New features summary
These are cumulative release notes. If a release does not appear in this section, then there were no associated new features and enhancements.

Standalone Sentry features for Ivanti EPMM
-
Support to update Open VM tools (open-vm-tools): Open VM tools (open-vm-tools) is updated to the latest version 11.0.5-3.el7_9.4.x86_64 for VMs for VMware ESXi system.
-
Support for Sentry SMB 3.x for [email protected]: CIFS service is updated to SMB 3.x for [email protected]
SMB 3.x is enabled by default after upgrading to 9.17.0. -
Sentry uses HMAC/MD4 for compatibility with NTLM-1. NTLM-1 is deprecated. Upgrade to NTLM-2 for any weak cipher usage issue.
Standalone Sentry features for Ivanti Neurons for MDM
-
Support for FIPS mode on upgraded AWS Sentry: FIPS mode is now supported on upgraded AWS Sentry.

Standalone Sentry features common to UEM platforms
-
Support for Conditional Access rules in Office 365: The Conditional Access rules in Office 365 now support ADFS with Sentry OAuth.
-
TLS 1.1 and TLS 1.0 support: TLS 1.1 and TLS 1.0 is not supported with Sentry 9.16.0 and later releases. For more information, see KB article.
The following error appears when TLS 1.1 or TLS 1.0 is selected during the upgrade.
Login to Sentry > Monitoring > Alert Viewer. The following log is listed in the Alert Viewer for TLS upgrade failure. -
SSLv2Hello support: SSLv2Hello is not supported with Sentry 9.16.0.
-
Support for Certificate Based Authentication (CBA) with Ivanti EPMM and Ivanti Neurons for MDM: CBA is now supported with Ivanti EPMM and Ivanti Neurons for MDM.
-
Support for ADFS as IdP: OAuth with Certificate Based Authentication (CBA) now supports ADFS as IdP for Ivanti EPMM and Ivanti Neurons for MDM.
-
Support for latest Exchange Servers: Exchange Server 2019 CU12, 2016 CU23, and 2013 CU23 is now supported with Sentry 9.16.0.
-
Support for FIPS on Sentry AWS: FIPS is now supported on Sentry AWS.
FIPS is not supported with upgraded Sentry on AWS. Only fresh installation is supported.
Standalone Sentry features for Ivanti EPMM
There are no new Standalone Sentry features and enhancements available for Ivanti EPMM.
Standalone Sentry features for Ivanti Neurons for MDM
There are no new Standalone Sentry features and enhancements available for Ivanti Neurons for MDM.

Standalone Sentry features common to UEM platforms
-
Support for OAuth multi-factor authentication: Multi-factor authentication is now supported with Sentry 9.15.0 and newer versions and Ivanti Neurons for MDM. For more information, see 'Multi-factor authentication configuration for Ivanti EPMM' in the Sentry Ivanti EPMM Guide and 'Multi-factor authentication configuration for Ivanti Neurons for MDM' in the Sentry Ivanti Neurons for MDM Guide.
-
Support for IBM Lotus Notes Traveler 12: IBM Lotus Notes Traveler 12 is now supported with Sentry 9.15.0.
-
Support for Microsoft Hyper-V 2019: Microsoft Hyper-V 2019 is now supported with Sentry 9.15.0.
-
Support for latest exchange server: Exchange server 2016 CU21 and CU22 and 2019 CU11 are now supported with Sentry 9.15.0.
Standalone Sentry features for Ivanti EPMM
This release includes the following new features:
-
Support for mutual authentication between Ivanti EPMM and Sentry: Ivanti EPMM and Standalone Sentry now support mutual authentication by default. Minimum version requirements are:
-
Ivanti EPMM 11.5.0.0 and newer versions.
-
Standalone Sentry: 9.15.0 and new versions.
-
With Sentry 9.15.0 (AWS and Azure), the machine hostname and the Sentry hostname must be identical. Also, Sentry Hostname/IP Address must be available in subject AltName for mutual authentication to occur without errors between Ivanti EPMM and Sentry.
Ivanti EPMM will only initiate mutual authentication if Sentry is running 9.15.0 or newer software.
-
-
Enabling Strict TLS configuration: When mutual authentication is enabled between Ivanti EPMM and Sentry, then that Sentry is enabled with Strict TLS Configuration. For more information, see UEM SSL Configuration in the Sentry Guide.
-
Configuration update when Sentry is unregistered: When mutual authentication is enabled and Sentry is unregistered from Ivanti EPMM, use the Sentry Config Reset to add Sentry again to another Ivanti EPMM.
Standalone Sentry features for Ivanti Neurons for MDM
There are no new Standalone Sentry features and enhancements available for Ivanti Neurons for MDM.

Standalone Sentry features common to UEM platforms
-
Support for Azure AD conditional access rules: Sentry 9.14.0 now supports conditional access rules. For more information, see "OAuth for Sentry" in the Sentry Ivanti EPMM Guide.
-
iOS 15 day zero support: iOS 15 day zero support is now available with Sentry 9.14.0.
Standalone Sentry features for Ivanti EPMM
-
Support for M2700 appliance: Sentry installation is now supported on M2700 appliance. For more information, see "Installing Standalone Sentry on an appliance (Ivanti EPMM only)" in the Sentry Install Guide.
Standalone Sentry features for Ivanti Neurons for MDM
There are no new Standalone Sentry features and enhancements available for Ivanti Neurons for MDM.