---
title: Ivanti EPMM 12.5.0.0 - What's New
slug: epmm/release-upgrade-guide/ivanti-epmm-12500-whats-new
createdAt: 2026-10-26T16:30:38.388Z
---

## General features

- **New map provider for Admin and Self-Service portals**: For the Admin and Self-Service portals, the map provider is changed from MapQuest to Google Maps.
- **Support for Mutual authentication between SysLog and EPMM TLS communication: **Mutual authentication is now supported between **SysLog** and **EPMM TLS communication**. The Admin can enable this feature by uploading the **SysLog Client Certificate** in **MICS > Security > Certificate Mgmt > Syslog Client Certificate**. For more information, see the **Certificates you configure in the System Manager** section in the *Ivanti EPMM System Manager Guide.*

## iOS and macOS features

- **Added Disk Management configuration settings:** The Disk Management configuration settings in macOS defines the policies for effectively managing data in external and network storage devices. For more information, see **Configuring the Disk Management** section in the *Ivanti EPMM Device Management Guide for Apple devices*.
- **Added new parameters to Extensible Single Sign-On**: Introduced the following parameters to support Extensible Single Sign-On configuration for iOS and macOS:
  - User Authorization Mode
  - Authentication Grace Period
  - FileVault Policy
  - Login Policy
  - Non-Platform SSO Accounts
  - Offline Grace Period
  - Unlock Policy
  - Screen Locked Behavior
  - Denied Bundle Identifiers
    For more information, see **Extensible Single Sign-On** section in the *Ivanti EPMM Device Management Guide for Apple devices*.
- **Added new parameters to Extensible Single Sign-On Kerberos**: Introduced the following parameters to support Extensible Single Sign-On Kerberos configuration for macOS:
  - Allow Password
  - Allow Smart Card
  - Identity Issuer Auto Select Filter
  - Start in Smart Card Mode
    For more information, see **Extensible Single Sign-On Kerberos** section in the *Ivanti EPMM Device Management Guide for Apple devices*.
- **Support for new restrictions for iOS devices**: The following iOS restrictions are added:
  - Allow Notes Transcription Summary
  - Allow Apple Intelligence Report
  - Allow Mail Smart Replies
  - Allow Safari Summary
  - Allow Default Calling App Modification
  - Allow Default Messaging App Modification
  - Allowed External Intelligence Workspace IDs
    For more information, see **iOS and tvOS restriction settings** in the *Ivanti EPMM Device Management Guide for Apple devices*.
- **Support for new restrictions for macOS devices**: The following macOS restrictions are added:
  - Allow Notes Transcription Summary (Boolean)
  - Allow Apple Intelligence Report (Boolean)
  - Allow Mail Smart Replies (Boolean)
  - Allow Safari Summary (Boolean)
  - Allowed External Intelligence Workspace IDs
    For more information, see **MacOS restriction settings **section in the *Ivanti EPMM Device Management Guide for Apple devices*.
- **Support to Retire iOS Devices**: New option **Retire iOS device** is added to the **Add Compliance Action** page. You can now retire device using the **Compliance Actions** on iOS devices. This option is available only in Tier 1. On Compliance check for **Retire iOS device** action, the devices which are non-compliant and out of network will also be moved to **Retire Pending** state and the admin can take a further action over them. For more information, see **Add Compliance Action table** section in the *Ivanti EPMM Device Management Guide for Apple devices*.
- **Restore System progress update message**: When performing system restore on **EPMM System Manager**, go to **Maintenance > System Backup > Restore System**, a progress update message displays the stages such as **File Uploading **, **Unzipping In Progress**, and **File Restored** when all the tasks are completed. It also displays the last restore completion date and status. For more information, see **Restore System** section in the *Ivanti EPMM System Manager Guide*.
- **RegEx for macOS password policy**: Introduced the option to create a password policy with regular expression for Apple macOS 14+ devices. For more information, see **Working with default policies** section in the *Ivanti EPMM Device Management Guide for Apple devices.*
- **New option added to the Device and Platform Updates section**: New option **Add all newer iOS Devices/Models to allowed list in security** is added to **EPMM System Manager portal > Maintenance > Device and Platform Updates** section. The admins can now add new devices to the disallow list by deselecting this option. This option is enabled by default.

:::hint{type="info"}
Disabling this option adds all new iOS models such as iPhones, iPads, iWatches, and Apple TVs on the disallowed list within the security policy. If the check box in the security policy (where the disallowed Apple devices is managed) is not enabled, it will be activated automatically as a result of this action.
:::

For more information, see **Device and Platform Updates** section in the *Ivanti EPMM System Manager Guide*.

- **Introduction of Default Applications setting**: You can now create a policy to set a default browser for devices operating iOS 18.2+. For more information, see **Creating Default Applications setting** in the in the *Ivanti EPMM Device Management Guide for Apple devices.*
- **New action types added to device action v2**: The following supported action types are added in the devices action v2 API:
  - AVAILABLE\_OS\_UPDATES (iOS and macOS)
  - ENABLE\_BLUETOOTH\_ACTION (iOS and macOS)
  - DISABLE\_BLUETOOTH\_ACTION (iOS and macOS)
  - ENABLE\_REMOTE\_LOGGING (Android and iOS)
  - DISABLE\_REMOTE\_LOGGING (Android and iOS)
  - REFRESH\_ESIM\_CELLULAR\_PLAN (iOS)
  - SET\_SHARED\_DEVICE\_CONFIGURATION (iOS)
  - RESTART\_DEVICE (iOS Supervised)
  - SHUTDOWN\_DEVICE (iOS Supervised)
    For more information, see *Ivanti EPMM V2 API GuideSupp*