Lab Guidance

Note: It may take more than 90 minutes to complete this lab. You should expect to only finish 2-3 of the modules during your time.  The modules are independent of each other so you can start at the beginning of any module and proceed from there. You can use the Table of Contents to access any module of your choosing.

The Table of Contents can be accessed in the upper right-hand corner of the Lab Manual.

End users have more flexibility than ever before in where and how they work and access corporate resources. With Workspace ONE, this increased end-user flexibility does not have to sacrifice security to be accomplished. Learn how the Workspace ONE product suite can be leveraged to protect and patch devices through the Workspace ONE Intelligence platform and how external devices can receive access securely through the Unified Access Gateway.

Lab Module List:

  • Module 1 - Workspace ONE Intelligence - Addressing Common Vulnerabilities and Exposures (CVE) (30 minutes) (Intermediate) Learn how to address Common Vulnerabilities and Exposures (CVE) for your managed Windows 10 devices with Workspace ONE Intelligence by automatically correlating CVEs, Microsoft KBs (patches), and risk scores derived from the Common Vulnerability Scoring System (CVSS), allowing you to take automated remediation to identify vulnerable devices, take actions such as approve patches against impacted devices and leverage Dashboards to monitor the remediation progress.
  • Module 2 - Workspace ONE Intelligence - Securing and Updating Windows 10 (45 minutes) (Intermediate) Learn how to leverage Workspace ONE Intelligence to provide insights and real-time visibility into the security risks affecting your managed Windows 10 devices, and how Workspace ONE Intelligence can take automated remediation actions, such as approve patches to the impacted devices, keeping them secure and up to date.
  • Module 3 - Unified Access Gateway - Reverse Proxy and Device Certificate Authentication (45 minutes) (Intermediate) Learn how to configure a Web Reverse Proxy instance on the Unified Access Gateway to restrict access to an intranet website by using device certificates as an authentication requirement. This feature alleviates development requirements without compromise security, by handling authentication at the Unified Access Gateway on the DMZ instead of directly on the website hosted on the internal network.
  • Module 4 - Unified Access Gateway - Identity Bridging and Single Sign-On to Internal Web Applications (60 minutes) (Intermediate) Enabling organizations to mobilize their remote workforce providing access to critical internal web applications is a significant challenge on the digital transformation journey. Learn how to set up the Unified Access Gateway in Identity Bridging mode integrated to Workspace ONE Access, to provide Single Sign-On (SSO) to legacy web apps using Kerberos Constrained Delegation (KCD) and unparallel experience to the end user.

Lab Principals:

  • Roger Deane, Director, Workspace ONE Technical Marketing, USA

Lab Captains:

  • Shardul Navare, Sr. Technical Marketing Architect, USA
  • Andreano Lanusse, EUC Staff Architect, USA
  • Justin Sheets, Sr. Technical Marketing Architect, USA

Subject Matter Experts:

  • Andreano Lanusse, EUC Staff Architect, USA

This lab manual can be downloaded from the Hands-on Labs Document site found here:

This lab may be available in other languages.  To set your language preference and have a localized manual deployed with your lab, you may utilize this document to help guide you through the process:

Location of the Main Console

  1. The area in the RED box contains the Main Console.  The Lab Manual is on the tab to the Right of the Main Console.
  2. A particular lab may have additional consoles found on separate tabs in the upper left. You will be directed to open another specific console if needed.
  3. Your lab starts with 90 minutes on the timer.  The lab can not be saved.  All your work must be done during the lab session.  But you can click the EXTEND to increase your time.  If you are at a VMware event, you can extend your lab time twice, for up to 30 minutes.  Each click gives you an additional 15 minutes.  Outside of VMware events, you can extend your lab time up to 9 hours and 30 minutes. Each click gives you an additional hour.

Alternate Methods of Keyboard Data Entry

During this module, you will input text into the Main Console. Besides directly typing it in, there are two very helpful methods of entering data which make it easier to enter complex data.

Click and Drag Lab Manual Content Into Console Active Window


You can also click and drag text and Command Line Interface (CLI) commands directly from the Lab Manual into the active window in the Main Console.  

Accessing the Online International Keyboard

You can also use the Online International Keyboard found in the Main Console.

  1. Click on the Keyboard Icon found on the Windows Quick Launch Task Bar.

Click once in active console window

In this example, you will use the Online Keyboard to enter the "@" sign used in email addresses. The "@" sign is Shift-2 on US keyboard layouts.

  1. Click once in the active console window.
  2. Click on the Shift key.

Click on the @ key

  1. Click on the "@ key".

Notice the @ sign entered in the active console window.

Activation Prompt or Watermark

When you first start your lab, you may notice a watermark on the desktop indicating that Windows is not activated.  

One of the major benefits of virtualization is that virtual machines can be moved and run on any platform.  The Hands-on Labs utilizes this benefit and we are able to run the labs out of multiple datacenters.  However, these datacenters may not have identical processors, which triggers a Microsoft activation check through the Internet.

Rest assured, VMware and the Hands-on Labs are in full compliance with Microsoft licensing requirements.  The lab that you are using is a self-contained pod and does not have full access to the Internet, which is required for Windows to verify the activation.  Without full access to the Internet, this automated process fails and you see this watermark.

This cosmetic issue has no effect on your lab.  

Look at the lower right portion of the screen

Please check to see that your lab is finished all the startup routines and is ready for you to start. If you see anything other than "Ready", please wait a few minutes.  If after 5 minutes your lab has not changed to "Ready", please ask for assistance.


Add your comment

E-Mail me when someone replies to this comment

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.