Introducing Workspace ONE UEM 2602: A feature packed release with updates across the board

With our latest Workspace ONE UEM release, we're delivering one of our most ambitious updates yet: a fully refreshed admin experience, breakthrough Android and Apple management capabilities, game changing next-gen Windows management, and smarter automation everywhere you look. Let’s dive into what’s new.

A fresh, updated Workspace ONE UEM UI

We’re proud to announce a modernized console with intuitive navigation, a redesigned Device List View, and smarter workflows that minimize clicks. Admins can opt in at their own pace and switch back anytime.

This feature is currently in Limited Availability and we’ll be posting a follow up blog with more information soon.

Structure your app rollouts with Phased Deployments

With phased deployments, you can roll out apps gradually — starting with a small group, allowing you to catch issues early and protecting the rest of your fleet from potential surprises.

Target the exact assignment groups you want in each phase, decide whether phases progress automatically or manually, and monitor everything with clear, phaselevel insights. It’s controlled, predictable, and built to derisk every rollout.

Phased deployments is currently in Limited Availability.

Our biggest update to Windows management yet

We’re redefining what modern Windows management looks like with next-gen Windows management in 2602. From Intelligent Hub managed mode to stronger desired-state controls to our new and improved Enterprise App Repository, 2602 brings a lot of vital Windows enhancements.

In fact, we shipped so many enhancements for Windows management this release that they couldn’t even fit in this blog—so we spun them out into their own deep-dive. Trust us, you’ll want to check out that blog post here.

Enterprise App Repository v2 brings over 10,000 Windows applications 

Android levels up with powerful eSIM capabilities and granular AMAPI policies

Workspace ONE UEM now delivers advanced eSIM management for Android, giving IT teams streamlined control over how devices connect. Administrators can remotely provision, activate, monitor, and remove eSIM profiles through the UEM Console or REST API, whether deploying a single activation code or scaling across entire fleets.

Workspace ONE UEM continues to expand Android AMAPI support with new Android policies that enable granular control of screen behavior, Private Space, Google Play Protect scanning, CircletoSearch, app function exposure, system credential providers, and advanced WiFi and networkslicing configurations. This release further enhances COPE functionality with options to preserve Factory Reset Protection during wipes.

Several onboarding and declarative updates for Apple devices

Onboarding workflows is now generally available for macOS! IT teams can now create workflows to prioritize delivery of resources essential for onboarding to ensure users are productive as soon as possible.

We’ve also introduced the ability to skip additional Setup Assistant screens such as Camera Control, Keyboard Setup, language & voice selection, and age-based safety screens.

This release greatly simplifies account driven enrollments in Workspace ONE UEM.  Previously, the process of creating a well-known file for Account drive enrollments involved manual steps and external hosting, which added complexity and potential points of failure. Now, admins can simply enable this feature in Workspace ONE, and the platform automatically handles the rest. Workspace ONE securely communicates with Apple Business Manager to generate and host the required well-known JSON file on behalf of the organization.

Dynamic Mac model hardware seeding is now automated. With Mac model data captured and populated automatically, admins can leverage smart groups and device-based assignments immediately as new Mac hardware is released to the market. This is the latest automation built into our platform to ensure our customers always have same day support with all of Apple’s releases! 

Automatically subscribe to critical device status items via Apple’s DDM, providing continuous monitoring without administrator intervention. These attributes are surfaced across UEM and Intelligence – visible in the console (e.g. Device Details, Compliance Policies), available in Intelligence for reporting, and exposed via REST APIs. The following status items are now subscribed to by default: 

• Battery Health: Current battery condition (iOS & macOS)
• Passcode Presence: Whether a device passcode is configured (iOS)
• Passcode Compliance: Passcode meets organizational security requirements (iOS)
• Model Marketing Name: Device model identifier for inventory management (iOS & macOS)

We’ve added new Apple enrollment categories and labels to clarify and improve our smart group functionality in Workspace ONE UEM. Labels for BYO devices are now consistent with Android to streamline the creation and maintenance of your smart groups. 

The innovation doesn’t stop there

There’s even more packed into 2602, so be sure to read the full release notes. Thanks for being on this journey with us, we can’t wait for you to try everything that’s new.