Ivanti EPMM 12.1.0.0 - What's New
8 min
General features
- Support to pull logs through new Ivanti Bridge: Ivanti EPMM sends a request to the Windows device to pull bridge logs through Ivanti Bridge. The functionality of the Send Current Log and Send All Logs options, available in EPMM admin portal> Device & Users > Devices > Actions > Windows Only > Ivanti Bridge, fetched the bridge logs present on the device. However, the functionality was broken.
With Ivanti EPMM 12.1.0.0, this broken functionality is fixed. This functionality works for both MobileIron Bridge and the Ivanti Bridge. For more information, see Bridge logs overview in Ivanti EPMM Device management Guide for Windows.
- Support for Expired state for Automated Device Cleanup: The 'Expired' state is now provided in EPMM admin portal> Settings > Users & Devices > Automated Device Cleanup to cleanup PIN expired devices. For more information, see Automated device cleanup in the Ivanti EPMM Device Management Guide.
- Support to view Installed Apps in Custom Space: With managed services, administrators can now view the installed applications for Android and iOS devices that are in the Custom Space. Enable 'View app inventory' for Custom Spaces from EPMM admin portal> Admin > Actions > Edit Roles. To view the installed applications, navigate to EPMM admin portal> Apps > Installed Apps. To see the list of devices on which the app is installed, click on the number of devices that is being displayed in Devices Installed column. Support to see if the application is hidden on a particular device: Clicking the Export to CSV button in the above window and displaying the list of devices on which the application is installed lets you download the list of devices. This CSV will also contain a 'Hidden' Column, stating whether that application is hidden on that particular device or not. This is available only for supervised iOS devices. For more information, see Viewing Installed Apps in the Ivanti EPMM Apps@Work Guide.
- Support to provide bundle identifier: The Provider bundle identifier field is available when the Connection Type is selected as Custom SSL. Using this, the application can be configured with different Provider Bundle Identifiers. Navigate to EPMM admin portal>Policies & Configs > VPN Configuration. For more information, see Custom SSL in Ivanti EPMM Device Management Guide.
- Support for a new description field in the Standalone and Integrated Sentry services: A new field for description is now added to help manage Sentry servers from Ivanti EPMM. Navigate to EPMM admin portal> Services > Sentry.
- Support to enable new Help@Work (Teamviewier) integration for Android: From EPMM version 12.1, there is an option to have a modern integration experience (based on authorization) when integrating with TeamViewer. It is recommended that existing active integrations migrate to the new integration option after EPMM server upgrades to version 12.1 version. For new integrations, only modern workflow (based on authorization) is supported. For more information, see Transitioning Help@Work to the Modern workflow for Android in Ivanti EPMM Device Management Guide for Android and Android Enterprise Devices and Transitioning Help@Work to the Modern workflow@Work for iOS in Ivanti EPMM Device Management Guide for iOS and macOS Devices.
Android features
- Support device's mac address value as substitution: The $DEVICE_INVENTORY_MAC$ is a new variable supported only for Android devices with managed or managed devices with work profile (DO, AOSP, COMP, EPO). This variable substitution is supported in app restrictions, custom lockscreen message in Lockdown policy, compliance actions, and certificate enrollment setting. Since this is an Android specific variable and does not report MAC addresses for all registration modes, it must be carefully configured. For more information, see Certificate Enrollment settings in Ivanti EPMM Device Management Guide for Android and Android Enterprise devices and App configuration for Android Enterprise apps in Ivanti EPMM 11.4.0.0 - 11.12.0.0 Apps@Work Guide.
- Support to disable the lockscreen shortcuts on an Android device: A new 'Block keyguard shortcuts' option is available in EPMM admin portal> Policies & Configs > Policies > Security Policy > Android enterprise section. This option is disabled by default. For more information, see Security Policies in the Getting Started with Ivanti EPMM Guide.
- Select the checkbox to disable the lockscreen shortcuts on the device.
- Deselect the checkbox to enable the lockscreen shortcuts on the device.
- Support to Ultra-wideband restriction: The Ultra-wideband restriction can be set only by a device owner or a profile owner of an organization-owned managed profile on the parent profile. In both cases, the restriction applies globally on the device and will turn off the ultra-wideband radio if turned on. Navigate to EPMM admin portal > Devices and Users > Devices > Managed device > Lockdown Policy. This restriction cannot be turned on via the Settings if it is disallowed. For more information, see Lockdown policy fields for Android Enterprise devices in Work Managed Device mode, Managed device with Work Profile mode, and Work Profile on Company Owned Device mode in Getting Started with Ivanti EPMM Guide.
- Support for Wi-Fi Direct option: Administrators can now toggle the 'Allow WIFI direct' option for Devices in Managed Device, Managed Device- non GMS, and Managed Device with Work Profile Modes to allow or disallow the Wi-Fi Direct on a device. Navigate to EPMM admin portal > Policies and Configs > Policies > Lockdown > Managed device. This is applicable for Android 13+ devices. For more information, see Lockdown policy fields for Android Enterprise devices in Work Managed Device mode, Managed device with Work Profile mode, and Work Profile on Company Owned Device mode in Getting Started with Ivanti EPMM Guide.
iOS and macOS features
- Support to set notification interval in hours for iOS devices: The time interval set in the notification interval triggers the visible notifications on a device. This time interval can now be set in hours. Navigate to EPMM admin portal> Policies and Configs > Policies > Default Sync Policy. For more information, see Sync Policies in the Getting Started with Ivanti EPMM Guide.
- Support for admins to disable Visible Notifications (VNS): A new value '0' is added in the Schedule Notification Interval field in the sync policy to disable the VNS notification. Navigate to EPMM admin portal> Policies & Configs > Policies > Sync Policy. For more information, see Sync policies in the Getting Started with Ivanti EPMM Guide and Setting the Schedule Notification Interval for iOS device in MTD Lookout Guide.
- Support to provide device battery information for macOS 13.3 and later versions: A new field hasBattery is introduced in EPMM admin portal> Devices and Users > Devices > Device Details, which displays the battery information of the device. This filed is included in the 'Advanced search' for administrators to search for devices with battery. For more information, see Advanced searching in the Ivanti EPMM Device Management Guide for iOS and macOS Devices.
- Support for Apple device declarative management: Apple's Declarative Device Management is a modern management protocol that allows managed devices to proactively and autonomously apply their own management settings with less communication. Declarative Device Management is enabled on newly enrolled devices during the enrollment process or during check-in for existing devices. Navigate to EPMM admin portal> Devices & Users > Devices > Device Details > Apple Declarative Management. Declarative Device Management is automatically enabled on the following:
- Computers with macOS 13 or later
- Devices with iOS 15 or iPadOS 15 only for User Enrollment mode
- Devices with iOS 16 or iPadOS 16 with all enrollment types including Shared iPad
The Device Details page displays the enrollment details once the device is enabled with Apple Declarative Management. For more information, see Support for Declarative Device Management in Ivanti EPMM Device Management Guide for iOS and macOS Devices.
- Support for Return to Service: Ivanti EPMM supports Return to Service for iOS DEP enrollment devices. This feature lets you configure devices to automatically re-enroll after erasing all data such that users need not re-enroll them manually after a wipe. Return to Service is available in EPMM admin portal > Device & Users > Devices > Actions > Wipe. For more information, see Wipe in Ivanti EPMM Device Management Guide for iOS and macOS devices.
- Support to allow users from installing new alternative marketplace applications: A new checkbox 'Allow users from installing new alternative marketplace apps' is introduced in EPMM admin portal> Policies & Configs > Configurations > Add New > Apple > iOS / tvOS > Restrictions settings. By default, this feature is enabled, and it allows you to download applications from alternative marketplaces instead of Apple Store. This feature is available only for iOS 17.4 and later supervised devices and for selected EU countries. For more information, see iOS and tvOS restriction settings in Ivanti EPMM Device Management Guide for iOS and macOS devices.