EPMM and Connector [Link] – 12.3.0.

0
Release Notes
November 2024

Copyright © 2024, Ivanti, Inc. All rights reserved.

Privacy and Legal
Revision history
TABLE 1. REVISION HISTORY

Date Revision

November 05, 2024 Updated for version [Link].

October 08, 2024 Patch Release: Updated 'Resolved issues' and 'Ivanti EPMM upgrade
information' for [Link] and [Link].

September 10, 2024 Updated for version [Link].

September 04, 2024 Patch Release: Updated 'Resolved issues' and 'Ivanti EPMM upgrade
information' for [Link] and [Link].

August 23, 2024 Patch Release: Updated 'Resolved issues' and 'Ivanti EPMM upgrade
information' for [Link].

July 16, 2024 Patch Release: Updated ' Resolved issues', 'Ivanti EPMM upgrade
information' and 'Enterprise Connector upgrade information' sections
for version [Link], [Link], and [Link].

Security Enhancements: This release incorporates critical security

fixes. Ivanti strongly recommends to update to this version. For full list
of security updates, please refer to Security Advisory.

Security updates to third-party components: This release also

includes the following security fix to third-party components:

l CVE-2024-6387

June 06, 2024 Patch Release: Updated ' Resolved issues', 'Ivanti EPMM upgrade
information' and 'Enterprise Connector upgrade information' sections
for version [Link].

May 07, 2024 Patch Release: Updated ' Resolved issues', 'Ivanti EPMM upgrade
information' and 'Enterprise Connector upgrade information' sections
for version [Link].

April 30, 2024 Updated for version [Link].

March 19, 2024 Updated the 'New features summary' with Oracle Linux 8 support.
Updated the ' Resolved issues' with VSP-71341.

March 11, 2024 Updated for version [Link].

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 2 of 39
 Revision history

TABLE 1. REVISION HISTORY (CONT.)

Date Revision

Enterprise Connector does not include an upgrade to

[Link] version. Enterprise Connector [Link] is
applicable to this release.

For administrators using Mobile Device Management

Protection Profile (MDMPP), Ivanti recommends
using Ivanti EPMM [Link] and not to upgrade to
Ivanti EPMM 12.0.x.x, 12.1.x.x, 12.2.x.x or 12.3.x.x
versions until the Mobile Device Management
Protection Profile (MDMPP) certification is obtained
to maintain compliance.

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 3 of 39
Contents
Revision history 2
About Ivanti EPMM 5
What can you do with Ivanti EPMM? 5
What's New 7
General features 7
Android features 8
iOS and macOS features 9
Related information from previous releases 11
Mobile Threat Defense features 11
Support and compatibility 13
Supported browsers 18
Supported browser resolutions 18
Related information from previous releases 19
Support Policy 19
Supported languages 20
Language support on Android and Android Enterprise devices 21
Language support on iOS devices and macOS devices (legacy features) 21
Language support on Windows devices (legacy features) 21
Deprecated features 22
Resolved issues 23
Related information from previous releases 24
Known issues 25
Related information from previous releases 25
Limitations 26
Related information from previous releases 26
Ivanti EPMM upgrade information 27
Ivanti EPMM upgrade readiness checklists 27
Check disk space availability 29
Upgrade considerations 30
Ivanti EPMM upgrade paths 32
Ivanti EPMM upgrade URL 33
Backing up Ivanti EPMM 34
Enterprise Connector upgrade information 34
About Enterprise Connector upgrade 34
Enterprise Connector upgrade paths 34
Enterprise Connector upgrade URL 35
Glossary 37
Documentation resources 38
Ivanti EPMM documentation 38

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 4 of 39
About Ivanti EPMM
Ivanti Endpoint Manager Mobile (Ivanti EPMM) is a mobile management software engine that enables IT to
set policies for mobile devices, applications, and content. This product enables mobile device management,
mobile application management, and mobile content management capabilities.

Ivanti Endpoint Manager Mobile (Ivanti EPMM) brings together comprehensive security and Unified
Endpoint Management (UEM) tools including:

l Mobile Device Management (MDM)

l Mobile Application Management (MAM)

l Mobile Content Management (MCM)

With Ivanti EPMM, you can securely manage the lifecycle of mobile devices and mobile applications, from
registering a device with Ivanti EPMM, to retiring the device from Ivanti EPMM management. When using
an Ivanti EPMM managed device, device users can securely access corporate data, email, and mobile apps
that you control and distribute using Ivanti EPMM.

What can you do with Ivanti EPMM?

Ivanti EPMM allows you to:

l Connect to backend services such as LDAP and leverage LDAP users for use in Ivanti EPMM.

l Register both company- and employee-owned devices to be managed by Ivanti EPMM.

l Configure and push to devices policies and settings such as VPN settings and security policies.

l Securely synchronize data from backend systems such as corporate email.

l Distribute, install, and manage both publicly available and in-house mobile apps.

l Leverage existing platform-specific mobile device management protocols, such as Apple MDM.

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 5 of 39
 About Ivanti EPMM

l Configure and push certificates to devices.

l Configure and enforce compliance rules to handle compromised or stolen devices.

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 6 of 39
What's New
These are cumulative release notes. If a release does not appear in this section, then there are no
associated new features.

Product nomenclature: This is cumulative documentation and the product names you encounter
in this documentation were accurate at the time of publication. Ivanti updates each new section to
reflect evolving product nomenclature, but leaves legacy citations intact to ensure proper frame of
reference for the reader.

Ivanti EPMM [Link] - What's New

General features
l Support for duplicate LDAP groups: In previous releases, moving LDAP groups from one directory
to another generated a duplicate entry. However, from [Link] and later versions, an error message
displays. The administrator must delete outdated duplicate entries before a sync, to ensure that the
new group mapping is updated.

l Support for Zimperium v5 console for EPMM: The new v5 Zimperium console is now supported
with EPMM [Link]. Users can now add JSON based threat file and the size of the Zimperium key is
now updated to 512 character size.

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 7 of 39
 What's New

Android features
l Support for a new security policy: New security policy "Require Mobile@Work for captive-
portal WiFi authentication" is introduced for Android devices. When this setting is enabled and a
user connects to a WiFi through a captive-portal-login, the authentication request is intercepted and
processed by Mobile@Work. For more information, see Security Policies in the Ivanti EPMM Getting
Started Guide.

This setting overrides the OS behavior which may not allow to establish a session in case the
captive-portal provider is not using a trusted or a valid certificate for TLS.

l Deprecation of per user workflow for Android Enterprise app distribution: The per user
workflow for Android Enterprise app distribution is now deprecated. After upgrading to [Link], if
you have per user app distribution enabled, then it is defaulted to per device distribution.

l Support for case sensitivity for packages in whitelist and blacklist of applications in the
Lockdown policy for Android Enterprise: With EPMM [Link], case sensitivity is supported for
Packages in the Lockdown policy for Android Enterprise under Work Profile on Company Owned
Device Mode. Now, when the Package is entered for allowed or disallowed apps, EPMM supports
case sensitivity For more information, see Lockdown Policy Fields: Android Enterprise in Work
Profile on Company Owned Device Mode in the Getting Started with Ivanti EPMM Guide.

l Support for Lost Mode: To enable this feature, navigate to Devices & Users > Action > More
Actions > Lost Mode. Administrators can now enable or disable Lost Mode. When the Lost Mode is
enabled, options such as send message, phone number, footnote, and provide an option to play
sound are available. This is supported for Android 8 and later versions. For more information see
Security-related features and tasks in the Ivanti EPMM Device Management Guide for Android and
Android Enterprise devices.

l Support for restrictions for Android devices: Administrators can now create restrictions for
Android devices with a list of Allowed devices with different "Manufacturer Name / Model"
combination for Samsung Galaxy devices.
If a device is not listed, the following message displays: Error - Unable to complete registration
(Invalid Manufacturer or Model). Please contact your administrator.

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 8 of 39
 What's New

iOS and macOS features

l New parameters added in Software Update Settings: Six new parameters are introduced in the
EPMM admin portal > Policies & Configs > Policies > Add New > Apple > iOS / macOS >
Software Update Settings.
These parameters support software updates on iPhone, iPad, and Mac devices, which can now be
managed entirely with Declarative Device Management. These settings replace the MDM profiles for
software update restrictions, settings, and software update commands and queries. This policy is
supported on iOS 18 and later devices and on macOS 15 and later devices.
For more information, see Software Update Settings in the Ivanti EPMM Device Management Guide
for iOS and macOS devices.

l Support for Two-Factor Authentication for Secure Sign-in Webclip for iOS: Implemented
enhanced security through two-factor authentication for the Secure Sign-In Webclip, ensuring
compliance with DORA guidelines and protecting user data on multi-user devices. This is applicable
to iOS devices only. For more information, see Working with web applications for iOS and macOS
in the Ivanti EPMM Apps@Work Guide.

l Support for Skipkeys in iOS 18 and macOS 15 and later versions: Skipkeys are now supported to
skip the intelligence pane.

l Support for eSIM Outgoing Transfers restriction: Administrators can now control eSIM transfer to
a newly setup device on iOS 18 and later versions. For more information, see iOS and tvOS
restriction settings in the Ivanti EPMM Device Management Guide for iOS and macOS devices.

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 9 of 39
 What's New

l New fields added to Device Details columns for iOS and MacOS devices: New fields OS Build
Version pending for update and OS version pending for update are added to the Devices &
Users > Devices > Device details section. The following status items are subscribed from EPMM
12.3.0 release:

o [Link]-reason

o [Link]-version

o [Link]-state

o [Link]-reason

These statuses are displayed as:

Audit log:

o Consolidated log having values of install-reason, install-state, and failure-reason under Devices
section with action "Software Update (via software update enforcement policy)"

Device detail attributes:​

o OS version pending for update: The OS version that is pending for update on the device

o OS build version pending for update: The build version of the OS that is pending for update on
the device. For more information, see Advanced searching in the Ivanti EPMM Device
Management Guide for iOS and macOS Devices.

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 10 of 39
 What's New

l Ability to schedule auto app updates (For public iOS apps):The admins can now create, update,
and remove the App Auto-Update policy and distribute to set of devices. The App Auto-Update
Configuration is supported on public iOS apps. Only single policy per device.

Each Auto-Update Config has the following set of values:

o (a) Time zone

o (b) Start Time

o (c) Duration.

Time zone and the Start time is calculated based on the time zone provided and is not depended on
device or server.

The Auto-Update applies for managed apps only. Only a Single Configuration is applied to the
device, with a priority for the Configuration. For more information, see App update schedule policy
in the Ivanti EPMM Device Management Guide for iOS and macOS Devices.

l Support for LDAP attributes sync with Managed App Config: With [Link], LDAP sync occurs
and it pushes the Managed App Config to the device irrespective of where the Managed App Config
for any particular app configured to use the XML based Managed App Config from the
Configuration tab or Configured to use Managed App Config directly within the AppCatalog. For
more information, see "Managing LDAP Users" in the Getting Started Guide.

Related information from previous releases

If a release does not appear in this section, then there were no associated new features and enhancements.

l Ivanti EPMM [Link] - What's New

l Ivanti EPMM [Link] - What's New
l Ivanti EPMM [Link] - What's New

Mobile Threat Defense features

Mobile Threat Defense (MTD) protects managed devices from mobile threats and vulnerabilities affecting
device, network, and applications. For information on MTD-related features, as applicable for the current
release, see the Mobile Threat Defense Solution Guide for your platform, available under the MOBILE
THREAT DEFENSE section on the Ivanti Product Documentation page.

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 11 of 39
 What's New

Each version of the MTD guide contains all Mobile Threat Defense features that are currently fully
tested and available for use on both server and client environments. Because of the gap between
server and client releases, new versions of the MTD guide are made available with the final release
in the series when the features are fully functional.

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 12 of 39
 Support and compatibility

Support and compatibility

These are cumulative release notes. If a release does not appear in this section, then the support and
compatibility values from the nearest listed older release apply to the missing release.

Product nomenclature: This is cumulative documentation and the product names you encounter
in this documentation were accurate at the time of publication. Ivanti updates each new section to
reflect evolving product nomenclature, but leaves legacy citations intact to ensure proper frame of
reference for the reader.

SAML / Identity Provider

TABLE 2. SAML / IDENTITY PROVIDER SUPPORTED AND COMPATIBLE PRODUCTS AND COMPONENTS

Product / Supported Compatible

Component

SAML / l OpenSAML 3.3.0 l Shibboleth

Identity Provider l ADFS
l Okta
l Ping Identity
l OneLogin

LDAP
TABLE 3. LDAP SUPPORTED AND COMPATIBLE PRODUCTS AND COMPONENTS

Product / Supported Compatible

Component

LDAP Windows Active Directory Windows Active

Directory
Server OS: Windows Server 2016, 2019
Server OS: Windows
IBM Domino Server Server 2012 R2, Version
Server OS: Windows Server 2022, Version: 12.1 6.3

IBM Domino Server

Server OS: Windows
Server 2008, Version:
8.5.2

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 13 of 39
 Support and compatibility

Hardware appliances
TABLE 4. HARDWARE APPLIANCES SUPPORTED AND COMPATIBLE PRODUCTS AND COMPONENTS

Product / Supported Compatible

Component

Hardware l M2250 Not applicable

appliances l M2600
l M2700

Maximum number of supported devices

TABLE 5. MAXIMUM NUMBER OF SUPPORTED DEVICES ON EACH IVANTI EPMM APPLIANCE

Model Maximum Number of Devices Testing Standard

M2600, M2700 200,000 The maximum number of supported

devices, for each appliance, is based
on a rate of 1 device registration per
second. This maximum number of
supported devices will change,
M2250 60,000 depending on individual use cases
and work load for each appliance.
IPv4 is supported.

Reporting Database
TABLE 6. REPORTING DATABASE SUPPORTED AND COMPATIBLE PRODUCTS AND COMPONENTS

Product / Component Supported Compatible

Reporting Database [Link] [Link], [Link]

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 14 of 39
 Support and compatibility

Sentry
TABLE 7. SENTRY SUPPORTED AND COMPATIBLE PRODUCTS AND COMPONENTS

Product / Component Supported Compatible

Ivanti Standalone 10.1.0 9.19.2, 9.20.1, 10.0.0, 10.0.1

Sentry

Access
TABLE 8. ACCESS SUPPORTED AND COMPATIBLE PRODUCTS AND COMPONENTS

Product / Component Supported Compatible

Ivanti Access R62 Not applicable, because only the

latest version is available to all
customers.

Android
TABLE 9. ANDROID SUPPORTED AND COMPATIBLE PRODUCTS AND COMPONENTS

Product / Component Supported Compatible

Android 15 14, 13, 12, 11,

10, 9, 8.1, 8

Mobile@Work [Link] [Link]-

[Link]

Ivanti Tunnel (Android native, Android 4.15.0 4.14.0, 4.13.1,

Enterprise, and Samsung Knox Workspace) 4.13.0, 4.12.1,
4.12.0

Secure Apps Manager [Link] [Link] -

[Link]

Email+ (Android AppConnect and Android 4.13.0 4.0.0-4.12.0

Enterprise)

Docs@Work (Android AppConnect and 2.27.0 2.17.0-2.26.1

Android Enterprise)

Web@Work (Android AppConnect) 2.6.1 2.5.1–2.6.0

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 15 of 39
 Support and compatibility

iOS
TABLE 10. IOS SUPPORTED AND COMPATIBLE PRODUCTS AND COMPONENTS

Product / Supported Compatible

Component

iOS iOS 18.0.1 iOS 14.0.0 - 18.0.0

Mobile@Work 12.12.20 12.0.0 – 12.12.10

Ivanti Tunnel 4.10.0 4.2.0-4.9.0

Email+ 4.13.0 4.0.0 – 4.12.5

Docs@Work 2.28.0 2.2.0-2.27.1

Web@Work 2.21.0 2.0.0-2.20.0

Apps@Work Not supported l 1.1.2–1.2.0 when using Mobile@Work

Container app 8.6.0, 9.0.1, or 9.1.0
l 1.3.0 when using Mobile@Work 9.5.0

Help@Work Note: Help@Work does not work on 2.0.2 - 2.1.1

iOS 14 and newer versions. Use the
TeamViewer app for Help@Work
support.

macOS
TABLE 11. MACOS SUPPORTED AND COMPATIBLE PRODUCTS AND COMPONENTS

Product / Supported Compatible

Component

macOS/OS X 15.0.1 10.1–15.0.0

Ivanti Tunnel 4.8.0 4.1.0 - 4.7.1

tvOS
TABLE 12. TVOS SUPPORTED AND COMPATIBLE PRODUCTS AND COMPONENTS

Product / Supported Compatible

Component

tvOS 18 12.4-17.6

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 16 of 39
 Support and compatibility

WatchOS
TABLE 13. WATCHOS SUPPORTED AND COMPATIBLE PRODUCTS AND COMPONENTS

Product / Supported Compatible

Component

WatchOS 10 and later versions

Windows
TABLE 14. WINDOWS SUPPORTED AND COMPATIBLE PRODUCTS AND COMPONENTS

Product / Supported Compatible

Component

Windows l Windows 10 Pro, Windows l Windows 10 Pro, Windows 10 Enterprise

10 Enterprise (version 21H2) (versions 1703, 1709, 1809, 1903, 1909, 2004)
l Windows 11 (version 22H2) l Windows HoloLens (versions 1701, 1803)
l Windows 10 LTSC, 2019,
2021

System: 64-bit operating system,

x64-based processor

Notes

l Support for Windows management will be transitioned to Ivanti Endpoint

Manager and Ivanti Neurons for MDM.
l With 1803, Apps@Work cannot be pushed to the device because of a known
Microsoft issue.
l Ivanti recommends that customers stay on the H2 branches of Windows 10 to
ensure a longer support lifecycle. The -09 versions of the OS have a 30-month
support lifecycle from Microsoft, while the -03 versions only have an 18-month
support lifecycle. For more information, see: [Link]
us/help/13853/windows-lifecycle-fact-sheet.

Windows Ivanti Apps@Work [Link] MobileIron Apps@Work [Link]

Apps@Work

Ivanti Tunnel Not Supported 1.2.3

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 17 of 39
 Support and compatibility

Supported browsers
This version of Ivanti EPMM supports the following browsers:

TABLE 15. SUPPORTED BROWSERS

Browser Supported Compatible

Internet Explorer 11 9*, 10*

Chrome 130 129, 128, 127

Firefox 131 130, 129, 128

Safari Not supported 10.1*

Edge Not supported Not compatible

Chrome - iPad Not supported Not compatible

Safari - iPad Not supported Not compatible

* This configuration is not covered under the Ivanti product warranty.

Supported browser resolutions

TABLE 16. SUPPORTED BROWSER RESOLUTIONS

Browser resolution Supported Compatible

800x600 No No

1024x768 No Yes*

1280x1024 Yes Yes

1366x768 Yes Yes

1440x900 Yes Yes

Higher resolutions No Yes

* This configuration is not covered under the Ivanti product warranty.

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 18 of 39
 Support and compatibility

Related information from previous releases

If a release does not appear in this section, then the support and compatibility values from the nearest listed
older release apply to the missing release.

l Ivanti EPMM [Link] - Support and compatibility

l Ivanti EPMM [Link] - Support and compatibility

Support Policy
TABLE 17. DEFINITIONS FOR SUPPORTED AND COMPATIBLE

Supported product The functionality of the product and version with currently supported releases
versions was systematically tested as part of the current release and, therefore, will be
supported.

Compatible product The functionality of the product and version with currently supported releases
versions has not been systematically tested as part of the current release, and therefore
not supported. Based on previous testing (if applicable), the product and
version is expected to function with currently supported releases.

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 19 of 39
 Supported languages

Supported languages
Ivanti EPMM [Link] - Supported languages

l Chinese (Simplified)
l Chinese (Traditional)
l Dutch (Netherlands)
l English
l French (France)
l German (Germany)
l Hungarian
l Italian (Italy)
l Japanese
l Korean
l Polish
l Portuguese (Brazilian)
l Romanian (Romania)
l Russian
l Slovak
l Spanish (Latin American)
l Swedish
l Hungarian

Related information from previous releases

If a release does not appear in this section, then the supported languages from the nearest listed older
release apply to the missing release.

l Ivanti EPMM [Link] - Supported languages

l Ivanti EPMM [Link] - Supported languages
l Ivanti EPMM [Link] - Supported languages

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 20 of 39
 Supported languages

Language support on Android and Android Enterprise devices

Refer to Ivanti Mobile@Work for Android Release Notes for a complete list of supported languages for
Android and Android Enterprise devices.

Language support on iOS devices and macOS devices (legacy

features)
See the Ivanti Mobile@Work for iOS Release Notes for a complete list of supported languages for iOS
devices.

See the Ivanti Mobile@Work for macOS Release Notes for a complete list of supported languages for macOS
devices.

Language support on Windows devices (legacy features)

Ivanti EPMM supports the following languages and locales in client apps on Windows devices:

l Chinese (Simplified)
l Chinese (Traditional)
l English
l French (France)
l German (Germany)
l Japanese
l Korean
l Portuguese (Brazilian)
l Russian
l Spanish (Latin American)

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 21 of 39
 Deprecated features

Deprecated features
These are cumulative release deprecation feature notes. If a release does not appear in this section, then
there were no associated deprecated features.

Due to deprecation of third party APIs, the following features may be discontinued or may not work as
expected.

Ivanti does not control the Samsung API deprecation schedule and it is possible some deprecations
can result in future issues. It is recommended to switch to Samsung Knox Service Plugin
(OEMConfig) for Samsung-specific features when the control(s) is not available in the Ivanti Android
feature set.

Deprecated features

The following are a list of deprecated features listed for each release:

l Ivanti EPMM [Link] - Deprecated

l Ivanti EPMM [Link] - Deprecated
l Ivanti EPMM [Link] - Deprecated
l Ivanti EPMM [Link] - Deprecated

Deprecated features - Ivanti EPMM [Link]

The following API is deprecated from EPMM [Link].

Get the Android for Work permissions of an app

This retrieves the Android for Work (AFW) permissions of an app.

Request URI
/api/v2/afw/permissions_v2/{package_name}

Ivanti recommends not to consume this API as it is deprecated by Google.

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 22 of 39
 Resolved issues
These are cumulative release notes. If a release does not appear in this section, then there are no
associated resolved issues.

Product nomenclature: This is cumulative documentation and the product names you encounter
in this documentation were accurate at the time of publication. Ivanti updates each new section to
reflect evolving product nomenclature, but leaves legacy citations intact to ensure proper frame of
reference for the reader.

l 1254858: Previously, the "Show devices in selected states" in "Automated device Cleanup" showed
retired devices with status as None. This issue is now fixed.

l 1254904: Previously, in EPMM [Link] and later versions, adding or removing routes no longer
worked.
This issue is now fixed.

l 1254954: Previously, the CLI limited top-level domains in email addresses and URLs to six
characters. This issue is now fixed.
The character size is now increased to 63 characters for consistency with RFC-1034.

l 1255026: Previously, using CLI to perform an upgrade, failed. This issue is now fixed.

l 1377292: Previously, the time required for data validation during pre-upgrade and HA sync was very
high.
This issue is now fixed and the time is reduced.

l 1398233: Previously, the "Extensible SSO Kerberos" configuration was not pushed to Mac devices.
This issue is now fixed.

l 1396643: Previously, the Device Battery Health was not updating from the device when the device
was upgraded from incompatible to compatible iOS version.
This issue is now fixed.

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 23 of 39
 Resolved issues

l 1432347: Previously, Apps@Work took time to load or did not load when huge number of
applications were assigned to the device.
This issue is now fixed.

l 1441962: Previously, when accessing Apps@Work applications with Apps@Work port other than
443, Image request was forwarded to Tomcat instead of processing at Apache.
This issue is now fixed.

Related information from previous releases

If a release does not appear in this section, then there were no associated resolved issues.

l Ivanti EPMM [Link] - Resolved issues

l Ivanti EPMM [Link] - Resolved issues
l Ivanti EPMM [Link] - Resolved issues
l Ivanti EPMM [Link] - Resolved issues
l Ivanti EPMM [Link] - Resolved issues
l Ivanti EPMM [Link] - Resolved issues
l Ivanti EPMM [Link] - Resolved issues
l Ivanti EPMM [Link] - Resolved issues
l Ivanti EPMM [Link] - Resolved issues
l Ivanti EPMM [Link] - Resolved issues
l Ivanti EPMM [Link] - Resolved issues
l Ivanti EPMM [Link] - Resolved issues

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 24 of 39
Known issues
If a release does not appear in this section, then no associated new known issues were added to this
document for that release.

Product nomenclature: This is cumulative documentation and the product names you encounter
in this documentation were accurate at the time of publication. Ivanti updates each new section to
reflect evolving product nomenclature, but leaves legacy citations intact to ensure proper frame of
reference for the reader.

Related information from previous releases

l Ivanti EPMM [Link] - Known issues
l Ivanti EPMM [Link] - Known issues
l Ivanti EPMM [Link] - Known issues

Ivanti EPMM [Link] - Known issues

l 1466740: The MTD activation configuration is saved without a license key.

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 25 of 39
Limitations
These are cumulative release notes. If a release does not appear in this section, then there are no
associated third-party limitations.

Product nomenclature: This is cumulative documentation and the product names you encounter
in this documentation were accurate at the time of publication. Ivanti updates each new section to
reflect evolving product nomenclature, but leaves legacy citations intact to ensure proper frame of
reference for the reader.

If a release does not appear in this section, then there are no associated third-party limitations.

Related information from previous releases

l Ivanti EPMM [Link] - Limitations

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 26 of 39
 Ivanti EPMM upgrade information

Ivanti EPMM upgrade information

For detailed instructions on how to upgrade Ivanti EPMM using this upgrade information, see the Ivanti
EPMM System Manager Guide.

l Ivanti EPMM upgrade readiness checklists

l Check disk space availability
l Ivanti EPMM upgrade paths
l Ivanti EPMM upgrade URL
l Backing up Ivanti EPMM

Before you begin

Read Before you upgrade.

Ivanti EPMM upgrade readiness checklists

For administrators using Mobile Device Management Protection Profile (MDMPP), Ivanti
recommends using Ivanti EPMM [Link] and not upgrade to Ivanti EPMM 12.0.x.x, 12.1.x.x,
12.2.x.x, or 12.3.x.x version until the Mobile Device Management Protection Profile (MDMPP)
certification is obtained to maintain compliance.

This section provides checklists to help you successfully complete the upgrade process for Ivanti EPMM and
Sentry software. The checklists include:

Pre-Upgrade checklist
Before you upgrade, we encourage you to do a pre-upgrade checklist.

TABLE 18. PRE-UPGRADE CHECKLIST

Check Tasks References

Prepare and plan for l Ivanti EPMM (1 - 3 hours)

downtime l Sentry (5 - 20 minutes)

Review relevant See Ivanti EPMM product documentation.

documentation

Check certificates l iOS Enrollment, Portal HTTPS, Client TLS certificates

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 27 of 39
 Ivanti EPMM upgrade information

TABLE 18. PRE-UPGRADE CHECKLIST (CONT.)

Check Tasks References

When using mutual authentication, the Portal HTTPS

certificate must be a publicly trusted certificate from a
well-known Certificate Authority. For details, see Mutual
authentication between devices and Ivanti EPMM in the
Ivanti EPMM Device Management Guide for iOS and
macOS devices.

l MDM Certificate (check a month before expires)

l Local CA

Knowledge Base article: Renewing an expired local CA certificate.

Check disk space for l Ensure to have 40GB of free disk space available for 12.x.x.x
upgrade upgrades.

See "Check disk space availability" on the next page in this document
for details on how to perform this check.

Check Boot partition Verify you have at least 85MB free for /boot.

Ensure there is enough l Old File System (2 GB /mi and 5 GB /mi/files)

disk space l New File System (10 GB /mi)
l If there is insufficient storage, increase the available disk space.
See this VMware knowledge base (KB) article and this VMware
KB article for information. Note that these are third-party articles
hosted by VMware, whose locations are subject to change.
Contact Ivanti Support if you need shell access to the Ivanti
EPMM VM.

Check for new system l Minimum 80 GB hard drive

requirements l If there is insufficient storage, increase the available disk space.
See this VMware knowledge base (KB) article and this VMware
KB article for information. Note that these are third-party articles
hosted by VMware, whose locations are subject to change.
Contact Ivanti Support if you need shell access to the Ivanti
EPMM VM.

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 28 of 39
 Ivanti EPMM upgrade information

TABLE 18. PRE-UPGRADE CHECKLIST (CONT.)

Check Tasks References

l Call Ivanti support if issues persist when physical appliances and
VMs have the minimum required disk space configured.

Review your backup and l Physical backup: built in backup

high availability options l VMware backup: VDMK backup, snapshot
l High Availability: confirm HA version 2.0

Set up your proxy Manually set the upgrade URL and use HTTP instead of HTTPS.
configuration (if
required)

Prepare test devices l Client: Get clean test devices, open client and check-in, check
iOS log.
l Ivanti EPMM: Note the watchlist and label numbers.

Check disk space availability

Before you begin

Before you upgrade, check disk space availability.

l Atleast 40GB of disk space must be available for 12.x.x.x upgrade to be successful.

If the disk space is not available, contact Ivanti Technical Support before proceeding with the upgrade.

For more information, see KB article.

Use one of the following methods to check disk space availability:

The CLI command: show system disk

The following sample output shows the available disk space in the last line. It is 15M in this example.
CORE(12.1.0.1a-6)@[Link]#show system disk
Filesystem Size Used Avail Use% Mounted on
/dev/sda3 181G 20G 153G 12% /
tmpfs 16G 4.0K 16G 1% /dev/shm
/dev/sda1 95M 76M 15M 84% /boot

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 29 of 39
 Ivanti EPMM upgrade information

Upgrade considerations
After the pre-upgrade planning, we recommend you review the following considerations:

TABLE 19. UPGRADE CONSIDERATIONS

Check Considerations References

DB Schema and Data Run pre-validation check after downloading the repository from
System Manager. If this task fails, contact Ivanti Support.

Understand the stages l Download vs. Stage for installation

l Reboot when the system displays:
Reboot to install
[Link]

Leverage CLI upgrade See Ivanti EPMM Command Line Interface Guide.
commands (as appropriate)

Understand scenario Single server

options
High availability—Option 1: little downtime:

l Upgrade secondary
l Upgrade primary

High availability—Option 2: zero downtime:

l Upgrade secondary
l Failover to secondary
l Upgrade primary
l Re-establish sync

Download guide: Ivanti EPMM High Availability Management

Guide

Review section: High Availability Ivanti EPMM Software Upgrade

Procedures

Monitor the upgrade l Log into the Admin Portal

l Select Logs > Audit Logs > expand "Extended filters" and
set "states" to "Waiting XML generation pending"
l Monitor upgrade status using:
[Link]

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 30 of 39
 Ivanti EPMM upgrade information

TABLE 19. UPGRADE CONSIDERATIONS (CONT.)

Check Considerations References

Additional reboot Due to a kernel upgrade, an additional reboot is performed when

you upgrade. It may take longer than expected for Ivanti EPMM to
become available on the network.

Ports HTTPS/ port 443 is the default port for fresh installations, but
upgraded environments keep the previous port open, for
example, port 8080.

Post-Upgrade checklist
After completing the upgrade, we recommend the following verification checklist.

TABLE 20. POST-UPGRADE CHECKLIST

Check Tasks References

Testing and 1. Log into the System Manager

troubleshooting 2. Select Maintenance > Software Updates > Software Version
3. Verify that the new version is listed
4. DO NOT re-boot the system once the upgrade process has begun
5. Call Ivanti Support for further investigation

Verify services l Log into the Admin Portal

l Select Services > Overview
l Click Verify All

Verify devices l Register a new device

l Re-enroll/check-in existing devices

HA system cleanup l Set secondary back to secondary

l Confirm sync

The System Manager

The System Manager > Maintenance > System Storage menu shows you how much Ivanti EPMM system
storage you are using, and how much is still available.

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 31 of 39
 Ivanti EPMM upgrade information

Procedure

1. In the System Manager, go to Maintenance > System storage.

2. Click More Details next to the System Storage bar that shows percent used.

3. In this example, the available disk space is 190M.

Ivanti EPMM upgrade paths

We recommend the following upgrade paths, which are fully tested and supported:

For administrators using Mobile Device Management Protection Profile (MDMPP), Ivanti
recommends using Ivanti EPMM [Link] and not to upgrade to Ivanti EPMM 12.0.x.x, 12.1.x.x,
12.2.x.x, or 12.3.x.x version until the Mobile Device Management Protection Profile (MDMPP)
certification is obtained to maintain compliance.

Ivanti EPMM - [Link] - Supported Upgrade paths

TABLE 21. SUPPORTED PATHS FOR IVANTI EPMM UPGRADE

Current Ivanti EPMM Upgrade path to [Link]

[Link] [Link] > [Link]

[Link] [Link] > [Link]

[Link] [Link] > [Link]

[Link] [Link] > [Link]

[Link] [Link] > [Link]

[Link] [Link] > [Link]

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 32 of 39
 Ivanti EPMM upgrade information

Related information from previous releases

l Ivanti EPMM [Link] - Upgrade paths
l Ivanti EPMM [Link] - Upgrade paths
l Ivanti EPMM [Link] - Upgrade paths
l Ivanti EPMM [Link] - Upgrade paths
l Ivanti EPMM [Link] - Upgrade paths
l Ivanti EPMM [Link] - Upgrade paths
l Ivanti EPMM [Link] - Upgrade paths
l Ivanti EPMM [Link] - Upgrade paths
l Ivanti EPMM [Link] - Upgrade paths
l Ivanti EPMM [Link] - Upgrade paths
l Ivanti EPMM [Link] - Upgrade paths

Ivanti EPMM upgrade URL

To upgrade Ivanti EPMM, use the following URL if you specify an alternate URL:

Ivanti EPMM [Link] - Upgrade URL

[Link]

Related information from previous releases

l Ivanti EPMM [Link] - Upgrade URL
l Ivanti EPMM [Link] - Upgrade URL
l Ivanti EPMM [Link] - Upgrade URL
l Ivanti EPMM [Link] - Upgrade URL
l Ivanti EPMM [Link] - Upgrade URL
l Ivanti EPMM [Link] - Upgrade URL
l Ivanti EPMM 12.0.0.x - Upgrade URL
l Ivanti EPMM [Link] - Upgrade URL

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 33 of 39
 Enterprise Connector upgrade information

Backing up Ivanti EPMM

Ivanti recommends that you make a local backup of Ivanti EPMM before starting an upgrade. For more
information on backing up Ivanti EPMM, see the Ivanti EPMM System Manager Guide.

Enterprise Connector upgrade information

For detailed instructions on how to upgrade Enterprise Connector using this upgrade information, refer to
the Ivanti EPMM System Manager Guide.

l "About Enterprise Connector upgrade" below

l "Enterprise Connector upgrade paths" below
l "Enterprise Connector upgrade URL " on the next page

About Enterprise Connector upgrade

In most cases, Enterprise Connector is upgraded automatically after an Ivanti EPMM upgrade. Ivanti EPMM
upgrades include any new service package necessary for Enterprise Connector. If Connector needs to be
updated, then Ivanti EPMM prompts Connector to access the new package and complete an in-place
upgrade. In most cases, this process completes successfully, and Connector restarts.

Connector requires a minimum of 40GB of disk space for upgrading to

version 12.x.x.x.

Enterprise Connector does not include an upgrade to 12.0.0.x versions.

Enterprise Connector [Link] is applicable to 12.0.0.x releases.

If there is a problem with the in-place upgrade, then Connector makes two additional attempts to complete
the upgrade. Connector reboots before attempting to upgrade again. If the upgrade is still not successful,
then Connector reverts to the previous version and begins running in compatibility mode. In this case, you
must complete the manual upgrade steps explained in the On-Premise Installation Guide for Ivanti EPMM
and Enterprise Connector.

Enterprise Connector upgrade paths

Enterprise Connector releases can be directly upgraded only from the following listed releases:

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 34 of 39
 Enterprise Connector upgrade information

Connector - [Link] - Supported Upgrade paths

TABLE 22. SUPPORTED PATHS FOR CONNECTOR UPGRADE

Current Connector Upgrade path to [Link]

[Link] [Link] > [Link]

[Link] [Link] > [Link]

[Link] [Link] > [Link]

Related information from previous releases

l Ivanti EPMM [Link] - Connector upgrade paths
l Ivanti EPMM [Link] - Connector upgrade paths
l Ivanti EPMM [Link] - Connector upgrade paths
l Ivanti EPMM [Link] - Connector upgrade paths
l Ivanti EPMM [Link] - Connector upgrade paths
l Ivanti EPMM [Link] - Connector upgrade paths
l Ivanti EPMM [Link] - Connector upgrade paths

If you are upgrading from a version not listed here, then you need to complete one or more previous
upgrades first. See the upgrade guide for that version.

Enterprise Connector upgrade URL

To upgrade Enterprise Connector, use the following URL if you specify an alternate URL:

Connector [Link] - Upgrade URL

[Link]

Related information from previous releases

l Ivanti EPMM [Link] - Connector upgrade URL
l Ivanti EPMM [Link] - Connector upgrade URL
l Ivanti EPMM [Link] - Connector upgrade URL

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 35 of 39
 Enterprise Connector upgrade information

l Ivanti EPMM [Link] - Connector upgrade URL

l Ivanti EPMM [Link] - Connector upgrade URL

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 36 of 39
 Glossary

Glossary

Term Description

ClientID Represents the unique identifier for the registered client. It takes a
long value.
For example: 1073741831

RegistrationUUID It represents unique Android device ID. On Android 8.0 (API level
26) and higher versions of the platform, a 64-bit number
(expressed as a hexadecimal string), unique to each combination of
app-signing key, user, and device. Values of Android_ID are
scoped by signing key and user.

UserUUID Unique ID assigned to the user created in the system. The length is
36 characters.
For example: db4c2053-ec5e-4fdb-aed6-f0bcddb705d2

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 37 of 39
Documentation resources
Product documentation is available on the Ivanti documentation website. You can access Ivanti EPMM
documentation directly at this link.

To select a product document:

1. Navigate to the Ivanti documentation website.

2. Optionally, select a product category and language.

3. Enter a search term, or scroll down the product list.

4. Click the documentation link to open the document in a new window.

Ivanti EPMM documentation

The following is a complete list of documentation for this product. However, the list of documents updated
for specific versions will vary, depending on release requirements. Therefore, you might encounter
documents from previous releases that still apply to the current release.

l RN: Ivanti EPMM Release Notes and Upgrade Guide — Contains the following release-specific
information: new feature summary, support and compatibility, upgrade notes, known and resolved
issues, and limitations.

l OPIG: On-Premise Installation Guide for Ivanti EPMM and Enterprise Connector— Contains information
needed to install Ivanti EPMM on a VM or on an appliance. You will find pre-deployment tasks, steps
to install and configure Ivanti EPMM and Enterprise Connector, and set up the VMware tool.

l GSGC: Getting Started with Ivanti EPMM — Contains information you need to get started with Ivanti
EPMM. Contains an introduction to the Admin Portal, information about setting up users, devices, and
basic policies, managing the dashboard, labels, and custom attributes, registering devices using the
Mobile@Work. Mobile@Work does not have a separate product guide.

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 38 of 39
 Documentation resources

l SYS: Ivanti EPMM System Manager Guide — Everything you need to know about configuring Ivanti
EPMM system settings, managing network settings, performing maintenance tasks including
upgrading Ivanti EPMM, and troubleshooting issues using the Ivanti EPMM System Manager.

l AAWG: Ivanti EPMM Apps@Work Guide — The complete guide to installing, setting up, and managing
apps for devices. Information about the Email+, Web@Work, and Docs@Work is covered in the
respective app guides.

l DAG: Ivanti EPMM Delegated Administration Guide — The complete guide to configuring and
maintaining delegated administration with Ivanti EPMM.

l DMGA: Ivanti EPMM Device Management Guide for Android and Android Enterprise devices,
DMGi: Ivanti EPMM Device Management Guide for iOS and macOS devices, and
DMGwin: Ivanti EPMM Device Management Guide for Windows devices — Everything you need to know
about setting up and managing devices on Ivanti EPMM. Each volume is specific to a general device
platform. Information about Sentry, Tunnel, ActiveSync, AppConnect, Access, and Zero Sign-on are
covered in the related product guides.

l HAMG: Ivanti EPMM High Availability Management Guide — This document includes steps for setting
up Ivanti EPMM High Availability as well as a description of common HA scenarios and troubleshooting
tips.

l CLIR: Command Line Interface (CLI) Reference — The command line interface (CLI) enables you to
access certain Ivanti EPMM capabilities from the command line. The reference describes how to access
the CLI, use the help, the various command modes, and the available commands.

l V2API: Ivanti EPMM V2 API Guide — API reference guide for the version 2 public APIs.

l ARDMW: Ivanti EPMM V1 API Guide — This reference guide provides development information for
customers and partners intending to use Web Service APIs.

l ENSCPSA: Ivanti Event Notification Service and Common Platform Services API Guide — Describes how
to use the Event Notification Service and Common Platform Services (CPS) API with Ivanti Neurons for
MDM and Ivanti EPMM.

l ServiceNow Integrator Update Set Guide — Describes how to set up and use the ServiceNow Integrator
Update Set.

Copyright © 2024, Ivanti, Inc. All Rights Reserved. Privacy and Legal.

Page 39 of 39