---
title: Secure apps installation order
slug: epmm/appsatwork-guide/secure-apps-installation-order
createdAt: 2026-10-06T07:43:55.867Z
---

You can specify the installation order for AppConnect apps (also called secure apps).

Specifying the installation order is not typically necessary. It is necessary only for a secure app that has a particular dependency on another secure app, which is not a common situation. Installing such apps in the wrong order can result in the apps not working properly. The app developers or app vendor will indicate whether such a dependency exists.

When such a dependency does exist, you configure an installation order only for the interdependent secure apps, not for all secure apps. Secure apps that are not part of the installation order are installed in alphabetical order by app name after the configured interdependent apps.

By specifying the installation order for secure apps, you ensure that apps that depend on each other can work properly.

## Secure app installation order with optional secure apps

You can designate an Android secure app as optional. If you list an optional secure app in the installation order configuration, it is not installed unless the device user specifically chooses to install it.

Therefore, typically, if you list a secure app in the installation order configuration, designate it as a mandatory app. The reason the app is in the installation order configuration is because other apps depend on it to work properly, or it depends on other apps. If other apps depend on it, but it is optional and not installed, the device user will experience functionality issues with the apps that depend on it.

## Specifying the installation order for secure apps

You specify that the installation order for secure apps using the AppConnect app configuration of the Secure Apps Manager in Ivanti EPMM. You create a special key-value pair that lists the secure apps’ package IDs in the required installation order.

:::hint{type="note"}
**Notes**:

- You only specify the order for secure apps that have dependencies on each other.
- No action is required for other secure apps. The other secure apps are installed last, in alphabetical order by application name.
- The Secure Apps Manager is always installed first.
:::

**Procedure **

1. In the Ivanti EPMM Admin Portal, go to <font color="#323232">Policies &amp; Configs &gt; Configurations</font>.
2. Select the AppConnect app configuration (<font color="#323232">Setting Type</font> is <font color="#323232">APPCONFIG</font>) for the Secure Apps Manager.
3. Click the Edit icon.

::Image[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/hU-KmHt0ayua8K7LsZpWg_samappconfigempty.png" position="flex-start" size="100" width="803" height="607" initialPath="../Resources/Images/SAMAppConfigEmpty.png" githubPath="Apps@Work Guide/Resources/Images/SAMAppConfigEmpty.png" darkWidth="803" darkHeight="607" showCaption="false" indent="1"}

4. Click <font color="#323232">Add+.</font>
5. For the <font color="#323232">Key</font>, enter <font color="#323232">AC\_APP\_INSTALL\_ORDER.</font>
6. For the **Value**, enter a list of app package IDs, separated by semi-colons, in the required installation order. For example:
   forgepond.com.acmesecureapps.financetracker;forgepond.com.acmesecureapps.saleslogger
   The financetracker app will be installed first, followed by saleslogger.
   After the listed apps are installed, all other secure apps will be installed in alphabetical order by application name, as it appears in the Ivanti EPMM App Catalog in th&#x65;**&#x20;App Name** column. For example:
   - Divide PIM
   - File Manager
   - ThinkFree Office Viewer
7. Click <font color="#323232">Save</font>.

## Uninstall order when you specify installation order of secure apps

If you change the labels for the device or apps so that the apps no longer apply to the device, the apps are uninstalled in the following order:

1. Apps that are not part of the AC\_APP\_INSTALL\_ORDER configuration are uninstalled, in reverse alphabetical order.
2. Apps that are part of the AC\_APP\_INSTALL\_ORDER configuration are uninstalled, in the reverse order than they are listed.

## Upgrading apps when you specify the installation order of secure apps

If you add new versions of secure apps to the App Catalog, the apps are upgraded on the device in the following order:

1. New versions of apps that are part of the AC\_APP\_INSTALL\_ORDER configuration are upgraded in the order they are listed.
2. New versions of apps that are not part of the AC\_APP\_INSTALL\_ORDER configuration are upgraded in alphabetical order.

**Related topics** 

[App management action workflows](docId\:X20_HjyRIl2A_zg7CSt-c)