--- title: Ivanti EPMM 12.8.0.0 - What's New slug: epmm/release-upgrade-guide/ivanti-epmm-12800-whats-new createdAt: 2026-10-26T15:02:29.885Z --- ## General features - **New state added to the audit logs entry for rejected devices**: New state "**Rejected**" added to the audit logs for the cases where device registrations are rejected based on the conditions configured in device registration settings. Also, the **Details** displays the reason for rejection. For more information, see **Registration restrictions for Android devices** section in the *Ivanti EPMM Device Management Guide*. ## Android features - **Support for App Functions**: Select the **Allow App Functions** option in the Lockdown policy for Android and Android Enterprise devices. The administrators can now select options in " **Allow App Functions**" based on the requirement. This is applicable for Android 16 and later device in DO, PO, and EPO modes. For more information, see **Lockdown policy fields for all Android Enterprise devices** section in the *Ivanti EPMM Getting Started Guide*. - **Support for EID retrieval**: Using Ivanti EPMM, the administrators can now retrieve the unique **Embedded Identity Document (EID)** number with eSIM capability for Android devices. For more information, see **Retrieving EID for eSIM** section in the *Ivanti EPMM Device Management Guide*. - **Support for eSIM Provisioning**: Ivanti EPMM administrators can now provision eSIM for Android and Android Enterprise devices. For more information, see **Retrieving EID for eSIM** section in the *Ivanti EPMM Device Management Guide*. ## iOS and macOS features - **Enabled the Apple VPP apps V2 option**: The followings option are added to the **Settings > iOS > MDM > Apple Apps & Books API Settings**: - **V2**: Enabled by default. - **Route VPP V2 Traffice via AppManager Gateway Service**: This option is used as a Callback URL to consume Associated Requests coming from Apple and EPMM polls App Manager to consume the Association Requests further. For more information, see **Apple Apps and Books API Settings** section in the *Ivanti EPMM Device Management Guide for Apple devices*. - **Support for V2 Itunes APIs added**: EPMM now supports Apps and Books Org V2 iTunes APIs as V1 Itunes APIs is now deprecated. :::hint{type="info"} The user can still switch between the V2 Itune APIs and V1 Itune APIs under the **System Settings > iOS > MDM**. ::: For more information, see **Apple Apps and Books API Settings** section in the *Ivanti EPMM Device Management Guide for Apple devices*. - **New status item "device.model.marketing-name" added**: The device model is now automatically picked up from Device Status Report. Using this we have automated DPU process, now when a new device is registered on EPMM, then the model and version are automatically fetched from device and populated in DPU. For more information, see the *System Manager guide*. - **Support for ICCID 2**: Starting iOS 26, ICCID 2 is now visible in the device details page for secondary SIM. For more information, see **Device field definitions** section in the *Ivanti EPMM Device Management Guide for Apple devices*. - **Enhancements to Google Beyond Corp**: Starting with this release, Ivanti EPMM applies **Managed App Configuration** settings to the Google Workspace app for enhanced security before enforcing the **Google BeyondCorp** policy on devices. For more information, see **Google Beyond Corp Configuration** section in the *Ivanti EPMM Device Management Guide for Apple devices* - **New configuration added edit audio accessory setting**: New Disable temporary pairing of audio accessories option is added to control temporary pairing of the supervised devices for iOS 26 devices. Two new fields are added as part of this configuration: - **None**: Use this option only with a return to service device that you can erase and re-enroll when assigning it from one to another user. - **Hour**: Select this option to specify the time in hours starting from zero to 23 hours. For more information, see **Audio accessory settings** in the *Ivanti EPMM Device Management Guide for Apple devices* - **New option added to single file Identity Certificate Enrollment settings**: New "**Allow all apps access**" option allows the apps to access the private key for the uploaded certificate. - **Support for default calling and messaging apps**: For default applications, new default policy for Calling and Messaging applications is now enabled for iOS 26 devices. For more information, see **Creating Default Application Settings** section in the *Ivanti EPMM Device Management Guide for Apple devices* - **New field added for VPN settings**: A new VPN field VPN Sub Type is added. When the **Connection Type** is set as "**Ivanti Tunnel**", the **VPN Sub Type** field is displayed. The admin can enter the Bundle ID of the app to provide the VPN facility to the devices. - **iOS supervised default value set to null**: When a new iOS device is enrolled, the admin can now see the default value for **ios.supervised** to null for both supervised or un-supervised devices to avoid supervised-based compliance rule execution. This value is updated to true or false once device is fully enrolled - **Tunnel iOS app integration with Mobile\@Work iOS**: Starting with Mobile\@Work iOS app version 12.12.80, the Ivanti Tunnel iOS app is now integrated directly into the Mobile\@Work app. To use the integrated Mobile\@Work experience, ensure the following: - Mobile\@Work iOS bundle ID is specified in the VPN sub-type field. - Mobile\@Work iOS app is installed on the device. :::hint{type="info"} For any iOS app, configuration or policy that relies on Tunnel-related functionality, you can use a label with the client name that is listed in the bundle ID as a criterion and apply it as needed. ::: :::Paragraph{indent="2"} For more information, see **Ivanti Tunnel** section in the *Ivanti EPMM Device Management Guide for Apple devices* :::