---
title: Ivanti EPMM 12.8.0.0 - Resolved issues
slug: epmm/release-upgrade-guide/ivanti-epmm-12800-resolved-issues
createdAt: 2026-10-27T04:46:11.672Z
---

- **1809960**: Previously, on the App License page the sync time was not being updated for existing and newly added tokens. This issue is now fixed.
- **1808560**: Previously on VPP V2 app, the available devices were not displayed for user-based license. This issue is now fixed.
- **1799836**: Previously, after upgrading to 12.8.0.0 GMRC the VPP apps would switch from Device-based to User-based licenses. This issue is now fixed.
- **1744506**: Previously, the Android Firmware policy for Zebra OTA was not working due internal API timeout issue. This issue is now fixed.
- **1744097**: The exported device custom attributes .CSV file now displays all the device details.
- **1742532**: Optimized the Native App Catalog functionality to improve response time and overall performance.
- **1741789**: Previously, the following cipher suites were incorrectly listed under the EPMM FIPS mode for outgoing connections:
  - TLS\_RSA\_WITH\_AES\_128\_GCM\_SHA256
  - TLS\_RSA\_WITH\_AES\_256\_GCM\_SHA384
    These ciphersuites are now removed.

    :::hint{type="info"}
    Before upgrading of EPMM 12.8.0.0, Ivanti recommends that FIPS compliant ciphers from the below list are configured to avoid any disruption after the upgrade.
    :::

:::Paragraph{indent="2"}
The Allowed ciphers:
:::

:::Paragraph{listStyleType="disc" indent="2"}
TLS\_ECDHE\_ECDSA\_WITH\_AES\_256\_GCM\_SHA384
:::

:::Paragraph{listStyleType="disc" indent="2"}
TLS\_ECDHE\_RSA\_WITH\_AES\_256\_GCM\_SHA384
:::

:::Paragraph{listStyleType="disc" indent="2"}
TLS\_ECDHE\_ECDSA\_WITH\_AES\_128\_GCM\_SHA256
:::

:::Paragraph{listStyleType="disc" indent="2"}
TLS\_ECDHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256
:::

- **1709465**: Previously, the Sentry to EPMM authentication was failing when Trusted Front End (TFE) and both the EPMM admin portal and Sentry service was using port 8443. This issue is now fixed.
- **1714236**: When EPMM and Sentry are enabled, can now securely communicate using the port 9443 in FIPs mode.
- **1722485**: Previously, when editing VPN\_PER\_APP toggle of "**Cisco AnyConnect (iOS Only)**", would only show the default value "**Yes**" even if the configured and saved value was set to "**No**". This issue is now fixed.
- **1724773**: Previously, when SAML was enabled, the new user portal would fail due to improper run-time casting. This issue is now fixed.
- **1731972**: Previously, the check boxes on the Logs(=View Activity) and **Settings** page would display the even the disabled options for the users checkboxes. This issue is now fixed.
- **1731974**: Previously, the new SSP Portal was not in line with old SSP user interface in terms of localization, branded DT Browser icon, and no company name was displayed. This is fixed now.
- **1732047**: Previously, the VPN configuration fields were not expanding. This issue is now fixed.
- **1735797**: Previously, the macOS Software Update Enforcement Policy configured for latest versions incorrectly calculated the enforcement deadline based on the OS release date, causing devices to display a past date. This issue is now fixed.
- **1737080**: Fixed an issue where Enterprise name provided during initial setup is not reflected on the EPMM admin portal.
- **1737612**: Previously, assigning a new device space to an LDAP user through the admin user interface would add the new device space to the list of existing device space assignments for that user, without removing any previous assignments. This issue is now fixed.
- **1708216**: The Microsoft device compliance instructions were missing in the Notifications for macOS it is fixed now.
- **1699584**: Previously, creating a software update settings policy with the invalid options would display error and not Save the policy. This issue is now fixed.
- **1699756**: The System Manager Settings are now working as expected.
- **1695134**: The German language translation for Device retire was incorrectly displayed as "**Gerät Gerät außer Dienst stellen**" instead of "**Gerät außer Dienst stellen**". This issue is now fixed.
- **1699294**: Previously, the ActiveMQ was not enforcing ciphers. This issue is now fixed.
- **1690879**:Performance optimizations were made to the handling of custom variables in the Android Managed App configuration, following the previous fix (1687362) addressing their values being set to null.
- **1686593**: In Admin Portal, under **Settings > Language**, if Dutch language is enabled and English language is disabled then Dutch is selected as the Device Language. Then user notification through mail or SMS (add device, lock OR unlock device and so on) will not work as expected thereby blocking the functionality.
  **Workaround** - Always keep English language enabled along with Dutch or any other enabled languages. If primary language is not found, then English will be selected.
- **1670798**: Previously, when selecting TLS as the EAP type, the identity certificate was not added to the payload.
  The identity certificate was included only when TTLS was selected. As a result, the authentication might not work if only TLS was selected. This issue is now fixed.
- **1674513**: You can now create or edit Software Update Enforcement Policy for languages which follow the 24 hour time format.
- **1678807**: The Software Update Enforcement Policy using the Update Type Latest Version now works as expected.
- **1642316**: The device registration is now successful even when the devices uses the iReg registration immediately after upgrading the EPMM version.
- **1626420**: The devices which were registered in "South Africa" now display the correct operator and country name.
- **1610027**: When editing a VPN configuration, the Default On Demand Rule Action now does not change to second value in the On Demand Rule Action Rule list.
- **1523962**: The pagination for LDAP stale users is now working as expected.
- **1429001**: Previously, using the ACL mechanism (Security -> ACLs) created rule sets that were not referenced by the firewall system.  This issue has been fixed.
- **1486539**: Previously, even if the database import failed during HA Sync, the HA Sync status would displayed as successful. This issue is fixed and now it is marked as a failure if the database import does not complete.
- **1374226**: Previously. the changes made to the certificate order priority or any other changes that were made were not retained after saving. This issue is now fixed.
- **1295263**: The apps under the **Policies & Configs > Policies > Add New > Android > Android Kiosk Mode** can now be re-arranged within the same folder.
- **Fixed the security vulnerabilities**: This release fixes the following security vulnerabilities:
  - CVE-2026-1281
  - CVE-2026-1340