--- title: Ivanti EPMM 12.4.0.0 - What's New slug: epmm/release-upgrade-guide/ivanti-epmm-12400-whats-new createdAt: 2026-10-26T16:31:41.763Z --- ## General features - **New field Blocked Date added**: A new field **Blocked Date** is added for **ES Advanced search** and **Device Details** sections. The date is set when the device is blocked for the first time and re-sets when the device is unblocked. When upgraded to 12.4.0.0 version, the blocked date for devices that were in blocked state prior to the upgrade is updated to the current time only when the next compliance check is performed. - **Limited editing access for admins with read-only permission enabled**: The admins with read-only access can now edit respective configurations and policies in view mode but the **Save** option is not enabled. With this option the admins can view the values within policies and configurations but cannot make any changes. This option does not apply for the following: All system generated policy and configurations in extended view mode are not viewable. - **Enhanced export capabilities**: A new dialog box appears if you don't select any filter options after selecting the Export to CSV button in the **Logs > Audit Logs and Devices & Users > Devices**. - **Support to delete multiple Stale LDAP Users**: The administrators can now delete multiple Stale LDAP Users from **Devices & Users > Users > Stale LDAP Users > Delete All Stale Users > Yes**. For more information, see **Deleting Stale LDAP Users without roles** in the *Ivanti EPMM Getting Started Guide*. - **Support for VMware ESXi 8**: VMware ESXi v8.0 is now supported with EPMM 12.4.0.0 release. ## Android features - **Support to allow devices to bulk enroll post a wipe**: The devices can now register in the same bulk enrollment profile again after the device was wiped and also through normal registration (not bulk enrollment) with new Mobile\@work 12.4.0.0 client. It is now mandatory for the admins to create a QR code in the Provisioner app using the custom attribute **bulk\_enrollment=true** for 12.4.0.0 client. A new warning note is added in the device deletion popup, when deleting a device that is part of bulk enrollment. For more information, see *Deleting a profile and associated device* in the *EPMM Device Management Guide for Android and Android Enterprise devices* - **Support for creating private space**: Administrators can now select the **Allow Private Space** option in Managed Device with Work Profile Mode to allow or disallow the Private Space on a device. Navigate to **EPMM admin portal > Policies & Configs > Policies > Lockdown > Android enterprise > Managed Device > Device Restrictions**. This is applicable for Android 15+ devices. For more information, see **Lockdown policy fields for Android Enterprise devices in Work Managed Device mode, Managed device with Work Profile mode, and Work Profile on Company Owned Device mode** in the *Getting Started with Ivanti EPMM Guide*. - **Support for Artificial Intelligence (AI) assistance**: Administrators can now select the **Allow AI** option for Devices in Managed Device, Work Profile and Managed Device with Work Profile Mode to allow or disallow the AI on a device. Navigate to **EPMM admin portal > Policies & Configs > Policies > Lockdown > Android enterprise > Work Profile, Managed Device, Managed devices with Work Profile and Work Profile for Company Owned Device**. This is applicable for Android 15+ devices. For more information, see **Lockdown policy fields for all Android Enterprise devices** in the *Getting Started with Ivanti EPMM Guide*. ## iOS and macOS features - **Support for 5G Network slicing added**: New 5G Network Slicing option is now available for IKEv2 VPN configuration for iOS devices. - **New field Post-quantum Pre-shared key (PPK) added for iOS VPN configuration**: New **Post-quantum Pre-shared key** (PPK) field is added to the IKEv2 VPN configuration. This key is used with VPN servers that support RFC 8784. The PPK field is not a mandatory to create a VPN configuration. When PPK is enabled, the user needs to enter the **PPKIdentifier** value and select the **PPKMandatory** option from the drop-down menu. - **Support for Safari Extension settings**: Safari Extension settings allows the admin to define the settings for the managed extensions. Safari extension enhances and customizes the web browsing experience on iPhone. With iOS 18, the organizations can now use MDM solutions to manage how Safari extensions are used on supervised devices. The extension management features work for Standard and Private browsing and includes: - Defining which extensions are allowed - Controlling which extensions are always on or always off - Configuring an extension to access websites by specific domains and sub domains. For more information, see *Safari extensions* in the *Device Management Guide for Apple devices*. - **Support for new skip keys added for iOS devices**: New skip keys **Skip the Keyboard pane** and **Skip the Dictation pane added** for iOS devices. - **Support for new restrictions for iOS devices**: The following new iOS restrictions are added: - Allow modifying Media Sharing setting - Allow apps to be hidden - Allow apps to be locked - Allow Mail Summary - Allow RCS Messaging - Allow Call Recording - Allow External Intelligence Integrations - Allow External Intelligence Integrations Sign-In - Allow Default Browser Modification For more information, see see **iOS and tvOS restriction settings** in *Device Management Guide for Apple devices Guide.* - **Support for new restrictions for MacOS devices**: The following new MacOS restrictions are added: - Allow modifying media sharing settings - Allow Mail Summary - Allow External Intelligence Integrations - Allow External Intelligence Integrations Sign-In For more information, see **MacOS restriction settings** section in the *Device Management Guide for Apple devices Guide*. ## Windows features - **The Microsoft Windows devices do not support VPN configuration using Windows VPN**: The Microsoft Windows devices are now decommissioned for VPN configuration that used Windows VPN types such as **\** from **Ivanti EPMM** and **Sentry configurations > App Tunnel Configuration > Services > Service Names** drop-down menu. To align with this change, the related user interface elements for configuring Windows VPNs have been removed, ensuring that they are no longer accessible to the users.