1. Using the VM Switcher, switch to the WS-Connector VM.
2. Log in to the WS1-Connector VM.
   • User name: administrator
   • Password: Pa$$w0rd
3. On the WS1-Connector Windows taskbar, click the Google Chrome icon.
4. If you get an “Enhanced ad privacy in Chrome” screen, click More and then click Got it.
5. From the bookmarks bar, select Workspace ONE UEM. You can also enter https://omnissatraining.awmdm.com/Airwatch in the address bar to access the console page.
6. Log in to Workspace ONE UEM.
   • User name: studentadmin{labid}
   • Password: Pa$$w0rd
   • Note: If you get a pop-up to save the password just select Never.

7. In the upper-right corner of the console, click the drop-down menu with your administrator name and verify that Student{labid} organization group is selected from the Organization Group drop-down menu.

8. In the navigation pane at the top, select Groups & Settings. Then, select All Settings > System > Enterprise Integration > Cloud Connector.
9. Next to Current Setting, click Override.
10. Next to Enable AirWatch Cloud Connector, click Enabled. This should be selected by default.
11. Click the Advanced tab.
12. Scroll down and verify that Use External AWCM URL is selected.
13. Scroll down to the bottom of the page, and click Save. The process concludes with a "Saved Successfully" message.
14. Click the General tab and at the bottom of the window, click Download AirWatch Cloud Connector Installer.
15. In the dialog box, enter Pa$$w0rd as the password.
16. Enter Pa$$w0rd again to confirm the password.
17. Click Download.  The download could take a minute.
18. After the download finishes, click the File Explorer icon on the WS1-Connector Windows taskbar.
19. Navigate to the Downloads folder.  Inside, you will see the AirWatch Cloud Connector...Installer.
20. Right-click the AirWatch Cloud Connector...Installer file and select Run as administrator.

The AirWatch Cloud Connector installation wizard opens.

21. Click Next.

22. Click I accept the terms in the license agreement and then click Next.
23. Click Next. You do not need to change the installation path.
24. Enter Pa$$w0rd in the Certificate Password text box.
25. Click Next.
26. Verify that the Outbound proxy? check box is deselected and click Next.
27. Click Install.
28. When the prompt says that TLS 1.2 registry keys were added, click OK.
29. When the installation finishes, click Finish.
30. If you receive a prompt to restart the server, click Yes. Wait about 1 minute for it to restart.
31. Reconnect to the WS1-Connector VM.  If prompted, enter the following credentials
    • User name: administrator
    • Password: Pa$$w0rd
32. On the WS1-Connector Windows taskbar, click the Server Manager icon.
33. From the menu bar, select Tools > Services.
34. Verify that the AirWatch Cloud Connector service is running. The service might take up to 10 seconds to start.
35. If necessary, right-click AirWatch Cloud Connector and select Start to manually start the service.
36. If the service does not start, open File Explorer, navigate to C:\AirWatch\Logs\CloudConnector, and check the log file for errors.

38. Close the Services window.
39. Close the Server Manager window.
40. Return to the Workspace ONE UEM console in Google Chrome.  If you see Enhanced Data Privacy, Click More, then click Got it.
41. If the Settings dialog box is closed, select Groups & Settings from the navigation pane at the top. Then, select All Settings > System > Enterprise Integration > Cloud Connector from the navigation pane on the left.
42. Scroll down to the bottom of the Cloud Connector page and click Test Connection to verify connectivity.
43. A successful connection returns a "Reached Cloud Connector running version 24.x..." message.
44. Close the Settings dialog box.

1. On the ControlCenter VM, log in to the Workspace ONE UEM console.
   • User name: studentadmin{labid}
   • Password: Pa$$w0rd
2. In the upper-right corner of the console, click the drop-down menu with your administrator name and verify that Student{labid} organization group is selected from the Organization Group drop-down menu.
3. In the navigation pane at the top, select Groups & Settings. Then, select All Settings > System > Enterprise Integration > Directory Services.
4. Verify that Current Setting is set to Override.
5. Click Skip wizard and configure manually.
6. On the Server tab, configure your server information with the following, and leave the default value for any setting not specified here.

7. Click Test Connection to verify connectivity. A Connection successful message appears.
8. Click x in the upper-right corner to close the Text Connection dialog box.
9. Click Save.
10. Click the User tab and configure the settings.
11. Under Base DN, click the plus (+) sign icon next to the text box. The Available Base DNs drop-down menu appears.
12. From the Available Base DN drop-down menu, select DC=omnissatraining,DC=com.
13. Click Save.
14. Click the Group tab and configure the settings.
15. Under Base DN, click the plus (+) sign icon next to the text box. The Available Base DNs drop-down menu appears.
16. From the Available Base DNs drop-down menu, select DC=omnissatraining,DC=com.
17. Click in the Settings dialog box to close the Available Base DNs drop-down menu.
18. Delete organizationalUnit and enter Container in the Organizational Unit Object Class text box.
19. Click Advanced to expand and display additional controls.
20. Make sure the Auto Sync Default and Auto Merge Default check boxes are checked.

Enabling these settings automatically adds or removes users in Workspace ONE UEM configured user groups based on their membership in your directory service and automatically applies synchronization changes without requiring an administrator's approval.

21. Scroll down to the Attribute and Mapping Value columns.

22. Click the Edit (pencil) icon next to the Organizational Unit text box.
23. Delete ou and enter cn in the Organizational Unit text box.
24. Click Save.
25. Scroll down and click Test Connection to verify the configuration.

26. Close the Test Connection dialog box.
27. Close the Settings dialog box.

1. In the upper-right corner of the console, click the drop-down menu with your administrator name and verify that Student{labid} organization group is selected from the Organization Group drop-down menu.

2. In the navigation pane at the top, select Accounts. Then, under Users, select Users Groups.
3. From the Add drop-down menu, select Add User Group.
4. Next to External type, click Organizational Unit.
5. Verify that DC=omnissatraining,DC=com is entered in the Group Base DN text box. The attribute must not contain any spaces.
6. In the Search Text text box, enter users and click Search. The page refreshes and displays additional items.
7. Select Users from the Group Name search result list.
8. Leave the default values for the other settings and click Save.

The page refreshes and you are back to the User Groups list view page. You now see the new user group called Users.

9. Select the Users check box.
10. From the More Actions drop-down menu, select Add Missing Users. A dialog box appears asking if you wish to continue.
11. To process the request, click OK.
12. Click the Refresh button (or refresh the web page), and verify that the number in the Users column is greater than 0.
13. Click the Edit (pencil) icon next to the Users group name. The Edit User Group page dialog box appears.
14. Next to Add Group Members Automatically, click Enabled.
15. Click Save.

You have successfully imported the Active Directory users into the Workspace ONE UEM console.

1. In the upper-right corner of the console, click the drop-down menu with your administrator name and verify that Student{labid} organization group is selected from the Organization Group drop-down menu.

2. In the navigation pane at the top, select Accounts. Then, select Users.
3. Click the Edit (pencil) icon next to the user named ws-account.
4. Expand Enrollment.
5. Click on the field next to Enrollment Organization Group.
6. From the dropdown, select Student{labid} / Servers.
7. Click Save.

1. In the upper-right corner of the console, click the drop-down menu with your administrator name and verify that Student{labid} organization group is selected from the Organization Group drop-down menu.

2. In the navigation pane at the top, select Groups & Settings. Then, select All Settings > System > Enterprise Integration > Certificate Authorities.
3. Click on Add.
4. In the Certificate Authority - Add/Edit fill in the following
   • Name: omnissatraining
   • Authority Type: Microsoft ADCS
   • Protocol: ADCS
   • Server Hostname: controlcenter
   • Authority Name: omnissatraining-CONTROLCENTER-CA
   • Authentication: Service Account
   • Username: Administrator
   • Password: Pa$$w0rd
5. Click Test Connection.

6. Click SAVE.
7. You should now see your omnissatraining certificate authority listed in the Certificate Authorities.