves times when you have bunch of win32 apps
in sccm and now you can move it over to UEM.. then you can use smargroup to deploy
those apps down to your devices and users...
so you can do what's called modern mgmt.. modern mgmt..traditional mgmt like sccm
is designed to manage devices on domain running on corp network or vpn. so modern
mgmt..basically means you have cloud based mgmt for devices that are off the corp
network with SSP capabilities.
so on the device, you need to install intelligent hub..airlift doesn't enroll

device...so the process of Mapping device collections from SCCM does not enable
Workspace ONE UEM management functionality directly. You must enroll devices to
begin using modern management. Mapping only creates a relationship between
collections, organization groups, and smart groups.
and same thing for apps..it will import the apps..but the assignment using
SmartGroup needs to be done manually still..
we don't bring profile config over from SCCM..only look at win10 devices..any
change on collection if remove/delete..or any change in apps..on 2hr interval..it
will sync over ..or can do manual sync..
so airlift install needs api key to authenticate with UEM and also to grab OG info
and such... to talk to sccm it uses WMI..WINRM..not really api driven..so all
standard calls that's builtin the SCCM..so when you run airlift..it has a web
service installed or enabled as part of the install and has a mongodb which is used
to cache data from sccm and uem so when you do something don't have to make calls
back..so you can see it will open on port 5000
so when launced you put in the info to connect to UEm.. same as login via
browser..just using API this time..so asks for username/password..it will validate
and if wrong you wil know..
then next screen it will ask for SCCM info..like the url for sccm server..the site
code which is hierarchy in SCCM..then domain/username and password..regular user
account with read only access to SCCM should be sufficieint..and also part of the
RemoteUsers group on SCCM box..as thats used by WinRM to figure out if an account
is ok or not
... so SCCM is on prem and airlift is also onprem and same domain and same
location.. since the queries that go to it is a bit more involved compare to airlft
to UEM.... and UEM can be on cloud..so all it needs is outbound connection to
UEM..the queries to sccm..and again
Then you get to come to the getting started page..which woudl take you to
collections..it will bring out device collections from SCCM. it doesn't show all
collections...it will only work with windows 10 devices..so if you have other
collections of windows 7 etc..that won't appear here.
Only collections and devices that match the following criteria are displayed:
The collections contain at least one Windows 10 device
The devices have a ConfigMgr client installed
The devices are not marked as obsolete
so if you click on the collection inside on airlift can see devices within that
collection..uses serial numbers to map devices between sccm and uem...if click
collections again..can select radio button and click map button..can enroll and
manage..when click mapp..can type a new SG name or select one that you already
have...since its using the api to do this.. then once finish..all 3 boxes
available..if click manage takes to the SG directly..can clikck of SG..and see a
new tag added..added can see the internal SCCM code for SCCM...and later when enrol
or push apps,profiles,policies.. this tag is added so that's how it's doing the
magic behind the scenes
next you can look at applications..which are currently setup in SCCM under software
library..app mgmt..apps..if your sccm admin..first version of airlft...doesn't
support packages ..only apps..packages support came in airlift 2.2...also supports
apps that contain mst,msp files..which is latest
version...https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/AirLift-
Release-Notes.html#NF2.2
..so if highlight the validation tab on airlift for the apps..if see yellow
triangle..complex sccm app installation behaviour will default to device in
context..means we install in device context instead of user context..because of how
the installation parameter is setup..for exmaple..maybe uninstall string is not
setup..which is required by UEM..so shows potential issues..
back to UEM conole..no apps installed..no records.. back to airlift..select the

app..so can export..again using API to talk to uem..so no conversion/repackaging
like other mdm solutions.. once done.. get hyperlink that takes to UEM
directly..now it doesn't do assignment for apps automatically so need to do the SG
assignment manually since maybe you don't wnat the apps to go to every device..so
once finish SG..publish it..if device didn't appear..
now go back to airlift..can see settings... there's a initiate full sync

option..default every 2 hours...so this ensures the same tag we saw used in SG be
set on the win10 machines..and once this is done..the app should appear..another
thing that's avialable if vmware policy builder which helps in creating
CSP..configuration service
providers..https://blogs.vmware.com/euc/2018/07/introducing-policy-
builder.html...Configuration Service Providers (CSP) are the interfaces used to
read or set policies on the Windows device... effectively create xml files and
upload them as custom profile on UEM.. ..GPOS run on domain.. CSP works on
anything..https://www.policypak.com/pp-blog/windows-10-mdm and
https://docs.microsoft.com/en-us/windows/client-management/manage-windows-10-in-
your-organization-modern-management
so the policy builder is cloud hosted tool...https://www.vmwarepolicybuilder.com/

Vmware Airlift

Uploaded by

Copyright:

Available Formats

Vmware Airlift

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Vmware Airlift

Uploaded by

Copyright:

Available Formats

airlift is a bridge..helps migrate device collections into airlift product..

so on the device, you need to install intelligent hub..airlift doesn't enroll

back to UEM conole..no apps installed..no records.. back to airlift..select the

now go back to airlift..can see settings... there's a initiate full sync

so the policy builder is cloud hosted tool...https://www.vmwarepolicybuilder.com/

You might also like

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.