DATASHEET

WORKSPACE ONE UEM

DEPLOYMENT – MDM / EMAIL
DATASHEET
Effective March 10, 2020
Product and company names referenced in this document are trademarks and/or registered
trademarks of their respective companies.

1. Service Overview

This service provides for technical support related to the VMware AirWatch ("VMware") Enterprise Mobility
Management (EMM) and Workspace ONE offerings as set out below in the services description (the "Services" or
Consulting Services"). The Workspace ONE solution allows customers to activate, profile, and track mobile devices
and usage.
The deployment will include implementation of a VMware environment with integration supported by components
installed on-premise in the Customer’s data centers. This project will be organized into four phases: 1) Initiate, 2) Plan,
3) Execute, 4) Close.
The implementation scope includes:
1. Review of associated pre-requisites
2. Implementation of VMware EMM servers
3. Unified Application Catalog
4. Directory Services Integration
5. Personal Information Management (PIM) – email, contacts and calendar
6. Security policies – enrollment restrictions, compliance policies, privacy policies, terms of use
7. Application management – public, internal, VPP application
8. MDM enrollment strategy

2. Service Assumptions
1. VMware will assist with the installation/configuration of one environment under this datasheet. The environment
type (SaaS or On-Premises) will be implemented based on the license type purchased by the Customer.
2. VMware will deliver the Remote Consulting Services using global resources. VMware makes no commitment,
representation, or warranty regarding the citizenship or geographic location of the Consultant(s).
3. VMware will assist with up to four different device types/operating systems for configuration and setup (iOS,
Android, Mac and Windows) of up to five devices of each operating system. Rugged Android, Rugged Windows
Mobile/CE devices and printers are out-of-scope. Any additional device roll-out beyond the five devices are out-
of-scope.
4. VMware will integrate only one corporate e-mail infrastructure via one Email Management integration
(PowerShell, SEG v2 or SEG on UAG).
5. Advanced PC Management (Mac/Windows scripting and product provisioning) is out-of-scope.
6. Alignment of all EMM configurations and policy design with Customer’s requirements is the responsibility of the
Customer. VMware will provide recommendations and assistance.
7. Unified Access Gateway (Content, Tunnel, Browsing) integration is out-of-scope. One can purchase the
associated service offering to incorporate UAG into the scope.
8. Configuration of Workspace ONE Launcher, Web Portal and SSO is out-of-scope.

Workspace ONE UEM Deployment – MDM / Email | 1

 Workspace ONE UEM Deployment – MDM / Email Datasheet

9. Procurement and installation of hardware for any components that will be installed on-premise is the
responsibility of the Customer. VMware may provide recommendations.
10. Configuration of software other than VMware is the responsibility of the customer.
11. Workspace ONE Access for App Catalog will be implemented with Workspace One licensing.
12. Includes High Availability for VMware (Device Services, Console, SEG v2 or SEG on UAG, and ACC) for up to 16
servers.
13. Installation of Disaster Recovery (DR) is out-of-scope. One can purchase the associated service offering to
incorporate DR into the scope of a deployment.
14. Certificate usage for authentication is out-of-scope and must be purchased separately.
15. Review of the console will be provided throughout the configuration; however formal training is out-of-scope.
16. Implementation of derived credentials is out-of-scope.
17. The scope of Service Deliverables listed in Section 6 below will be determined mutually by the parties during Phase
1 (Initiate) and Phase 2 (Plan). Service Deliverables not identified and scheduled prior to Phase 3 (Execute) will be
considered out-of-scope.
18. Services or products that have been deprecated or reached end of life are out-of-scope.
19. Certain features may require the purchase of a Workspace ONE Deployment Add-On bundle. Please contact your
VMware representative for further information.
20. Pre-requisites must be completed for all installation components before any installation activities will be
performed.
21. VMware and the Customer will work closely together to ensure that project scope remains consistent and issues
are resolved in a timely manner. VMware will not provide a project manager as a role under this datasheet.
22. All work will be delivered remotely via screen-share. On-site travel is out-of-scope.
23. All work, documentation and deliverables will be conducted during VMware local business hours and will be
provided in English.
24. Any feature not listed in Services Deliverables is out of scope, unless discussed and agreed to with the Product
Deployment Team prior to purchase.
25. The staffing for this datasheet assumes all work will be completed within a maximum of 12 weeks after the
initiation of Phase 3 (Execute). Should the duration of the engagement be extended, or should the product scope
materially change, a project change request may be issued.
26. The period of performance is limited to 12 months from purchase date. Federal and Public-Sector customers who
exceed this limit may contact their VMware representative for further clarification.
27. The scope of the services is deemed complete upon ONE of the following criteria – whichever comes first:
1) Upon completion of all deliverables within scope of the engagement as agreed upon in the Design Sign-off
Form.
2) After 12 weeks from the date the project is moved to Phase 3 (Execute) as agreed upon in the Design
Sign-off Form.
3) After 12 months from purchase date.
4) If the services were purchased using PSO credits the services expire the same time the credits expire,
unless a credit extension is requested. Work with your Account Executive to determine a plan for all
remaining credits on the account and request an extension.

3. Engagement Timeline

The Consulting Service typically takes 4 – 6 weeks to fully deliver with the pre-defined scope, and will consist of meetings
every 3 - 5 business days, each being 2 - 4 hours in length, scheduled based on the agenda outlined for the next meeting.
This is a target schedule, but could vary depending on the availability of the assigned consultant. The estimated timeline

Workspace ONE UEM Deployment – MDM / Email | 2

 Workspace ONE UEM Deployment – MDM / Email Datasheet

for the engagement is outlined in the following table. The tasks defined each week can shift based on Customer readiness
and availability of both the Customer and VMware. VMware will perform the Consulting Services according to a schedule
agreed by both parties.

Initiate Plan Execute Close

• Introduction Meeting. • Review scope, objectives, • Software installation of • Implementation

• Datasheet review. and key success criteria. necessary components. monitoring and
• Provide pre-requisite • Review technical • Technical integration maintenance.
requirements. architecture deployment with Customer • Customer support
• Confirm scheduling. options. infrastructure. transition.
• Review pre-requisite • Configuration and
completion. validation of Customer
• Download and set up any use case.
required software/tool.

4. Change Management
For Project Change Request, Customer and VMware will follow the project change request process in accordance with 2(c)
of the General Terms and Conditions.

5. Responsibilities

All VMware and Customer responsibilities are listed in the Service Deliverables section. The ownership is defined as follows:
1. Primary Owner = VMware: VMware is responsible for delivery of the component, with minimal assistance
from the Customer’s project team.
2. Joint: VMware and the Customer’s project team are jointly responsible for delivery of the component.
3. Primary Owner = Customer: Customer is responsible for the delivery of the component, with
recommendations from VMware as needed.

6. Service Deliverables

The following is a list of all the potential deliverables that the Customer may select. Items will be listed on the project
schedule as agreed to by Customer and VMware during Phase 1 (Initiate) and Phase 2 (Plan).

Primary
ID Description Tool/Deliverable Owner Comments

1.1 Introduction meeting Joint

Understand service assumptions and

1.2 Review datasheet Customer scope

Workspace ONE UEM Deployment – MDM / Email | 3

 Workspace ONE UEM Deployment – MDM / Email Datasheet

My Workspace ONE Required to access resources and

1.3 Register for My Workspace ONE ID
access Customer training

VMware Recommended
Architecture Guide, Pre- Firewall configuration, server prep, load
1.4 Provide Pre-Installation Requirements Installation VMware balancer configuration
Requirements
Worksheet

2.1 Plan Meeting Joint

Solution Design
Perform business requirements and
2.2 solution design PowerPoint and Design VMware Scope definition
& Implementation doc
VMware Recommended
2.3 Perform architectural review Architecture Guide, VMware
Visio diagram
Pre-Installation Pre-requisite clarified with Customer
Review of technical pre-installation network, database, server and security
2.4 requirements Requirements VMware teams, hardware sizing and
Worksheet architecture

2.5 Review Best Practices Guide VMware Configuration best practices

Download and setup any required

2.6 software/tools VMware

Summarize pre-work, next steps and

2.7 requirements for Phase 3 (Execute) Customer action items VMware

Servers accessible and software pre-

2.8 Procure virtual and/or physical servers Customer requisites completed

Configure networking/firewall and

2.9 service accounts for integration Customer Networking rules provisioned

Complete and return Pre-Installation Installation Pre-

2.10 Requirements Worksheet Requisites Customer

Design &
Implementation doc Scope of project cannot be modified
2.11 Send Design & Implementation doc for and Plan Phase VMware
review and customer sign off Completion without agreed change control
Acknowledgment form

Sign and return Plan Phase Completion Plan Phase Completion Scope of project cannot be modified
2.12 Acknowledgment form Customer without agreed change control
Acknowledgment form

Workspace ONE UEM Deployment – MDM / Email | 4

 Workspace ONE UEM Deployment – MDM / Email Datasheet

Pre-Installation
3.1 Confirm completion of pre-requisites Requirements VMware
Worksheet

VMware Installation
3.2 Installation of VMware EMM server(s) Guide VMware If Customer has necessary licensing

3.3 Installation of ACC VMware

3.4 Configuration of Unified App Catalog VMware

Installation of Secure Email Gateway v2

3.5 (SEG v2) or SEG on UAG, or VMware
Configuration of PowerShell

Configure Organizational Group

3.6 structure (up to 5) Joint

Register email domain for auto-

3.7 discovery Joint

Assistance configuring Directory

Services integration:

• Assist with creating up to 5 users

3.8 Joint
• Assist with creating up to 5
administrators
• Assist with adding one user group

Assist with creating one of each desired

Profiles may be limited based on device
3.9 profiles for up to three device Operating Joint OS
Systems

Assist with creating up to three of each

of the following policies, one for each
3.10 device Operating System (if applicable): Joint
• Enrollment Restriction Policy (i.e. #
of devices, Ownership Types, etc.)

Workspace ONE UEM Deployment – MDM / Email | 5

 Workspace ONE UEM Deployment – MDM / Email Datasheet

• Compliance Policy (i.e. Comprised

Status, Encryption, Application
List, etc.,)
• Email Compliance Policy (i.e.
Unmanaged Devices,
Compromised Devices, Encryption,
etc.)
• Privacy Policy (i.e. Collect GPS
Data, Allow Full Wipe, etc.)
• Terms of Use (i.e. Platforms,
Geographies, etc.)

Advanced Windows 10 Management:

Windows 10 Management:

• Work Access Enrollment

• Azure AD Enrollment
• Agent Enrollment
• Integration with Microsoft Business
Store
• Assist with installation of up to a
total of 3 internal applications
(.exe – 1 unit, zip – 1 unit, .msi – 1
unit)
• Assist with configuration of up to 3
3.11 VMware Applications for Windows Joint AirLift install and setup is out of scope
10
• Profiles: Passcode, Wi-Fi, VPN,
Restrictions, Data Protection,
Firewall, Anti-virus, Encryption,
Windows Updates, Windows
Licensing, Kiosk, Windows Hello,
Application Control,
Personalization
• Assist with the distribution and
execution of up to two client
scripts from the Workspace One
UEM console
• Configuration of up to 2 CSPs via
VMware Policy Builder
• Assist with up to two Baselines
configuration
MacOS Management

• Integration with Apple Business

Manager
Associated Licenses are required to be
• Assist with macOS specific purchased
enrollment method for up to 5
devices: Intelligent hub, Device Deploy macOS applications via the
3.12 staging enrollment, Apple Joint software distribution module on the
Business Manager – DEP Workspace One UEM console
• Review Staging & Provisioning
section of Workspace One UEM Incorporate a functional script in the
Admin Console Workspace One UEM console

• Assist with installation of up to a

total of 3 internal applications
using the Software Distribution

Workspace ONE UEM Deployment – MDM / Email | 6

 Workspace ONE UEM Deployment – MDM / Email Datasheet

feature: dmg – 1 unit, pkg– 1 unit,

mpkg – 1 unit
• Assist with the distribution and
execution of up to five client scripts
from the Workspace One UEM
console
• Profiles: Passcode, Network, VPN,
Exchange Web Services, LDAP,
Dock, Restrictions, Software
Update, Parental Controls,
Directory, Secure & Privacy, Disk
Encryption, Login Items, Login
Window, Energy Saver, Time
Machine, Finder, Accessibility,
Printing, AirPlay Mirroring,
AirPrint, Firewall, Firmware,
Custom Attributes, Custom
Settings

Configure the following for Application

Management functionality:

• Public Application (one per device

type)
Configuration of application
3.13 • Internal Application (one per Joint management policies
device type)
• Web Application (one per device
type)
• App Store integration

Assist with setup, association, and

installation of VPP applications (sToken
or License-Based). This will include:

• Upload of sToken/redemption
codes
3.14 • Register up to 10 devices for up to Joint Configuration of VPP applications
3 deployment types with VPP
Terms of Use
• Register using app catalog and
automatic
• Install application on same devices
as Auto/On-Demand

Configuration of Personal Information

Management (email, contacts, Integration with Customer email
3.15 Joint solution
calendar)

Workspace ONE UEM Deployment – MDM / Email | 7

 Workspace ONE UEM Deployment – MDM / Email Datasheet

Define Enrollment/Registration Strategy

3.16 for new devices Enrollment Strategy Joint Defined enrollment methodology

Assist with enrolling up to 5 devices for

3.17 identified device types Joint Successfully enrolled devices

Implement Monitoring and

4.1 Maintenance Customer

VMware delivers
software related
Customer Support Transition services completion
4.2 materials and contact VMware Transition to support meeting
information for
support/CSR.

4.3 Customer receives CAF VMware

7. Terms & Conditions

This Datasheet is for informational purposes only. VMWARE MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS
DATASHEET. This Datasheet replaces all prior versions of the Workspace ONE UEM Deployment - MDM / Email
Datasheet. VMware may update the content of the Datasheet from time to time and the new version will apply for the
future purchase of the Consulting Services referenced in this Datasheet. All VMware service engagements are governed by
the VMware Professional Services General Terms and Conditions (see http://www.vmware.com/files/pdf/services/tc.pdf). If
you are located in the United States, the VMware contracting entity for the service will be VMware, Inc., and if outside the
United States, the VMware contracting entity will be VMware International Limited.
If you purchase this packaged service outside of the ELA, the service must be delivered and accepted within the first 12
months of the purchase, or the service will be forfeited.

More information about the Workspace ONE UEM Deployment - MDM / Email Datasheet and related services is available
from local VMware representatives and www.vmware.com/services.

VMware Professional Services transform IT possibilities into business outcomes. Our comprehensive portfolio of services
uncovers and exploits the unique opportunities made possible by VMware technology. Drawing on our unparalleled
product expertise and customer experience, we collaborate with your team to address the technical, people, process and
financial considerations for IT transformation to deliver results that are positive, tangible, and material to IT and your
business.

Workspace ONE UEM Deployment – MDM / Email | 8

 Workspace ONE UEM Deployment – MDM / Email Datasheet

Product and company names referenced in this document are trademarks and/or registered trademarks of their respective companies.

VMware, Inc. 3401 Hillview Avenue Palo Alto CA 94304 USA Tel 877-486-9273 Fax 650-427-5001 www.vmware.com
Copyright © 2018 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more
patents listed at http://www.vmware.com/go/patents. VMware is a registered trademark or trademark of VMware, Inc. and its subsidiaries in the United States and other jurisdictions. All other marks
and names mentioned herein may be trademarks of their respective companies.