Ivanti EPMM 12.4.0.0 - What's New

3 min

General features

New field Blocked Date added: A new field Blocked Date is added for ES Advanced search and Device Details sections. The date is set when the device is blocked for the first time and re-sets when the device is unblocked. When upgraded to 12.4.0.0 version, the blocked date for devices that were in blocked state prior to the upgrade is updated to the current time only when the next compliance check is performed.

Limited editing access for admins with read-only permission enabled: The admins with read-only access can now edit respective configurations and policies in view mode but the Save option is not enabled. With this option the admins can view the values within policies and configurations but cannot make any changes. This option does not apply for the following: All system generated policy and configurations in extended view mode are not viewable.

Enhanced export capabilities: A new dialog box appears if you don't select any filter options after selecting the Export to CSV button in the Logs > Audit Logs and Devices & Users > Devices.

Support to delete multiple Stale LDAP Users: The administrators can now delete multiple Stale LDAP Users from Devices & Users > Users > Stale LDAP Users > Delete All Stale Users > Yes. For more information, see Deleting Stale LDAP Users without roles in the Ivanti EPMM Getting Started Guide.

Support for VMware ESXi 8: VMware ESXi v8.0 is now supported with EPMM 12.4.0.0 release.

Support to allow devices to bulk enroll post a wipe: The devices can now register in the same bulk enrollment profile again after the device was wiped and also through normal registration (not bulk enrollment) with new Mobile@work 12.4.0.0 client. It is now mandatory for the admins to create a QR code in the Provisioner app using the custom attribute bulk_enrollment=true for 12.4.0.0 client. A new warning note is added in the device deletion popup, when deleting a device that is part of bulk enrollment. For more information, see Deleting a profile and associated device in the EPMM Device Management Guide for Android and Android Enterprise devices

Support for creating private space: Administrators can now select the Allow Private Space option in Managed Device with Work Profile Mode to allow or disallow the Private Space on a device. Navigate to EPMM admin portal > Policies & Configs > Policies > Lockdown > Android enterprise > Managed Device > Device Restrictions. This is applicable for Android 15+ devices. For more information, see Lockdown policy fields for Android Enterprise devices in Work Managed Device mode, Managed device with Work Profile mode, and Work Profile on Company Owned Device mode in the Getting Started with Ivanti EPMM Guide.

Support for Artificial Intelligence (AI) assistance: Administrators can now select the Allow AI option for Devices in Managed Device, Work Profile and Managed Device with Work Profile Mode to allow or disallow the AI on a device. Navigate to EPMM admin portal > Policies & Configs > Policies > Lockdown > Android enterprise > Work Profile, Managed Device, Managed devices with Work Profile and Work Profile for Company Owned Device. This is applicable for Android 15+ devices. For more information, see Lockdown policy fields for all Android Enterprise devices in the Getting Started with Ivanti EPMM Guide.

Support for 5G Network slicing added: New 5G Network Slicing option is now available for IKEv2 VPN configuration for iOS devices.

New field Post-quantum Pre-shared key (PPK) added for iOS VPN configuration: New Post-quantum Pre-shared key (PPK) field is added to the IKEv2 VPN configuration. This key is used with VPN servers that support RFC 8784. The PPK field is not a mandatory to create a VPN configuration. When PPK is enabled, the user needs to enter the PPKIdentifier value and select the PPKMandatory option from the drop-down menu.

Support for Safari Extension settings: Safari Extension settings allows the admin to define the settings for the managed extensions. Safari extension enhances and customizes the web browsing experience on iPhone. With iOS 18, the organizations can now use MDM solutions to manage how Safari extensions are used on supervised devices. The extension management features work for Standard and Private browsing and includes:

Configuring an extension to access websites by specific domains and sub domains.

For more information, see Safari extensions in the Device Management Guide for Apple devices.

Support for new skip keys added for iOS devices: New skip keys Skip the Keyboard pane and Skip the Dictation pane added for iOS devices.

Support for new restrictions for iOS devices: The following new iOS restrictions are added:

For more information, see see iOS and tvOS restriction settings in Device Management Guide for Apple devices Guide.

Support for new restrictions for MacOS devices: The following new MacOS restrictions are added:

Allow External Intelligence Integrations Sign-In For more information, see MacOS restriction settings section in the Device Management Guide for Apple devices Guide.

The Microsoft Windows devices do not support VPN configuration using Windows VPN: The Microsoft Windows devices are now decommissioned for VPN configuration that used Windows VPN types such as <IP_ANY_WP8.1> from Ivanti EPMM and Sentry configurations > App Tunnel Configuration > Services > Service Names drop-down menu. To align with this change, the related user interface elements for configuring Windows VPNs have been removed, ensuring that they are no longer accessible to the users.