New features summary

This section provides summaries of new features and enhancements that are available in this release. References to documentation describing these features and enhancements are also provided, when available.

General features and enhancements

iOS, macOS, and tvOS features

Windows features

Mobile Threat Defense features

General features and enhancements

  • App Installation Status column is added for iOS, macOS, and Android devices: Starting from the current release, the App Installation Status column in the Available Apps tab in Device Details view will display the status of applications on the device. The App Installation Status column appears by default.

    Sorting by App installation status is not supported.


    For more information, see Getting Started with Devices.
  • Delegation with custom distribution is enabled for Per-app VPN and Certificate configurations: Starting from the current release , global administrators can delegate space administrators to edit the certificate for All Devices and for the Custom distribution option.

    The distribution changes are applicable only to the specific space. All other spaces continue to inherit the default space distribution settings.

  • New rule is added to the rule builder: The Device Registered filter attribute is added to the rule builders for Device Groups. The attribute lets you filter the devices that have been registered in a specific time. For more information, see Device Groups.

  • View User Registration PIN permissions are updated: When you apply the View User Registration PIN custom role, users can view the PIN of other users that have the same access level or with lesser privileges and the users cannot create PINs for other users. For more information, see Roles Management.

  • Support for Department attribute in SCIM user provisioning: Starting this release, Department attribute will be supported in SCIM User Provisioning. For more information, see Configure Attributes in SCIM User Provisioning.

  • Updated the Device Cleanup process: The Device Cleanup process is updated as follows:

    • Retired Device Settings - This is now renamed to Retired Devices. Scheduled retirement frequency options are added.

    • Delete Retired Device Settings - This is now renamed to Delete Retired Devices. Scheduled deletion frequency options are added.

    • Delete Wiped Devices - This is added in the current release.

      For more information, see Device Cleanup Settings.

iOS, macOS, and tvOS features

  • Automatic renewal of certificates for iOS devices: Starting this release the Go Client certificate for iOS devices is automatically renewed within 30 days of expiry.
  • Automatic renewal of N-MDM Device Identity certificates for Apple devices: Starting this release, the Device Identity certificate for Apple devices is automatically renewed within 30 days of expiry.
  • New Device Details are added: The following new version details are added for iOS and macOS devices:
    • Supplemental Build Version
    • Supplemental OS/Version Extra
    • The version details are available as follows:

Windows features

  • Set app priority during installation: When installing a Windows app, the administrator can set the priority level on which the app installation must happen. For more information, see App Configuration.

  • Reorder pre or post-install scripts for .EXE files: The administrator can now reorder the pre or post-install scripts or files by prioritizing the pre or post-install scripts for .EXE files. For more information, see Managing Windows Applications.

  • Support to add icons when uploading Windows In-house apps: When uploading In-house Windows apps to the App Catalog, the administrator can now include icons along with the apps. For more information, see App Catalog.

  • EXE apps installation during Autopilot enrollment: The .EXE apps will be installed in Self-deploying and User-driven modes during the Autopilot enrollment process. For more information, see Configuring Windows Autopilot Profiles.

  • EXE app management on Windows devices: The .EXE apps can be managed in Self-deploying or Pre-provisioning modes on Windows devices. For more information, see Managing Windows Applications.

  • Support for Windows LTSC devices: Ivanti Neurons for MDM now supports devices installed on Windows LTSC.

  • Custom CSP Configuration: The administrator can create, configure, and distribute custom CSPs using the OMA-URI schema. For more information, see Custom Configuration.

Mobile Threat Defense features

Mobile Threat Defense (MTD) protects managed devices from mobile threats and vulnerabilities affecting device, network, and applications. For information on MTD-related features, as applicable for the current release, see the Mobile Threat Defense Solution Guide for your platform, available under the MOBILE THREAT DEFENSE section on the Ivanti Product Documentation page.

Each version of the MTD guide contains all Mobile Threat Defense features that are currently fully tested and available for use on both server and client environments. Because of the gap between server and client releases, new versions of the MTD guide are made available with the final release in the series when the features are fully functional.