Ivanti EPMM 12.10.0.0 - What's New
3 min
General features
- Enhanced secure communication with Sentry: This release strengthens security for communication between Ivanti EPMM and Ivanti Sentry. Customers who use supported, compatible versions continue to benefit from seamless interoperability while gaining improved security for this connection. For more information, see the Ivanti EPMM upgrade information section in the Ivanti EPMM and Connector Release Notes.
- Enhance VPN configuration label handling: In Ivanti EPMM, when a label is removed from a VPN configuration, VPN app setting associations are now isolated by label and device space, preventing VPN associations from being unintentionally removed from devices in other device spaces. After an upgrade, reapplying labels recalculates the associations and restores the correct VPN configuration associations. For more information see, the Configuring new VPN settings section in the Ivanti EPMM Device Management Guide.
- Improved Google BeyondCorp User Experience: Ivanti EPMM now improves the Google BeyondCorp registration experience by guiding users to install and set up a supported Google Workspace app before continuing registration. Additionally, it simplifies the app selection, sign-in, and Google Workspace app launch during setup. For more information, see the Google BeyondCorp Configuration section in the Ivanti EPMM Device Management Guide.
- Support for Nutanix: Ivanti EPMM and Connector now supports Nutanix environments, giving you more flexibility when deploying and managing your EPMM infrastructure. For more information see, the Virtual Ivanti EPMM requirements section in the Ivanti EPMM On-Premise Installation Guide for Ivanti EPMM and Enterprise Connector.
Android features
- In-house app support for Work Profile on Company Owned devices: Starting with this release, Ivanti EPMM adds support for pushing in-house apps to Android Enterprise devices registered in Work Profile on Company Owned device mode. This enhancement enables administrators to deploy required apps to the work profile on supported company-owned devices.
This feature is supported only on Samsung devices with a valid Samsung general policy and Knox license.
For more information see, the App restrictions with in-house applications for Android section in the Ivanti EPMM Apps@Work Guide.
- Serial number column in Devices view: Ivanti EPMM now adds a Serial Number column to the Devices & Users > Devices view using the existing column selection options. For more information see, the Advanced searching section in the Ivanti EPMM Device Management Guide for Android and Android Enterprise devices.
- Android 17 Device Platform Updates support: Ivanti EPMM now adds Device Platform Updates (DPU) support for Android 17. For more information see, the Ivanti EPMM OS and platform updates section in the Ivanti EPMM System Manager Guide.
- Enhanced certificate alias substitution for Android app restrictions: This release enhances the existing $CERT_ALIAS:<config_name>$ app substitution variable used in Android Enterprise app restrictions. Administrators can now optionally append :b64 or :b64password to send either the uploaded user certificate in Base64 format or the certificate password to Google. If neither option is specified, the existing certificate alias behavior remains unchanged. For more information see, Configuring a user-provided certificate enrollment setting section in the Ivanti EPMM Device Management Guide for Android and Android Enterprise devices.
- IMEI Support for Android Bulk Enrollment: Starting with this release, Android Bulk Enrollment supports IMEI-based enrollment. Administrators can use the IMEI number printed on the device box to complete zero-touch registration without opening the box to locate the serial number. Administrators must use the updated CSV format, which includes the new IMEI column. If they upload an older CSV file, the system displays an error. For more information see, the Android Bulk Enrollment section in the Ivanti EPMM Device Management Guide for Android and Android Enterprise devices.
iOS and macOS features
- Beta Enrollment for Apple Devices: Ivanti EPMM now supports Beta Enrollment for supervised Apple devices, enabling administrators to synchronize beta enrollment tokens, assign approved beta programs during device enrollment, and manage beta program participation through the Software Update Settings policy. Administrators can allow, offer, require, or block beta programs, simplifying beta testing and providing greater control over software update enrollment. For more information see, the Beta Enrollment and Software Update Settings sections in the Ivanti EPMM Device Management Guide.
- Support for new declarative configurations for iOS and macOS: Ivanti EPMM now supports new iOS 26.4, iPadOS 26.4, and macOS 26.4 restrictions using Declarative Device Management (DDM). Administrators can configure supported restrictions from Policies & Configs > Configurations > Add New > Apple > iOS/macOS/tvOS > Restrictions Only restrictions supported by the selected platform are displayed. Configurations are pushed only to match platform labels and devices. The supported declarative configurations are:
- Intelligence Setting
- External Intelligence Setting
- Siri Setting
- Keyboard Setting For more information see, the iOS and macOS settings section in the Ivanti EPMM Device Management Guide for Apple devices.
- Toggle support for iOS restrictions configuration: Starting with this release, a new Toggle option is added for each restriction in the iOS restriction configuration. The toggle determines whether a restriction value is sent to the device. When the toggle is:
- Enabled: The configured value is included in the device payload.
- Disabled: The value is not sent to the device and is not managed by the server. For more information see, the iOS and tvOS restrictions settings section in the Ivanti EPMM Device Management Guide for Apple devices.
- New restriction for macOS: Ivanti EPMM now supports the Allow Rosetta Usage Awareness restriction for macOS 26.4 and later devices. Administrators can configure this restriction from Policies & Configs > Configurations > Add New > Apple > macOS > Restrictions. For more information see, the macOS settings section in the Ivanti EPMM Device Management Guide for Apple devices.
- Change in Software Update Enforcement for Apple: Apple is deprecating the EPMM MDM software update commands for devices running iOS 27 and later. As a result, the following features are not supported on iOS 27 and later devices:
- iOS Software Update Policy
- macOS Software Update Policy
- Update OS Software action
- Software Version Update
Apple recommends using the Software Update Enforcement policy to manage software update behavior on these devices. To align with this change, administrators must use Software Update Enforcement to configure and enforce software updates for Apple devices running iOS 27 and later. For more information see, iOS and tvOS restrictions settings, macOS settings, and Configuring iOS and macOS software updates sections in the Ivanti EPMM Device Management Guide for Apple devices.
- Support for unmanaged installation of iOS apps: Administrators can now configure supported iOS VPP apps to be installed as unmanaged apps. User must select Assign License before installing the app from Mobile@Work or a Webclip. After the required app license is assigned, the app status changes from Assign License to Install. Selecting Install redirects the user to the App Store to complete the installation. EPMM does not manage or track the installation state of unmanaged apps. This option is available only for iOS VPP apps with assigned VPP app labels. In license management, administrators can view and revoke licenses assigned to unmanaged apps. Device details for unmanaged app installations are not displayed in the App Catalog because EPMM does not manage unmanaged app installations. For more information see, Install iOS VPP apps as unmanaged apps section in the Ivanti EPMM Device Management Guide for Apple devices.
- Subscriber MCC and MNC support for iOS 26 devices: For iOS 26 and later devices, Ivanti EPMM uses the available Current MCC and MNC values when Subscriber MCC and MNC values are not reported in the MDM device information response. EPMM also uses the roaming status reported by the device instead of deriving it from Subscriber and Current MCC and MNC values.
In multiple eSIM scenarios, EPMM uses the device-reported EID to identify the primary SIM and display the current phone number on the Devices tab.
For more information see, Advanced searching section in the Ivanti EPMM Device Management Guide for Apple devices.
- Enhanced retry handling for NotNow responses on Apple devices: Starting with this release, Ivanti EPMM enhanced handling of NotNow responses for locked Apple devices. If a device returns NotNow for an EPMM MDM command, the server now retries the deferred NotNow command before ending communication. This enhancement helps the device retain the retry state and fetch the pending command after it unlocks or after clearing the passcode. For more information see, the Lock section in the Ivanti EPMM Device Management Guide for Apple devices.