Ivanti EPMM 12.5.0.0 - What's New
3 min
General features
- New map provider for Admin and Self-Service portals: For the Admin and Self-Service portals, the map provider is changed from MapQuest to Google Maps.
- Support for Mutual authentication between SysLog and EPMM TLS communication: Mutual authentication is now supported between SysLog and EPMM TLS communication. The Admin can enable this feature by uploading the SysLog Client Certificate in MICS > Security > Certificate Mgmt > Syslog Client Certificate. For more information, see the Certificates you configure in the System Manager section in the Ivanti EPMM System Manager Guide.
iOS and macOS features
- Added Disk Management configuration settings: The Disk Management configuration settings in macOS defines the policies for effectively managing data in external and network storage devices. For more information, see Configuring the Disk Management section in the Ivanti EPMM Device Management Guide for Apple devices.
- Added new parameters to Extensible Single Sign-On: Introduced the following parameters to support Extensible Single Sign-On configuration for iOS and macOS:
- User Authorization Mode
- Authentication Grace Period
- FileVault Policy
- Login Policy
- Non-Platform SSO Accounts
- Offline Grace Period
- Unlock Policy
- Screen Locked Behavior
- Denied Bundle Identifiers For more information, see Extensible Single Sign-On section in the Ivanti EPMM Device Management Guide for Apple devices.
- Added new parameters to Extensible Single Sign-On Kerberos: Introduced the following parameters to support Extensible Single Sign-On Kerberos configuration for macOS:
- Allow Password
- Allow Smart Card
- Identity Issuer Auto Select Filter
- Start in Smart Card Mode For more information, see Extensible Single Sign-On Kerberos section in the Ivanti EPMM Device Management Guide for Apple devices.
- Support for new restrictions for iOS devices: The following iOS restrictions are added:
- Allow Notes Transcription Summary
- Allow Apple Intelligence Report
- Allow Mail Smart Replies
- Allow Safari Summary
- Allow Default Calling App Modification
- Allow Default Messaging App Modification
- Allowed External Intelligence Workspace IDs For more information, see iOS and tvOS restriction settings in the Ivanti EPMM Device Management Guide for Apple devices.
- Support for new restrictions for macOS devices: The following macOS restrictions are added:
- Allow Notes Transcription Summary (Boolean)
- Allow Apple Intelligence Report (Boolean)
- Allow Mail Smart Replies (Boolean)
- Allow Safari Summary (Boolean)
- Allowed External Intelligence Workspace IDs For more information, see MacOS restriction settings section in the Ivanti EPMM Device Management Guide for Apple devices.
- Support to Retire iOS Devices: New option Retire iOS device is added to the Add Compliance Action page. You can now retire device using the Compliance Actions on iOS devices. This option is available only in Tier 1. On Compliance check for Retire iOS device action, the devices which are non-compliant and out of network will also be moved to Retire Pending state and the admin can take a further action over them. For more information, see Add Compliance Action table section in the Ivanti EPMM Device Management Guide for Apple devices.
- Restore System progress update message: When performing system restore on EPMM System Manager, go to Maintenance > System Backup > Restore System, a progress update message displays the stages such as File Uploading , Unzipping In Progress, and File Restored when all the tasks are completed. It also displays the last restore completion date and status. For more information, see Restore System section in the Ivanti EPMM System Manager Guide.
- RegEx for macOS password policy: Introduced the option to create a password policy with regular expression for Apple macOS 14+ devices. For more information, see Working with default policies section in the Ivanti EPMM Device Management Guide for Apple devices.
- New option added to the Device and Platform Updates section: New option Add all newer iOS Devices/Models to allowed list in security is added to EPMM System Manager portal > Maintenance > Device and Platform Updates section. The admins can now add new devices to the disallow list by deselecting this option. This option is enabled by default.
Disabling this option adds all new iOS models such as iPhones, iPads, iWatches, and Apple TVs on the disallowed list within the security policy. If the check box in the security policy (where the disallowed Apple devices is managed) is not enabled, it will be activated automatically as a result of this action.
For more information, see Device and Platform Updates section in the Ivanti EPMM System Manager Guide.
- Introduction of Default Applications setting: You can now create a policy to set a default browser for devices operating iOS 18.2+. For more information, see Creating Default Applications setting in the in the Ivanti EPMM Device Management Guide for Apple devices.
- New action types added to device action v2: The following supported action types are added in the devices action v2 API:
- AVAILABLE_OS_UPDATES (iOS and macOS)
- ENABLE_BLUETOOTH_ACTION (iOS and macOS)
- DISABLE_BLUETOOTH_ACTION (iOS and macOS)
- ENABLE_REMOTE_LOGGING (Android and iOS)
- DISABLE_REMOTE_LOGGING (Android and iOS)
- REFRESH_ESIM_CELLULAR_PLAN (iOS)
- SET_SHARED_DEVICE_CONFIGURATION (iOS)
- RESTART_DEVICE (iOS Supervised)
- SHUTDOWN_DEVICE (iOS Supervised) For more information, see Ivanti EPMM V2 API GuideSupp