1. On your ControlCenter VM, navigate to the S:\Scripts folder and open the uagdeploy folder.
2. In the uagdeploy folder, select the uag2-advanced.ini file, and copy and paste the file so you have a backup of the original file
3. In the uagdeploy folder, right click on uag2-advanced.ini file and select Edit with Notepad++.
4. In Notepad++, find name and change the value to UAG-WS1.
5. Find source= and change the value to: S:\Software\UAG\euc-unified-access-gateway-25.12.0.0-19824103628_OVF10.ova
6. Next, scroll down to target= change the value to: vi://[email protected]:[email protected]/DC1/host/Cluster1/esx01.omnissatraining.com
7. Scroll down to ds=Local Disk 1, and change the value to ds=Datastore1.
8. Next to #diskMode=thin, remove the #, and change to diskMode=thin.
9. Change the following network settings to:
   1. netInternet=DMZ
   2. netManagementNetwork=DMZ
   3. netBackendNetwork=DMZ
   4. defaultGateway=10.10.110.254
   5. deploymentOption=onenic (default)
   6. ip0=10.10.110.5
   7. netmask0=255.255.255.0
   8. routes0=10.10.110.0/24 10.10.110.254
10. Scroll Down to the the entry dns=192.168.0.10, and change the IP address to 192.168.110.10.
11. Under the [SSLCert] section, change the value for pfxCerts= to S:\SSL\PFX\omnissatraining_with_pwd.pfx.
12. In the [SSLCertAdmin] section, change the value for pfxCerts= to S:\SSL\PFX\omnissatraining_with_pwd.pfx.
13. In the Notepad++, save the .ini file.
14. On the ControlCenter VM, launch Windows Powershell from the shortcut on the Start Menu.
15. Set the script execution policy to unrestricted using the following command.

16. Within Powershell, navigate to the uagdeploy folder using the following command.

17. To deploy the UAG, enter the following command in the Powershell windows.

18. When prompted with a security warning type: R.
19. Type R when prompted with a second security warning.
20. When prompted to enter a root password for UAG-WS1, type Pa$$w0rd.
21. Enter Pa$$w0rd when prompted to confirm the root password for UAG-WS1.
22. When prompted to Enter an optional admin password for admin access, enter Pa$$w0rd.
23. When prompted to Re-Enter an optional admin password, enter Pa$$w0rd.
24. When asked whether or not to join the customer experience program, enter Yes.
25. When prompted, enter the password for the specified [SSLcert] PFX certificate file omnissatraining_with_pwd.pfx, enter Pa$$w0rd.
26. When prompted, enter the password for the specified [SSLcertAdmin] PFX certificate file omnissatraining_with_pwd.pfx, enter Pa$$w0rd.
27. Enter Yes at the Fingerprint will be added to the known host file prompt. Press Enter.
28. When prompted the password for [email protected], enter Pa$$w0rd. The password will not be visible.

1. If not already logged in, log in to the ControlCenter VM.
   • User name: administrator
   • Password: Pa$$w0rd
2. If the Workspace ONE UEM console is logged out due to inactivity, sign in to the Workspace ONE UEM administration console.
3. Log in to Workspace ONE UEM.
   • User name: studentadmin{labid}
   • Password: Pa$$w0rd
4. In the navigation pane at the top, select Groups & Settings. Then, select All Settings from the navigation on the left. Expand Email > Configuration.
5. Click Configure.
6. Next to Deployment Model, verify that Proxy is selected.
7. From the Email Type drop-down menu, verify that Exchange is selected.
8. From the Exchange version drop-down menu, select Exchange Office 365.
9. Click Next.
10. Configure the settings on the Deployment page.
11. Enter Omnissatraining SEG in the Friendly Name text box.
12. Enter https://seg.omnissatraining.com:443 in the External URL and Port text box.
13. Enter 443 in the Listener Port text box.
14. Next to terminate SSL on SEG, verify that Enable is selected.
15. Ensure that Upload Locally is checked. (This means the certificate will be uploaded to the UAG)
16. Under Email Server Settings, enter https://mail.office365.com:443 in the Email Server URL and Port text box.
17. Under Security Settings and Cluster Settings, verify that Disable is selected for all settings.
18. Click Next.
19. On the Profiles page, click Next.
20. On the Summary page, click Finish.
21. Copy the value next to MEM Config GUID.
22. From the ControlCenter Windows Start menu, open Notepad++ and paste the MEM Config GUID value into a new note.
23. Open Chrome and open a new tab.
24. On the bookmarks bar, click UAG.
25. If necessary, log in to the Unified Access Gateway administration console.
    • User name: admin
    • Password: Pa$$w0rd
26. Under Configure Manually, click Select.
27. Turn on the Edge Service Settings toggle to display the available edge services.
28. Click the settings icon next to Secure Email Gateway Settings. The Secure Email Gateway Settings dialog box appears.

29. Turn on the Enable Secure Email Gateway Settings toggle to enable the Secure Email Gateway edge service.
30. Enter https://as1605.awmdm.com in the API Server URL text box.
31. Enter studentadmin{labid} in the API Server Username text box.
32. Enter Pa$$w0rd in the API Server Password text box.
33. Enter seg.omnissatraining.com in the Secure Email Gateway Hostname text box. You do not include https:// in this entry.
34. Open Notepad++ and copy the MEM Config GUID value that you pasted in an earlier step.
35. Return to the Unified Access Gateway console.
36. In the MEM Config GUID text box, paste the MEM Config GUID value that you copied from Notepad++.
37. Turn on the Add SSL Certificate toggle.
38. Next to SSL Certificate, click Select.
39. Select the omnissatraining_with_pwd.pfx from C:\certificate  .
40. Click Open.
41. Enter Pa$$w0rd in the Password text box.
42. Leave the Alias text box blank.
43. Click Save.
44. After saving, the Secure Email Gateway edge service might take up to 5 minutes to activate.
45. Whiel you wait for the Secure Email Gatewat edge service to activate, return to the Workspace ONE UEM console.
46. In the navigation pane at the top, select Security. Then, under Email Security, expand Control Policies.
47. Review the available controls.

1. Return to the Workspace ONE UEM administration console in Google Chrome.
2. If prompted, log in to Workspace ONE UEM.
   • User name: studentadmin{labid}
   • Password: Pa$$w0rd
3. In the navigation pane at the top, select Groups & Settings. Then, expand All Settings > System > Enterprise Integration > Content Gateway.
4. Next to Current Setting, click Override.
5. Next to Enable the Content Gateway, click Enabled.
6. Click Save.
7. Click Add.

8. Configure the settings on the Content Gateway Configuration page as follows..

9. Click Save.
10. Scroll to the right and copy the Content Gateway Configuration GUID value for the new Content Gateway.
11. From the ControlCenter VM Start menu, open Notepad++ and paste the Content Gateway Configuration GUID value to a new note.
12. Return to the Unified Access Gateway administration console in Google Chrome.

13. If prompted, log in to Unified Access Gateway.
    • User name: admin
    • Password: Pa$$w0rd
14. Under Configure Manually, click Select.
15. Turn on the Edge Service Settings toggle to display the available edge services.
16. Click the settings icon next to Content Gateway Settings.

17. Turn on the Enable or disable Content Gateway Settings toggle to enable the Workspace ONE Content Gateway edge service.
18. Configure the Content Gateway edge service settings as follows.

19. Click Save.

After saving, the Content Gateway edge service might take up to 5 minutes to activate.

1. If not already logged in, log in to the ControlCenter desktop VM.

   • User name: administrator

   • Password: Pa$$w0rd

2. Open Chrome and log in to Workspace ONE UEM.

   • User name: studentadmin{labid}

   • Password: Pa$$w0rd

3. In the upper-right corner of the console, click the drop-down menu with your administrator name and verify that Student{labid} organization group is selected from the Organization Group drop-down menu.

4. In the navigation pane on the left, select Resources. Then, under Profiles & Baselines, select Profiles.

5. From the Add drop-down menu, select Add Profile.

6. In the Add Profile dialog box, click Windows.

7. In the Select Device Type dialog box, click Desktop.

8. In the Select Context dialog box, click User Profile.

9. Enter Corporate Exchange in the Name text box.

10. Click the Smart Groups search box and select Windows Devices (Student{labid}).

11. In the navigation pane on the left, select Exchange ActiveSync and click Configure.

12. From the Mail Client drop-down menu, select Native Mail Client.

13. Enter Corporate Exchange in the Account Name text box.

14. Enter mail.office365.com in the Exchange ActiveSync Host text box.

15. Select the Use SSL check box.

16. Configure the login information as follows.

17. From the Past Days of Mail to Sync drop-down menu, select 1 Month.

18. Leave the default values for all other settings.

19. Click Save and Publish.

20. Click Publish.

1. In the upper-right corner of the console, click the drop-down menu with your administrator name and verify that Student{labid} organization group is selected from the Organization Group drop-down menu.

2. In the navigation pane at the top, select Resources. Then, under the Apps, select Native Apps and click the Public tab.

3. Click Add Application.

4. From the Platform drop-down menu, select Apple iOS.

5. Next to Source, click Search App Store.

6. Enter Workspace ONE Boxer in the Name text box.

7. Click Next.

8. From the search result list, click Select next to the Boxer - Workspace ONE application.

9. Leave the default application settings and click Save & Assign. The Boxer - Workspace ONE - Assignment window appears.

10. On the Distribution page, enter Workspace ONE Boxer configuration in the Name text box.

11. Enter a description of the assignment in the Description text box.

12. From the Assignment Groups drop-down menu, select All Devices{labid}.

13. Next to App Delivery Method, click On Demand.

14. Leave the default values for the remaining settings.

15. In the navigation pane on the left, select Email Settings.

16. Enter Training Exchange ActiveSync in the Account Name text box.

17. Enter seg.omnissatraining.com in the Exchange ActiveSync Host text box.

18. Leave the default lookup value for the Domain text box.

19. Leave the default lookup value for the User text box.

20. Leave the default lookup value for the Email Address text box.

21. Leave the Password text box blank.

22. Leave the default values for the remaining settings.

23. Click Create.

24. Click Save.

25. Click Publish.

1. In the upper-right corner of the console, click the drop-down menu with your administrator name and verify that Student{labid} organization group is selected from the Organization Group drop-down menu.

2. In the navigation pane at the top, select Groups & Settings. Then, click All Settings and expand Content.

3. Select Applications and then click Workspace ONE Content App.

4. Next to Current Setting, click Override.

5. Review the settings available for managing the Workspace ONE Content App.

6. In the navigation pane on the left, expand Advanced. If prompted to "Disregard changes," click Ok.
7. Click File Extensions.

8. Next to Current Setting, click Override.

9. Review the setings available for managing the file extensions.

10. In the navigation pane on the left, click on Corporate File Servers. If prompted to "Disregard changes," click Ok.
11. Review the options available for managing Corporate File Servers.
12. Close the Settings window by clicking the X in the upper right corner.
13. In the navigation pane at the top, select Resources. Then, expand Workspace ONE Content and click Admin Repositories.
14. Click Add.
15. Enter Corporate Documents in the Name field.
16. From the Type dropdown menu, select OneDrive.
17. Ensure that Organization Group is set to Student{labid}.
18. Click Continue.
19. Review the available settings under the Security tab.
20. Click the Assignment tab and review the available settings.
21. Click the Deployment tab and review the available settings.

22. Click Cancel.
23. From the navigation on the left, click Content.
24. Click the Add Content button.
25. In the Add Content window, click Select Files.

26. Navigate to the Software folder on the desktop and double-click Lab Activities.

27. Select the What_is_Workspace_ONE_UEM.pdf file and click Open.

28. Change the document name to What is Workspace ONE UEM?.

29. Click in the Category field and select Add Category.

30. Enter Product Info as the name for the new category. Click Save.

31. Click the Assignment tab.

32. Click in the Organization Group field and select Student{labid} from the list that appears.

33. Click Save.