Ivanti EPMM 12.7.0.0 - What's New
4 min
General features
- Support for Google BeyondCorp: Ivanti EPMM now supports Google BeyondCorp to enable compliant devices to securely access the applications and resources in the Google Workspace. For more information, see Google BeyondCorp Configuration in the Ivanti EPMM Device Management Guide.
- New APIs added: The following new APIs are added to devices action v2 API:
- Cancel Retire devices
- Cancel Wipe devices For more information, see Device Management in the Ivanti EPMM V2 API Guide.
- Enable kiosk mode: New v2 API enablekiosk added for devices to automate the kiosk mode activation process. . For more information, see Device Management in the Ivanti EPMM V2 API Guide.
- New user-interface for self-service portal: The Self-Service Portal is updated with a new user interface. The admins can navigate back to the old user portal by deselecting the "Enable New Self Service Portal"option in the Settings > General > Self-Service Portal. The "Background color" and "CSS" are not available on the new portal. For more information, see Customizing the self-service user portal in Ivanti EPMM Device Management Guide.
If the admin selects the old portal for Self-Service Portal and continues to use it, then the admin has to repeat the same steps after upgrading to EPMM 12.7.0.0 and related patches.
Android features
- Allow Thread Network option added: Administrators can now toggle the 'Allow Thread Network' option for Devices in Managed Device with Work Profile Mode or Work managed device mode to allow or disallow the Thread networks on a device. Navigate to EPMM admin portal > Policies and Configs > Policies > Lockdown > Managed device. This is applicable for Android 16+ devices. For more information, see Setting the kiosk policy for Android managed devices in the Ivanti EPMM Getting started Guide.
- Support for runtime permissions for Android in house apps: Starting from EPMM 12.7.0.0, Runtime permissions section is added for Android in-house android apps with standard and custom runtime permissions in the app configurations. For the existing in-house apps the admin has to manually go to edit the app to see the new permission section and save the configuration. For more information, see Adding in-house apps for Android in the Ivanti EPMM App@Work guide.
iOS and macOS features
- Addition of Support tab in Ivanti Mobile@Work: Using Ivanti EPMM, administrators can add and configure the Support tab in Ivanti Mobile@Work for iOS. For more information see, Ivanti Mobile@Work Support Tab Policy in the Ivanti EPMM Device Management Guide for Apple devices. For a step-by-step video demonstration of configuring the Ivanti Mobile@Work Support Tab Policy, click the following YouTube link: Effortless End-User Support | Ivanti Mobile@Work Support Tab Configuration
- Support for new restrictions for iOS devices: The following iOS restrictions are added for supervised devices operating with version iOS 26.0 and later:
- Denied ICCIDs for iMessage FaceTime
- Denied ICCIDs for RCS
- Allowed Exceptions to Camera Restriction
- Support for new restrictions for iOS and macOS devices: The following iOS and macOS restrictions are added for supervised devices operating with version iOS and macOS 26.0 and later:
- Allow Safari History Clearing
- Allow Safari Private Browsing
- New configuration added iOS and macOS: New configuration added to Policies & Configs > Add New> Apple > iOS/macOS > Safari Settings section and supported on iOS 26 and macOS 26 devices. The administrator can use the Safari Settings configuration to set the Start page for new settings in Safari. The following keys are added for supervised devices:
- Allow Disabling Fraud Warning
- Allow History Clearing
- Allow JavaScript
- Allow Private Browsing
- Allow Popups
- Allow Summary For more information, see Safari Settings in the Ivanti EPMM Device Management Guide for Apple devices.
- Support for Apple Access Management: EPMM now supports Apple Access Management for Supervised and Managed devices. For more information, see Apple Access Management in the Ivanti EPMM Device Management Guide for Apple devices.
- Support for Apple artificial intelligence restrictions: The following Apple artificial intelligence restrictions added:
- Allow Visual Intelligence Summary: Supported from iOS 18.3
- Allow Notes Transcription: Supported from iOS 18.4 and macOS 15.4
- Support for Bootstrap tokens for macOS: Added new capability (com.apple.mdm.bootstraptoken) in DEP Enrollments. With this capability iOS and macOS devices present a bootstrap token to EPMM at the time of enrollment and it is saved on EPMM under device details. The bootstrap token is used to:
- Authorize installation of Software Updates.
- Silently authorize to “erase all content and settings MDM command”. . For more information, see Apple Device Enrollment with Ivanti EPMM overview in the Ivanti EPMM Device Management Guide for Apple devices.
- Support to delete duplicate LDAP group: Ability to change LDAP settings to delete duplicate LDAP with active association.