The purpose of this series of posts is to explore and use Workspace ONE AirLift into a Lab environment to migrate devices, applications, and policies (GPOs) from ConfigMgr and Active Directory Domain Services (ADDS) to Modern Management with Workspace ONE.

Table of Content:

Part 1 - AirLift Introduction and Diagram Overview. [Click here]
Part 2 - Servers and Computer Global Configuration. [Click here]
Part 3 - Active Directory Configuration and Domain Join. [Click here]
Part 4 - Hard Disks Configuration and prerequisite Sources Preparation. [Click here]
Part 5 - Roles and Features Installation. SPN Creation. [Click here]
Part 6 - SQL Server, SSRS and SSMS Installation. [Click here]
Part 7 - WSUS Installation and Configuration. ADK And WinPE Installation. [Click here]
Part 8 - ConfigMgr prerequsisites: System Management Container creation, AD Schema Extension and Database Creation. [Click here]
Part 9 - Installation, Overview and Update of ConfigMgr. [Click here]
Part 10 - ConfigMgr Configuration: Discovery methods Activation, Boundaries creation, Software Center personalization, VLC app configuration. [Click here]
Part 11 - Airlift Installation, Configuration and Overview. [You are here]

1 - AirLift Prerequisites

The following manipulation have to be done on MOB-DKT-AIRLIFT-01 Computer.

1. Click on Start menu.
2. Click on Settings.

3. Click on Apps setting.

4. Click on Apps & features payload.
5. Click on Optional features.

6. Click on Add a feature.

7. In search box, enter RSAT: Group Policy Management Tools.
8. Check RSAT: Group Policy Management Tools feature.

9. In search box, enter RSAT: Active Directory Domain Services and Lightweight Directory Services Tools.
10. Check RSAT: Active Directory Domain Services and Lightweight Directory Services Tools.
11. Verify that Install button is following by (2).
12. Click on Install (2).

13. Verify both features are installed successfully.

The above requirements are part of VMware requirements:

14. Close all windows.

2 - Download AirLift

The following manipulation have to be done on MOB-DKT-AIRLIFT-01 Computer.

1. Open Chrome web browser.
2. Navigate to my.workspaceone.com website.
3. Click on Log in then log in with your own account.

4. Once logged in, click on burger menu on the upper left corner.
5. Click on Products menu.
6. Click on All Products sub-menu.

7. Click on Workspace ONE AirLift product card.

8. Under Select a platform, select Windows.
9. Under Select an app version, select the latest version. In my case, I select 2.2.
10. Under Filter by Console Version, select All
11. New tabs appears.
12. Click on Installs And Upgrades tab.
13. Click on Workspace ONE Airlift 2.2.

14. Check I have read and accept the Terms of Use listed above.
15. Click on Accept.

16. Once downloaded, close Chrome web browser.

3 - Access Control List Setting

The following manipulation have to be done on MOB-DKT-AIRLIFT-01 Computer.

To avoid the following common issue "Error 0x80070643: failed to install MSI package" during AirLift installation:

1. Open a Powershell window as an administrator.
2. Run the following commands

PS> $path = "C:\ProgramData\VMware"
PS> $acl = Get-Acl $path
PS> Set-Acl $path $acl

4 - AirLift Installation

The following manipulation have to be done on MOB-DKT-AIRLIFT-01 Computer.

1. Open File Explorer.
2. Click on Downloads.
3. Right click on AirliftSetup_2.2_GA.exe file.
4. Click on Run as administrator.

5. Click on Install.

6. Click on Next.

7. Check I accept the terms in the License Agreement.
8. Click on Next.

9. Uncheck Join the VMware Customer Experience Improvement Program.
10. Click on Next.

11. Click on Install.

12. Click on Finish.

13. Click on Close.

5 - AirLift Architecture

Before configuring Airlift, here is a quick Airlift Architecture overview:

6 - AirLift Configuration

The following manipulation have to be done on MOB-DKT-AIRLIFT-01 Computer.

1. Open Chrome web browser.
2. Navigate to your Workspace ONE UEM tenant.

In case of you don't have a Workspace ONE UEM tenant, you can create your own test drive sandbox.

4. Log in to Workspace ONE UEM tenant.
5. Copy Past Username and Password on a temp file, for example on notepad.

Another possibility is to download VMware AirLift_Environmental_Details_Cheat_Sheet.xlsx and complete it. However, it require Excel.

6. Click on GROUPS & SETTINGS.
7. Click on All Settings.

6. Expand System node.
7. Expand Advanced node.
8. Expand API node.
9. Click on REST API.
10. Click on General tab.
11. Next to Current Settings, verify that Override is selected.
12. Next to Enable API Access, verify ENABLED is selected
13. Click on Add.
14. On newly row, under Service column, enter AirLift.
15. On newly row, under Account Type column, verify Admin is selected.
16. Click on SAVE.
17. Copy Past REST API URL without /API on the same temp notepad file.
18. Copy Past Workspace ONE UEM Console URL on the same temp notepad file.
19. Copy Past API key on the same temp notepad file.

20. Open a new tab on Chrome web browser.
21. Navigate to localhost:5000 web site.

6.1 - Connect Workspace ONE Step

22. Copy Past values from temp notepad to the corresponding ones.

23. Click on CONTINUE.
24. Close the temp notepad file without saving.

6.2 - Connect System center Configuration Manager Step

1. Next to SCCM Server, enter MOB-SRV-MECM-01.ad.mobinergy.com.
2. Next to Site Code, enter MOB.
3. Next to Secure Connection, turn off the option as no PKI is yet configured.
4. Next to Domain, enter ad.mobinergy.com.
5. Next to Username, enter MECMAdmin.
6. Next to Password, enter MECMAdmin password.
7. Click on CONTINUE.

6.3 - Connect Active Directory Step

1. Next to Domain, enter ad.mobinergy.com
2. Click on SUBMIT.

7 - Airlift Overview And Get Started

The following manipulation have to be done on MOB-DKT-AIRLIFT-01 Computer.

1. Open Chrome web browser.
2. Navigate to localhost:5000 web site.
3. A redirection has been done to localhost:5000/start

On Get Started with AirLift page:
4. on the upper right corner, click on the eye icon.

5. Navigate to localhost:5000 web site again (without /start).
6. Click on Settings menu.
7. Click on Synchronization tab.
8. Under Initiate Full Synchronization, click on SYNC.

7.1 - Dashboard Overview

1. Click on Dashboard menu.
2. You should have the following view:

7.2 - Collections Overview

1. Click on Collections menu.
2. You should have the following view:

7.3 - Devices Overview

1. Click on Device menu.
2. You should have the following view:

7.4 - Applications Overview

1. Click on Applications menu.
2. You should have the following view:

7.5 - Policies Overview

1. Click on Policies menu.
2. You should have the following view:

8 - Final Architecture Diagram

Regarding modifications, here is the updated Architecture Diagram:

9 - Conclusion

This is the end of this series of posts to explore and use Workspace ONE AirLift into a Lab environment. You can now:

• Migrate Devices from ConfigMgr to Workspace ONE UEM.
• Migrate Applications from ConfigMgr to Workspace ONE UEM.
• Migrate Policies (GPOs) from Domain Controller to Workspace ONE UEM (as CSP and/or ADMX).

10 - Next Steps

You can follow this interactive demonstration or this operational tutorial.

Otherwise, please leave a comment to ask me to complete this Hands-On Lab with, for example:

• How to add a PKI in order to have secure communication with ConfigMgr
• How to migrate device from ConfigMgr to Workspace ONE UEM and take a look on what is co-management/co-existence.
• etc...

Thanks a lot to all the readers of this series of articles !