Courts attorneys cannot start the Workspace ONE Tunnel app; UEM shows the iPads non-compliant for missing passcode. The Tunnel server is healthy. What should the security administrator do first?
Select an answer to reveal the explanation.
Short Explanation
Tunnel is waiting on a lock screen, not on a broken Edge. Put a passcode on the iPads so they go compliant and UEM releases the Tunnel payload.
Full Explanation
When courts attorneys cannot start the Workspace ONE Tunnel app because UEM shows the iPads non-compliant for missing passcode while the Tunnel server is healthy, enforce a passcode so the devices become compliant and the Tunnel payload is released. Compliance gates Tunnel assignment; a healthy Tunnel server cannot help non-compliant iPads that never receive the payload. Passcode enforcement restores civic attorney secure access. Rebuilding the NSX-T Edge that load-balances Tunnel fails by concept because the Tunnel server is healthy and Edge rebuild does not create device passcode compliance. Disabling compliance entirely and publishing Tunnel to unmanaged devices fails by concept because that bypasses the security gate that keeps court data off unmanaged iPads. Installing Carbon Black Cloud Live Response to start Tunnel as SYSTEM fails by concept because Live Response does not install iOS Tunnel payloads or satisfy UEM passcode compliance. Exam caveat: Tunnel blocked by missing passcode compliance means fix passcode—not Edge rebuild, compliance disable, or CBC Live Response. Operational check: enforce passcode policy, confirm iPads become compliant, verify Tunnel payload installs and connects, and document compliance prerequisites in the court mobile access standard for municipal justice mobility.