--- title: Ivanti EPMM 12.0.0.0 - What's New slug: epmm/release-upgrade-guide/ivanti-epmm-12000-whats-new createdAt: 2026-10-26T16:35:26.512Z --- ## General features - **Support for Oracle Linux 8**: Ivanti EPMM platform is now upgraded to Oracle Linux 8 from CentOS7. - **Support to delete an individual device or multiple devices**: The individual device record can now be deleted if the device is in any of the following states: Wipe-Pending, Retire-Pending, Unknown, Wiped and Retired. For more information, see 'Automated Device Cleanup' in Ivanti EPMM Device Management Guide for Android and Android Enterprise. - **Support for Unicode symbols in app names**: Ivanti EPMM now supports Unicode characters like emoji symbols in application names if an application's display name contains a Unicode character. You can also add an emoji by editing the application name. - **DigiCert One Certificate Enrollment Setting**: Ivanti EPMM supports DigiCert One option in the Certificate Enrollment setting. Integration with DigiCert enables you to configure certificate-based authentication. For more information, see 'Configuring DigiCert One' in the Ivanti EPMM Device Management Guide for iOS and macOS devices. - **Support to download client logs for device logs for Android and iOS devices**: Administrators can now download the client logs for device logs. In Ivanti EPMM, in Device Details, select View Logs for device to download the client logs of that device. For more information, see 'Pull client logs for client devices' in the Ivanti EPMM Device Management Guide for Android and Android Enterprise. ## Android features - **G Suite Enterprise users can enroll with Android enterprise**: Ivanti EPMM provisions and manages users automatically with Google. The following details are required to enroll: - Enterprise Domain Name - Enterprise Domain Email - Enterprise MDM token - Upload json file of service account :::Paragraph{indent="2"} For more information, see 'Setting up directly via Ivanti EPMM' in Ivanti EPMM Device Management Guide for Android and Android Enterprise. ::: - **Support to control Samsung Knox Mobile\@Work activation**: Administrators can let Mobile\@Work skip the standard Knox license activation carried out during the Samsung Knox device registrations. This requires Samsung General Policy to have 'Activate Knox Feature' disabled. This allows for activation to be skipped and is recommended only in places where internet access to Samsung licensing services is not available. Settings will only take effect for new registrations. For more information, see 'Working with Samsung general policies' in Ivanti EPMM Device Management Guide for Android and Android Enterprise. - **Support to set notification interval in hours**: The time interval set in the notification interval triggers the visible notifications on a device. This time interval can now be set in hours. - **Support to display recent users logging into the kiosk mode**: Selecting the 'Display Recent Users on Login Screen' option in the staging policy for kiosk mode, displays the recent users to log in faster on devices when logging into shared kiosk mode. By default this option is disabled. If the option is disabled, the recent users will not be displayed for the client. For more information, see 'Configuring the Android shared-kiosk mode' in the Ivanti EPMM Device Management Guide for Android and Android Enterprise. - **Support for new lockdown to allow network reset**: Administrators can toggle the Allow Network Reset option for Devices in Managed Device, Managed Device- non GMS and Managed Device with Work Profile Modes to allow or disallow resetting the mobile network, WIFI, and bluetooth options on the device. For more information, see 'Lockdown policy fields for Android Enterprise devices in Work Profile for Company Owned Device mode' in Ivanti EPMM Getting Started Guide. - **Support to preserve administrator added section when schema changes**: Ivanti EPMM tries to preserve the existing setting-values, if the same settings are available in the new app-configuration published by the application developer. This reduces the need to re-define sections. However, it is recommended to test the changes before deployment. - **Support for Android bug report**: Administrators can now include or exclude android bug report while performing Pull Client Logs on a device. A new checkbox 'Collect Android Bug Report Logs' is introduced in Pull Client Logs. For more information, see 'Pull client logs for client devices' in Ivanti EPMM Device Management Guide for Android and Android Enterprise. - Select the checkbox for client logs (optionally, if enabled, network and security logs) along with android bug report to be requested from Mobile at Work. This option requires user action. - Deselect the checkbox for silent logs (optionally, if enabled, network and security logs) running on device to be requested from Mobile at Work . The android bug report is excluded in this request. This option does not require user action. ## iOS and macOS features - **Support to enforce a minimum operating system version**: Ability to allow only minimum operating system version on enrolling devices when using Automated Device Enrollment. - **Support to change properties in the VPN configuration**: VPN configuration supports the following properties: - **Enforce Routes** - This property scopes the included routes to the VPN and the excluded routes to the current primary network interface. - **Exclude Local Networks** - This property excludes all traffic destined for local networks. - **Include All Networks** - This property routes network traffic through the tunnel except traffic for designated system services necessary for maintaining expected device functionality. - **New parameters added to Extensible Single Sign-On**: Ivanti EPMM introduced 12 new parameters to support Extensible Single Sign-On configuration for macOS 13 and above devices. You can configure Extensible Single Sign-On on the Admin Portal to access enterprise resources on macOS devices that are registered with Ivanti EPMM. On the Admin Portal, navigate to Policies & Configs > Configurations > Apple > iOS / macOS / tvOS > Extensible Single Sign-On. Once you enable the Configure Platform SSO checkbox, you can see the 12 new fields. For more information, see 'Extensible Single Sign-On' in the Ivanti EPMM Device Management Guide for iOS and macOS devices. - **Support for Account Driven Device Enrollment (ADDE) for iOS 15+ and macOS 14+ devices**: Account-driven device Enrollment (ADDE) is used for devices that are owned by the organization. With ADDE, organizations have higher visibility and management of the device. ADDE utilizes the user's managed Apple ID, which is required and associated with all enterprise apps and data on the device and in Ivanti EPMM. Enable Account-Driven Device Enrollment in the MDM page, by selecting Settings >iOS > MDM > Enable Account Driven Device Enrollment for iOS/Enable Account Driven Device Enrollment for macOS. For more information, see 'Account Driven Device Enrollment' in the Ivanti EPMM Device Management Guide for iOS and macOS devices. - **Support for macOS apps in Managed App Configuration**: Ivanti EPMM supports Managed App Configuration for macOS applications. Managed App Config allows users to specify a configuration dictionary to communicate with and configure third party managed apps. This feature requires a license, before using this feature ensure your organization has purchased the required licenses. Managed App Config is available in **Ivanti EPMM Policies & Configs** > **Configurations** > **Add New** > **Apple** > **iOS / macOS / tvOS** > **Managed App Config**. For more information, see 'Managed App Config settings that use plists' in the Ivanti EPMM Device Management Guide for iOS and macOS devices. :::hint{type="info"} Managed application configuration for macOS is applicable only for VPP apps. ::: - **Support for configuring relays at the application level**: From this release, the Ivanti EPMM supports configuring relays in apps. Applications that support relays can leverage this configuration to access private data or company resources. A new RELAYS FILTER SETTING section has been added to the Ivanti Admin Portal, where administrators can select relay configurations based on priority and labels. For more information on creating relay configuration, see 'Network Relay' in the Ivanti EPMM Device Management Guide for iOS and macOS devices and more information on relay filter setting, see 'Populating the iOS and macOS App Catalogs' in the Ivanti EPMM Apps\@Work Guide. - **New Cellular Slicing for App Configuration**: Ivanti EPMM added a new Cellular 5G Slicing checkbox for app configuration to support iOS 17 or above devices. Cellular 5G slicing allows businesses to control traffic resources on a more granular level. Each slice of traffic can have its own resource requirements, Quality of Service (QoS), security configurations, and latency requirements. Powered by private 5G, each application can operate on its own dedicated slice based on the data network and app category and ensure it remains in operation even when the network is congested. For more information, see 'Populating the iOS and macOS App Catalogs' in the Ivanti EPMM Apps\@Work Guide. - **Associated Domains for macOS**: Associated Domains help to build a secure connection between the website and the application. Associated domain allows you to share credentials or add functionality to your app from your website. For more information, see 'Associated Domains for macOS' in the Ivanti EPMM Device Management Guide for iOS and macOS devices.