Chip-to-cloud management and security with Workspace ONE and Intel vPro®

We are excited to announce the Intel vPro® chip-to-cloud integration is now available with Omnissa Workspace ONE Unified Endpoint Management (UEM). The integration is available to Omnissa customers managing Windows devices and using a Workspace ONE UEM 2410 tenant with our modern architecture.  

Intel vPro®-powered PCs are equipped with unique hardware and firmware-based capabilities that enable out-of-band management. IT teams can support Intel vPro® PCs when powered on or off, located on or offsite, on any network – and even when the operating system (OS) is down or corrupt. Features include the ability to remotely wake and return a PC to sleep and the option to initiate full keyboard, video, and mouse (KVM) sessions at the BIOS level for direct troubleshooting.

Traditionally utilized through Intel® Endpoint Management Assistant (Intel® EMA), out-of-band management can now be activated and executed directly from Workspace ONE UEM. No additional licensing or hardware is required to get the most out of your Intel vPro® fleet. Using Intel’s cloud services, setup is completed in a few clicks within the Workspace ONE UEM console, maintaining a fully cloud-native solution. Once the integration is activated, it can be enabled for all Intel vPro® PCs under management. 

Unique management and security capabilities 

Hybrid work allows employees flexibility, but for IT, supporting offsite and off-network users introduces complexities across security and employee experience. 

Keeping devices patched and compliant is challenging when employees work from various locations at different hours, especially without disrupting employee productivity. With Intel vPro® and Workspace ONE UEM, IT teams can remotely wake PCs when they are not in use, apply relevant patches or updates, and return the PC to sleep without impacting the employee’s work. 

In some cases, a PC (or an entire fleet) might experience an OS failure, rendering it useless and preventing remote IT access to provide support. Devices with encrypted drives can prove even more challenging. With traditional tools, recovery requires physical device access, meaning an onsite visit or shipment of the device. The process can result in unplanned costs and loss of productivity. Instead, IT can use Workspace ONE UEM to provide out-of-band device support, including remote KVM to access the BIOS and recovery mode. This extends remote support capabilities, enabling full-stack white-glove device management, faster resolution, remediation, and recovery without breaching privacy. 

A more malicious threat to your organization is the persistence of ransomware. Studies from CrowdStrike and Verizon confirm ransomware attacks are not slowing down. With Intel vPro® and Workspace ONE UEM, an infected device can be detected and quickly removed from the corporate network through automation. The compromised device is restricted from connecting to the network, so it is unable to infect other devices and resources. Using out-of-band management capabilities, admins can bypass the network to reach the quarantined device, remove ransomware, and safely restore functionality.  

These unique capabilities from Intel and Workspace ONE help IT teams resolve more issues remotely and reduce employee downtime and helpdesk ticket volume, which leads to optimized employee experiences and cost savings. 

How to get started with chip-to-cloud 

The chip-to-cloud service is now available for Workspace ONE customers managing Windows PCs with Intel vPro® chipsets. For more details on how to set up the service, check out our article on Tech Zone.  

Note: The chip-to-cloud service requires modern SaaS architecture of Workspace ONE. To learn more about modern architecture, please see this Tech Zone article: Workspace ONE UEM Modernization Wave 1.