The procedure below describes the required steps to upgrade the Ivanti EPMM servers in an HA environment. This procedure is critical because the Ivanti EPMM HA replication process has built-in checks to enforce that replication can only occur between Ivanti EPMMs with the same software version. Replication will not occur if they are not at the same software release level. This procedure assumes you are logging into the System Manager Portal of both the Primary and Secondary Ivanti EPMM servers. If you are not, do so now.

Ensure that any currently running replication process is allowed to complete before upgrading the Ivanti EPMM. Do not proceed unless the 

Disable the load balancer from detecting any of the HA Ivanti EPMMs from becoming unavailable and failing over.

Upgrade the Secondary and validate the upgrade.

Make this server Primary so you can download the Ivanti EPMM upgrade software (allowing the server to connect to support portal)

Return the server mode back to Secondary.

Upgrade the Primary Ivanti EPMM and validate the upgrade.

Delete the existing managed host entries, then configure SSH keys between the Ivanti EPMM servers to establish a trusted server-to-server relationship using new ECDSA public-key cryptography. Ivanti EPMM no longer supports RSA keys.

Perform test and validation on the Ivanti EPMM HA environment. Complete the steps outlined in the 

Review and update the rest of the HA configuration parameters, especially the 

 parameters, as these will most likely need to be updated.

At this point, the HA environment is back to normal operation with all Ivanti EPMMs running on the same software release version.

HA setup and configuration

High Availability Ivanti EPMM software upgrade procedures

EmailPlusiOSGuide.ACATG

GlobalBookTitles.SSIG

Ivanti Sentry Guide for Ivanti Neurons for MDM

GlobalBookTitles.MSGC

GlobalBookTitles.MSG

Ivanti EPMM Device Management Guide for iOS and macOS Devices

GlobalBookTitles.DMGi

Ivanti Neurons for MDM Administrator Guide

GlobalBookTitles.CAG

GlobalBookTitles.DMG_

EmailPlusiOSGuide.AAWG

GlobalBookTitles.AAWG

GlobalBookTitles.TIGA

GlobalBookTitles.ACATG

GlobalBookTitles.EIGA

Ivanti On-Premise Installation Guide for Core and Enterprise Connector

GlobalBookTitles.OPIG

GlobalBookTitles.SSIG-Standalone-Sentry-Installation-Guide

GlobalBookTitles.MSGC-Sentry-Guide-for-Cloud

GlobalBookTitles.MSG-Sentry-Guide-for-Core

Core Device Management Guide for iOS and macOS Devices

GlobalBookTitles.DMGi-Core-Device-Management-Guide-for-iOS-and-macOS-Devices

GlobalBookTitles.CAG-Cloud-Administrator-Guide

GlobalBookTitles.DMG_-Core-Device-Management-Guide

GlobalBookTitles.AAWG-Core-Apps@Work-Guide

GlobalBookTitles.TIGA-Tunnel-for-iOS-Guide

GlobalBookTitles.ACATG-AppConnect-Guide-for-Core

incappticConnect.incapptic_Full

incapptic Connect 1.44.0 - 1.50.0 Release Notes

incappticConnect.Release_Notes_title

incappticConnect.Release_month,_year

GlobalBookTitles.EAGA

GlobalBookTitles_new.MSGC

Ivanti On-Premise Installation Guide for Ivanti EPMM and Enterprise Connector

GlobalBookTitles.OPIG-Ivanti-On-Premise-Installation-Guide-for-Ivanti-EPMM-and-Enterprise-Connector

Primary.Company

Ivanti EPMM Device Management Guide for Android and Android Enterprise Devices

GlobalBookTitles.DMGA

GlobalBookTitles.TAGA

GlobalBookTitles_new.CAG

Primary.Product

GlobalBookTitles.MAG

GlobalBookTitles.GSCG

Primary.Product-Ivanti-Access-68-69

Ivanti Tunnel 4.14.0 - 4.15.0 for iOS Release Notes

Primary.Product-Ivanti-Tunnel-4.14.0-4.15.0-for-iOS-Release-Notes

GlobalBookTitles.DWIG

NewProdNames.Docs@Work

GlobalBookTitles.ACATG-Ivanti-AppConnect-Guide-for-EPMM

DocsAtWorkiOSGuide.AAWG

Ivanti EPMM Device Management Guide for iOS and macOS devices

GlobalBookTitles.DMGi-Ivanti-EPMM-Device-Management-Guide-for-iOS-and-macOS-devices

Ivanti Derived Credentials Guide for EPMM

GlobalBookTitles.DCG

GlobalBookTitles.MSG-Ivanti-Standalone-Sentry-Guide-for-EPMM

NewProdNames.Apps@Work

GlobalBookTitles_updated.DMG_

WebAtWorkForiOS.ACATG

GlobalBookTitles_updated.AAWG

GlobalBookTitles_updated.TIGA

GlobalBookTitles_updated.ACATG

GlobalBookTitles_updated.DMGi

GlobalBookTitles_updated.MSG

GlobalBookTitles_updated.MSGC

GlobalBookTitles_-_Copy.TIGA

Primary.Year

GlobalBookTitles.TAGA-Tunnel-for-Android-Guide

AppConnect for Android App Developers Guide

GlobalBookTitles.ACAD

Core Device Management Guide for Android and Android Enterprise Devices

GlobalBookTitles.DMGA-Core-Device-Management-Guide-for-Android-and-Android-Enterprise-Devices

GlobalBookTitles.MSGC-Sentry-Guide-for-Ivanti-Neurons-for-MDM

DocsAtWorkAndroidGuide.ACATG

Primary.Year-2026

Ivanti Neurons for MDM Guide Administrator Guide

GlobalBookTitles.CAG-Ivanti-Neurons-for-MDM-Guide-Administrator-Guide

Primary.Product-Ivanti-Tunnel-4.20.0-for-Android-Guide

Mobile Threat Defense Solution Guide for Cloud

GlobalBookTitles.MTDcloud

Primary.Product-Ivanti-Tunnel-4.19.0-4.20.0

Ivanti Tunnel 4.14.0 - 4.15.0 for iOS Guide

Primary.Product-Ivanti-Tunnel-4.14.0-4.15.0-for-iOS-Guide

GlobalBookTitles.MAGAiOS

TunneliOSGuide.MSG

Ivanti Tunnel 4.12.0 - 4.13.0 for macOS Release Notes

Primary.Product-Ivanti-Tunnel-4.12.0-4.13.0-for-macOS-Release-Notes

Ivanti Tunnel 4.12.0 - 4.13.0 for macOS Guide

Primary.Product-Ivanti-Tunnel-4.12.0-4.13.0-for-macOS-Guide

Primary.Product-Tunnel-1.2.3

AppVPNTunnelForWindows12.MSG

incappticConnect.incapptic_Full-Ivanti-incapptic-Connect

Primary.Product-Ivanti-incapptic-Connect-1.44.0-1.50.0

Print.Guide

MI.product

EE.product

PrimaryMI.product

Primary.Product-Neurons-for-MDM-125

a list of users that you want to treat in the same way.

user group

a message or alert that is sent to the device. As per Apple, Push notifications to offline devices are based on APNs offline storage policy.

push notifications

a list of mobile apps you have made available for your users. Includes apps that users can download from public app stores and apps you intend to distribute using the device management system (In-house apps).

app catalog

collections of settings that you send to devices.

configurations

sets of requirements and compliance actions defined for devices.

policies

PrimaryMI.license2

an app distributed by the device management service rather than downloaded from a public app store.

in-house app

PrimaryMI.app

EE.app

PrimaryMI.license3

files that are published by and distributed to users.

content

a list of files that have been published by and distributed to users. A typical catalog might include sales presentations, images, spreadsheets, and documents.

content catalog

EE.license3

applications that are allowed on a device. A device that has other apps installed is considered out of compliance.

Allowlist apps

applications that are not approved for installation on a device. A device that has any of these apps installed is considered out of compliance.

Blockedlist apps

applications that must be installed on a device. A device that is missing any of these apps is considered out of compliance.

required apps

automated responses to a device that violates rules for managed devices.

compliance actions

PrimaryMI.license1

A third-party vendor translates this Administrator Guide into many languages. The accelerated release cadence of Ivanti Neurons for MDM means that sometimes there is a delay in publishing translated content. If your non-English Administrator Guide is out of date, please access the latest content in the English language by accessing the URL, http://[base Administrator Guide URL]/xx/all/en-us/LandingPage.htm, where [base Administrator Guide URL] is the address after http:// and before the latest Ivanti Neurons for MDM version number, and xx is the latest version number of Ivanti Neurons for MDM. For example, to access release 91 online help, the URL would be http://[base Administrator Guide URL]/91/all/en-us/LandingPage.htm.

If your language is unavailable

NewProdNames.Cloud

Ivanti Standalone Sentry 9.14.0 - 10.8.2 Release Notes