New features summary
6 min
These are cumulative release notes. If a release does not appear in this section, then there were no associated new features and enhancements.
- New KVP added for control Certificate Renewal behavior: Ivanti Go now provides additional Managed App Configuration Key Value Pairs (KVPs) to give administrators greater control over client certificate renewal. Administrators can disable automatic certificate renewal and optionally expose a Renew Client Certificate option in the Troubleshoot menu, enabling users to manually renew certificates when required. The Managed App Configurations KVPs used to control certificate renewal behavior in the app are as follows:
- AutoCertRenewalDisabled
- TroubleshootCertRenewalEnabled
For more information, see iOS Go Advanced Features in the Neurons for MDM Administrator Guide.
- Managed App Distribution Framework Support: Ivanti Go for iOS now supports Apple's ManagedAppDistribution framework, enabling managed app discovery and installation through Declarative Device Management (DDM) on supported iOS devices. The framework provides a native app catalog experience, including app listing, app details, category-based browsing, search, and app installation capabilities directly within the Ivanti Go client. This implementation leverages Apple's built-in framework for managed app distribution and delivers real-time app status updates, streamlined app management, and a unified app catalog experience. When enabled by the server, app management transitions to Declarative Device Management (DDM) for managed public and VPP applications on supported iOS versions as part of the initial phase. Apps@Work is updated with this framework when customers enable DDM app management on the device.
- Support for Lookout SDK 4.2.8: Lookout SDK version 4.2.8 is now supported with this release.
- Restrict Log Sharing to Approved Email Clients: In this release, Ivanti Go introduces a new managed configuration key that allows administrators to restrict log sharing to an approved email client. When enabled, device and application logs can only be shared through the configured email app, helping organizations control how log data leaves managed devices. Logs are automatically attached when supported by the selected email client, while other clients use a guided attachment workflow. This enhancement improves security by preventing logs from being shared through unauthorized apps or destinations. The automated attachment of logs is supported on Native Email and Email+.
- Integrated Tunnel Revamped: Enhanced Tunnel User Interface in Ivanti Go.
- Tunnel Visibility Based on Configuration: In this release, Ivanti Go now display Tunnel functionality when Tunnel VPN configuration is explicitly distributed to the iOS client. If no Tunnel configuration is assigned, Tunnel-related options remain hidden, reducing user confusion in environments where Tunnel is not in use. Additionally, Tunnel functionality is automatically removed from the client when the associated configuration is withdrawn, ensuring that only relevant features are presented to users.
- Device Check-In Status Verification: Ivanti Go now provides immediate feedback when users manually select Check for Updates. After the device successfully checks in with the server, the app displays a confirmation notification, giving users clear visibility that the check-in was completed successfully A pop up message is displayed when users swipes down to refresh, Tap on 'Check for updates and FDC from My Devices. This enhancement improves the user experience by providing real-time status confirmation and reducing uncertainty about the outcome of the check-in operation.
- Updated User Interface for Status and Notification Screens : The Notification, Device Status, and Threat Defense screens is updated with an enhanced table view design to provide a more modern and consistent user experience. The refreshed interface improves readability, navigation, and overall usability, making it easier for users to view and access important device and security information.
- Customize Email and Browser Apps for Support: In this release, Ivanti Go for iOS introduces KVPs that allows administrators to customize the default email and browser applications used by the Support tab and log-sharing workflows. For more information, see iOS Go Advanced Features in the Neurons for MDM Administrator Guide.
- default_browser
- allow_browser_fallback
- default_email
- allow_email_fallback
- restrict_log_sharing_to_email
- Return to Service enhancement: When Return to Service is enabled, the Return to Service button is now available on the Home Screen for quicker access.
- Support for Lookout SDK 4.2.6: Lookout SDK version 4.2.6 is now supported with this release.
- Go for iOS support deprecation (iOS 16.x): Starting from this release, Ivanti Go for iOS support has been deprecated on devices running iOS 16.x.
- Enhanced device check-in on network changes: Device management has been enhanced with improved controls to ensure timely device check-ins when network status changes. When a device switches between Wi-Fi and cellular networks, a force check-in is automatically triggered.
- Improved App update status display: When an update is available, the Featured tab now displays Update instead of Install.
- Support Ticketing Integration in Ivanti Go: Ivanti Go for iOS now introduces a new Support Ticketing System URL feature designed to make it easier for users to report issues directly from the app with a single tap.
- Integrated Ivanti Tunnel support in Ivanti Go (iOS): Ivanti Go for iOS now includes Ivanti Tunnel capabilities, fully supporting all features previously available in the standalone Ivanti Tunnel app. For more information, see Ivanti Tunnel for iOS Guide.
- Support for Liquid Glass: Ivanti Go for iOS now includes full support for Liquid Glass UI design language for iOS.
- Upgrade to Zimperium SDK: Starting from this release, we support integration with the Zimperium SDK version 5.8.53.
- Revamped client screens: Starting from this release, Ivanti Go for iOS introduces a fresh client interface designed to enhance the user experience.
- Smishing protection support: We now support Smishing protection to safeguard users from SMS-based phishing attacks. Administrators can easily enable and manage Smishing protection by configuring relevant settings within the Lookout console.
- Simplified device registration process: Starting with this release, you can access the browser within the Ivanti Go for iOS application when you register a new device, instead of redirecting the registration process to the default browser of the device.
- Support for Lookout SDK 4.2.3: Lookout SDK version 4.2.3 is now supported with this release.
- iOS Developer Mode Threat Detection: Lookout now supports the detection of iOS devices with Developer Mode enabled. This enhancement helps prevent potential security risks associated with Developer Mode, such as unauthorized app installations or bypassing built-in security controls.
- Passkey authentication support: Starting with this release, Ivanti Go for iOS supports Passkey authentication.
- iOS 26 Support: Ivanti Go for iOS now supports iOS 26.
- Notification Icon Relocation: The notification icon on the client home screen has been moved to the upper right corner.
- Customizable Out of Compliance Messages: Admins can now customize Out of Compliance messages by uploading a custom plist file to the server. Once uploaded, these messages can be pushed directly to devices, allowing for tailored communication and improved compliance management across your organization. For more information, see Using Apple Managed App Configuration.
- Customizable Support Tab: A new Support tab is now available in the Ivanti app, enabling admins to display support contact details and useful links to end-users. This tab can be customized and set as the home screen with the following fields:
- Tab Name: Maximum 10 characters (default: "Support")
- Contact Name: Maximum 40 characters
- Support Phone: Maximum 20 characters
- Support Email: Maximum 40 characters (valid email format required)
- Website Name: Maximum 40 characters
- Website URL: Maximum 150 characters (must be a valid https:// link)
- Additional Info: Maximum 120 characters
Admins can now configure these fields using the server, with field validation enforced for accuracy. Clients display the configured tab and links on their app, enabling them to conveniently contact support or visit the support site for assistance.
- Support for Lookout SDK 4.1.17: Lookout SDK version 4.1.17 is now supported with this release.
- Enhanced security for sensitive screens: The Registration and SAML Authentication screens are now protected by default against screen shots, screen recording, and screen sharing. On managed devices, administrators can selectively disable this protection for the SAML Authentication screen using the key-value pair: SCREENSHOT_PROTECTION_DISABLED = True
- Upgrade to Zimperium SDK: Starting from this release, we now integrate with the Zimperium SDK version 5.6.37.
- iOS 15 deprecation: Starting with this release, Go for iOS no longer supports iOS 15.
- Note for Former App Station users: Ivanti recommends transitioning to the Ivanti Go Client for iOS. Ivanti Go Client provides a comprehensive MAM solution that includes an in-app App Catalog and Web clip functionality. For more information, see MAM-Only. Migration Guidance Ivanti strongly encourages App Station customers to begin planning and executing their transition to the Go Client-based MAM-Only solution. For step-by-step migration assistance, see the following resources:
If you have questions or need migration assistance, please contact Ivanti Support or your Customer Success Manager.
- Enhancement for Ivanti N-MDM Azure: Ivanti N-MDM now supports Azure Device Compliance in both GCC High and DoD environments. This enhancement ensures that organizations operating in these specialized environments can continue to leverage Ivanti N-MDM for secure and compliant device management.
- Change in Ivanti N-MDM user experience: The Re-enroll button has been removed from devices enrolled through Apple's Device Enrollment Program (DEP), streamlining the user interface and device management process.
- Support for Migration from Zimperium V4 to V5: The migration from Zimperium V4 to V5 is now supported using Ivanti Support requests. The support team helps you migrate your existing devices from the Zimperium V4 console to V5. This method includes recreating admin users, groups, policies, and other V5 configurations for your device groups.
- Reinstall button for Integrated AppCatalog: Ivanti Go for iOS has introduced a Reinstall button on the Integrated App Catalog device. This button allows you to reinstall the app immediately when necessary.
- Enhancement to deep link: We introduce a new deep link feature that allows you to create custom webclips that launch the AppCatalog in Ivanti Go for iOS. This feature launches an integrated app catalogue, allowing you to open apps directly from the following link.
- DeepLink URL to show AppCatalog page: mobileirongo://deeplink/navigation?screen=app_catalog
- DeepLink URL to show open specific app details: mobileirongo://deeplink/navigation?screen=app_details&bundle_id=<bundle_id>
- Support for Zimperium v5 Console: For the new customers, Ivanti Go for iOS now supports the new Zimperium v5 console.
- Update to Go for iOS user interface for Zimperium Dynamic Threat detection: The Go for iOS Threat Defense user interface is redesigned to support dynamic threats detected by the server. The threat defense card displays count based on severity, while the Threats Defense page lists all types of threats, sorted based on their severity.
- Dynamic threat detection enhancements: Starting with this release, you can filter low-severity threats using Zimperium threat object values. The Go for iOS now displays threat alert strings from the Threat object, and the server will remove the custom text enabled button.
- Support for iOS 18: Ivanti Go for iOS now supports iOS version 18.
- New Return to Service option: The Ivanti Go for iOS now includes an Enable Return to Service option which allows the device to automatically re-enroll once data is wiped, reducing the need to manually re-enroll the device after a wipe.
If you want the Enable Return to Service option to be visible to end users, you must set a new Key-Value Pair (KVP) setting, ReturntoService = true, in the managed app configurations.
Support to collect Ivanti Tunnel logs: Ivanti Go for iOS now collects the Ivanti Tunnel logs from the application. Administrators can view these logs from the Ivanti Neurons for MDM.
- Updated partner SDK version: Starting from this release, Ivanti Go 104 for iOS is now updated to partner SDK versions from 5.3.17 to 5.4.16.
- Remove filtering for threats: Remove the filtering based on the availability of local actions to display all threats for Android and iOS.
- Catalan language support: Starting from this release, Ivanti Go 104 for iOS now supports Catalan language.