Ivanti EPMM 12.2.0.0 - What's New

3 min

General features

Support to add ability to retrieve the install date for managed applications: An 'App Install Date' API has been introduced to retrieve the install date for managed applications and also update the date for operating system. For more information, see Get installed app details of a device in the Ivanti EPMM V2 API Guide. An 'getOSUpdateDate' API has been introduced to fetch the device OS update details. For more information, see Get OS Update Date > Device Management" In the Ivanti EPMM V2 API Guide.

Support to add a warning message for Sentry Self-signed certificates: Standalone Sentry now displays new warning message to discourage the use of Sentry Self-signed certificates for TLS handshake between Sentry and Tunnel.

Android features

Support to allow Nearby Streaming: Administrators can now toggle the Nearby streaming to video stream applications to nearby devices. Navigate to EPMM admin portal > Devices and Users > Devices > Managed device > Lockdown Policy. This is applicable for Android 13+ devices. For more information, see Support to allow Nearby Streaming in Ivanti EPMM Device Management Guide for Android and Android Enterprise devices.

Support for Unlock V2 API: Unlock V2 API now supports the custom unlock pin option for Android devices. Administrators can send a new optional query parameter "unlockPin", to unlock an Android device. If unlockPin is not sent using an API, the device will be unlocked with default pin, 0000. For more information, see Unlock devices in the Ivanti EPMM V2 API Guide.

Support to update Kiosk Exit PIN: Administrators can now update the Kiosk Exit PIN for Kiosk policies using an API endpoint.

/api/v2/policy/list

/api/v2/policy/androidkioskmode/exitpin For more information, see Policy Management in the Ivanti EPMM V2 API Guide.

Support to increase the device serial number field: Android Bulk Enrollment now allows maximum length of the serial number to 20 characters.

Support to clear the user data from Google Chrome: Android Shared Kiosk for Shared Users retained app data despite force reinstall on the Google Chrome application causing privacy issues. To enable, navigate to App Catalog Apps > Allow Google Chrome cache to cleared if enabled only when devices are in shared kiosk mode. For more information, see Support to clear the user data from Google Chrome in Ivanti EPMM Device Management Guide for Android and Android Enterprise devices.

iOS and macOS features

Support to allow users from installing apps through web distribution: A new option 'Allow users from installing apps through Web Distribution' is introduced in EPMM admin portal> Policies & Configs > Configurations > Add New > Apple > iOS / tvOS > Restrictions settings. By default, this feature is enabled, and it allows you to install applications directly from the web distribution. This feature is available only for iOS 17.5 and later supervised devices and for selected EU countries. For more information, see iOS and tvOS restrictions settings in the Ivanti EPMM Device Management Guide for iOS and macOS Devices.

Support to view Login items on the macOS devices: A new feature 'Login Items' is introduced in the EPMM admin portal > Policies & Configs > Configurations > Add New > Apple > macOS Only > Login Items. This feature is available only for macOS 13 and later devices. Once the appropriate login item is configured and a profile related to the configuration is installed on the device, the corresponding login item will be automatically greyed out in MDM to disallow users from either enabling or disabling it. For more information, see Login items for macOS in the Ivanti EPMM Device Management Guide for iOS and macOS Devices.

Support to Allow Live Voice mail and Force ESIM: Two new options, 'Allow live voice mail' and ‘Force preserve eSIM on erase’, are introduced in the EPMM admin portal> Policies & Configs > Configurations > Add New > Apple > iOS / tvOS > Restrictions settings.

By default, 'Allow live voice mail' is enabled, and it allows you to enable live voice mail on the device.

By default, ‘Force preserve eSIM on erase’ is disabled. Once you enable it, it allows the system to preserve eSIM when it erases the device due to too many failed password attempts. These features are available only for iOS 17.2 and later supervised devices. For more information, see iOS and tvOS restrictions settings in the Ivanti EPMM Device Management Guide for iOS and macOS Devices.

The new set of Apple restrictions for iOS and macOS are now listed in Device details page > Restrictions tab. For more information, see iOS and tvOS restriction settings in Ivanti EPMM Device Management Guide for iOS and macOS devices Guide. Apple Restrictions:

Apple Restriction	Description
iOS 18.0 or later versions
ALLOW ESIM OUTGOING TRANSFERS	Allow ESIM Outgoing Transfers (iOS 18.0 and later devices only
ALLOW IMAGE WAND	Allow Image Wand (iOS 18.0 and later devices only), "allowImageWand"
ALLOW PERSONALIZED HANDWRITING RESULTS	Allow Personalized Handwriting Results (iOS 18.0 and later devices only
iOS 18.0, macOS 15.0 and later
ALLOW GENMOJI	Allow Genmoji (iOS 18.0, macOS 15.0 and later devices only)
ALLOW IMAGE PLAYGROUND	Allow Image Playground (iOS 18.0, macOS 15.0 and later devices only)
ALLOW WRITING TOOLS	Allow Writing Tools (iOS 18.0, macOS 15.0 and later devices only)
ALLOW_IPHONE_MIRRORING	Allow iPhone Mirroring (iOS 18.0, macOS 15.0 and later devices only)

Support for Apple Watch enrollment and Management: In this release we are adding the ability to enroll Apple Watch. A new iPhone configuration has been added which allows for any Apple watch paired to be enrolled and managed via MDM. Only supported by iPhones on iOS16+. After the configuration is applied, any Apple Watch running WatchOS 10 is enrolled in Device Management when paired. If an Apple Watch is already paired, it must be removed and paired to the iPhone again to be enrolled. As part of the process, supervision is enabled on Apple Watch. This supervision allows the MDM to perform actions such as Configuring Settings, Retrieving Device Information, Clearing the passcode, and Locking or Erasing the device. After a successful pairing, the Managed Apple ID is automatically signed in on the Apple Watch. For more information, see Support for WatchOS enrollment in the Ivanti EPMM Device Management for iOS and macOS Guide.

Support to view device battery health status: A new field, Device Battery Health status for iOS and macOS devices is now included in Devices & Users > Devices > Device Details tab of the device. Apple Device Declarative Management must be enabled for this feature to be available. For more information, see Viewing device battery health status in the Ivanti EPMM Device Management for iOS and macOS Guide.

Support for Software Update Enrollment Policy: The Software Update Enrollment Policy is an Apple Device Declarative Management feature. The Software Update policy lets the administrators perform the following tasks:

Administrators can set up a deadline to force upgrade the device.

Administrators can also set a URL with a message to display on the Settings of the device to notify the upcoming software update. For more information, see Software Update Enrollment Policy in the Ivanti EPMM Device Management for iOS and macOS Guide.

Support to add new Distributor Identifier on App Details for alternative marketplaces: A new column ‘DISTRIBUTOR IDENTIFIER’ is added in the EPMM admin portal > Apps > Installed Apps on the application details page. This ‘DISTRIBUTOR IDENTIFIER’ is also available in the EPMM admin portal > Devices & Users > Devices on the device details page under the APPS section. It shows the marketplace-hosted application’s distributor ID. This value is available on iOS 17.4 and later devices. On the Installed Apps page > Advanced Search, you can use the Distributor Identifier as a filter for advanced search, and once you select Export to CSV, the ‘DISTRIBUTOR IDENTIFIER’ column appears in app inventory search results. For more information, see Managing installed iOS and macOS apps in the Ivanti EPMM Apps@Work Guide.