You will install AirWatch Cloud Connector on the WS1-Connector VM and connect it to your Workspace ONE deployment.

1. Log in to the ControlCenter desktop VM.
   • User name: administrator
   • Password: Pa$$w0rd
2. On the ControlCenter Desktop,  double-click the Remote Desktops folder.
3. In the Folder double-click WS1-Connector.RDP to connect to the server.
4. Open the Workspace ONE UEM administration console.
5. On the WS1-Connector Windows taskbar, click the Google Chrome icon.
6. From the bookmarks bar, select  Workspace ONE UEM. You can also enter https://techseals.awmdm.com in the address bar.
7. Log in to Workspace ONE UEM.
   • User name: studentadmin{labid}
   • Password: Pa$$w0rd
   • Note: If you get a pop-up to save the password just select Never
8. On the Workspace ONE UEM console menu bar, verify that Student{labid} is selected from theOrganization Group drop-down menu.
9. In the navigation pane on the left, select Groups & Settings > All Settings > System > Enterprise Integration > Cloud Connector.
10. Next to Current Setting, click Override.
11. Next to Enable AirWatch Cloud Connector, click Enabled. This should be selected by default.
12. Click the Advanced tab.
13. Scroll down and verify that Use External AWCM URL is selected.
14. Scroll down to the bottom of the page, click Save, and wait for the certificate to be populated. Populating a certificate might take several minutes. The process concludes with a Saved Successfully message.
15. Click the General tab and click Download AirWatch Cloud Connector Installer.
16. In the dialog box, enter Pa$$w0rd as the password.
17. Enter Pa$$w0rd again to confirm the password.
18. Click Download.
19. After the download finishes, click the File Explorer icon on the WS1-Connector Windows taskbar.
20. Navigate to the Downloads folder.
21. Right-click the AirWatch Cloud Connector Installer file and select Run as an administrator.

The AirWatch Cloud Connector installation wizard opens.

22. Click Next.

Installing the framework might take up to five minutes.

23. Click I accept the terms in the license agreement and then click Next.
24. Click Next. You do not need to change the installation path.
25. Enter Pa$$w0rd in the Certificate Password text box.
26. Click Next.
27. Verify that the Outbound proxy? check box is deselected and click Next.
28. Click Install.
29. When the prompt says that TLS 1.2 registry keys were added, click OK.
30. When the installation finishes, click Finish.
31. If you receive a prompt to restart the server, click Yes. The server restart might take up to 5 minutes to complete.
32. Reconnect to the WS1-Connector VM after it restarts.
    • User name: administrator
    • Password: Pa$$w0rd
33. On the WS1-Connector Windows taskbar, click the Server Manager icon.
34. From the menu bar, select Tools > Services.
35. Verify that the AirWatch Cloud Connector service is running. The service might take up to 10 seconds to start.
36. If necessary, right-click AirWatch Cloud Connector and select Start to manually start the service.
37. If the service does not start, open File Explorer, navigate to C:\AirWatch\Logs\CloudConnector, and check the log file for errors.

38. Close the Services window.
39. Close the Server Manager window.
40. Return to the Workspace ONE UEM console in Google Chrome.
41. If the Settings dialog box is closed, select Groups & Settings > All Settings > System > Enterprise Integration > Cloud Connector from the navigation pane on the left.
42. Scroll down to the bottom of the Cloud Connector page and click Test Connection to verify connectivity.
43. A successful connection returns a Reached Cloud Connector running version 24.6.0.16 at WS1-Connector (192.168.110.95) message.
44. Close the Settings dialog box.
45. Minimize the Remote Desktop Connection Manager window.

You configure the Directory Services integration in the Workspace ONE UEM console to bind with the Domain Controller (DC).

1. On the ControlCenter VM, log in to the Workspace ONE UEM console.
   • User name: studentadmin{labid}
   • Password: Pa$$w0rd
2. On the menu bar, verify that Student{labid} is selected from the Organization Group drop- down menu.
3. In the navigation pane on the left, select Groups & Settings > All Settings > System > Enterprise Integration > Directory Services.
4. Verify that Current Setting is set to Override.
5. Click Skip wizard and configure manually.
6. On the Server tab, configure your server information. Leave the default value for any setting not specified here.

7. Click Test Connection to verify connectivity. A Connection successful message appears.
8. Click x in the upper-right corner to close the Text Connection dialog box.
9. Click Save.
10. Click the User tab and configure the settings.
11. Under Base DN, click the plus (+) sign icon next to the text box. The Available Base DNs drop-down menu appears.
12. From the Available Base DN drop-down menu, select DC=techseals,DC=co.
13. Click Save.
14. Click the Group tab and configure the settings.
15. Under Base DN, click the plus (+) sign icon next to the text box. The Available Base DNs drop-down menu appears.
16. From the Available Base DNs drop-down menu, select DC=techseals,DC=co.
17. Click in the Settings dialog box to close the Available Base DNs drop-down menu.
18. Delete organizationalUnit and enter Container in the Organizational Unit Object Class text box.
19. Click the Advanced to display additional controls.
20. Select the Auto Sync Default and Auto Merge Default check boxes.

Enabling these settings automatically adds or removes users in Workspace ONE UEM configured user groups based on their membership in your directory service and automatically applies synchronization changes without requiring an administrator's approval.

21. Scroll down to the Attribute and Mapping Value columns.

22. Click the Edit (pencil) icon next to the Organizational Unit text box.
23. Delete ou and enter cn in the Organizational Unit text box.
24. Click Save.
25. Scroll down and click Test Connection to verify the configuration.

26. Close the Test Connection dialog box.
27. Close the Settings dialog box.

You use the Workspace ONE UEM console to import a user group.

1. On the menu bar, verify that Student{labid} is selected from the Organization Group drop- down menu.
2. In the navigation pane on the left, select Accounts > Users Groups > List View.
3. From the Add drop-down menu, select Add User Group.
4. Next to External type, click Organizational Unit.
5. Verify that DC=techseals,DC=co is entered in the Group Base DN text box. The attribute must not contain any spaces.
6. In the Search Text text box, enter users and click Search. The page refreshes and displays additional items.
7. Select Users from the Group Name search result list.
8. Leave the default values for the other settings and click Save.

The page refreshes and you are back to the User Groups list view page. You now see the new user group called Users.

9. Select the Users check box.
10. From the More Actions drop-down menu, select Add Missing Users. A dialog box appears asking if you wish to continue.
11. To process the request, click OK.
12. Click Refresh and verify that the number in the Users column is greater than 0.
13. Click the Edit (pencil) icon next to the Users group name. The Edit User Group page dialog box appears.
14. Next to Add Group Members Automatically, click Enabled.
15. Click Save.

You have successfully imported the Active Directory users into the Workspace ONE UEM console.

You review the certificate authority (CA) integration configured for the lab environment.

1. On the menu bar, verify that Student{labid} is selected from the Organization Group drop- down menu.
2. In the navigation pane on the left, select Groups & Settings > All Settings > System > Enterprise Integration > Certificate Authorities.
3. Click on + ADD.
4. In the Certificate Authority - Add/Edit fill in the following
   • Name: Techseals
   • Authority Type: Microsoft ADCS
   • Protocol: ADCS
   • Server Hostname: controlcenter
   • Authority Name: techseals-CONTROLCENTER-CA
   • Authentication: Service Account
   • Username: Administrator
   • Password: Pa$$w0rd
5. Click TEST CONNECTION. You should get Test is Successful in green at the top.
6. Click SAVE
7. You should now see your Techseals certificate authority listed in the Certificate Authorities.