In my previous post on the steps to upgrade VMware Workspace ONE UEM dedicated SaaS environment to a newer version, I mentioned it is not always necessary to upgrade your Secure Email Gateway (SEG) unless VMware support confirms a compatibility issue with your new version of UEM console. However, it is still recommended especially if the new version contains security and performance enhancement. Here’s a snapshot from the SEG release notes to support my recommendation.

If you have not migrated from classic SEG to SEG V2, check my post Steps to migrate Secure Email Gateway (SEG) from the Classic Platform to the V2 Platform for further details.

Just like my post on the Upgrade AirWatch Cloud Connector in a dedicated SaaS environment from version 9.4 to 19.2 and beyond, be sure to review the Requirements for the Secure Email Gateway (V2) and the SEG release notes to ensure your SEG continues to meet the requirement and adjust as needed before upgrading.

The steps to upgrade are more or less the same from my previous post on the Upgrade VMware AirWatch/Workspace ONE from version 9.1 to 9.6 and beyond: Part 3 – Secure Email Gateway Upgrade for the on-premises environment. For this post, I’ve added a few additional screenshots wherever necessary.

Start by browsing to EMAIL > Email Settings > Email > Configuration. The first thing I do is to test the connection by clicking on the dropdown arrow next to the MEM config to make sure there is no pre-existing issue.

Next, click on the dropdown arrow again to download the SEG installer. It will then redirect you to another website.

Afterward, copy the installer to your SEG server.

Next, right-click on the SEG installer and select Run as administrator.

Click OK when you are prompted with the below.

Click Next on the remaining steps. I will highlight any exceptions along the way.

The newer version(s) of SEG contains an updated version of Java which must be installed. Click Yes when prompted.

Note: It is never a good idea to update Java manually. For more information, check out my post What’s wrong with updating Java manually on VMware AirWatch Tunnel server running Windows?

At the end of the Java update, you will be prompted to restart. My recommendation is No until your SEG is upgraded, but the choice is totally up to you.

If you get prompted for the below during your upgrade, it is because the box Upload Locally within your MEM config is checked. Surprisingly, the steps outlined in this post are the same to renew this SSL certificate before it expires. For further details, check out the section Steps to Update Public SSL Certificate for Secure Email Gateway version 2 via this VMware KB.

After clicking Finish, go ahead and restart your SEG server. I still recommend restarting it again even if you might have already done so after the previous Java update.

Before we wrap up this upgrade, be sure to uncheck the box Check for Updates Automatically within the Java Control Panel.

As always, stay mobile!