Release Notes

1 like Updated 6/30/14 8:31 PM by GinaWTags:

Mobile Device Management Release Notes

Release notes for Mobile Device Management by site version.


Site Version 97 – June 30, 2014

Release Features: 

  • Volume Purchase Program App Assignment Dashboard:  a new dashboard has been added to view and manage VPP iOS app licenses associated with the Apple Volume Purchase Program. 
  • Enhancement for IBM Endpoint Manager Mobile Client - The iOS agent now has the capability to open URLs within messages. 

Required Actions: 

Update the IBM Endpoint Manager Mobile Client for Apple iOS on all managed devices. 

 

___________________________________________________________________________________________________________

Site Version 90 – April 17, 2014

Release Features 

  • Upgraded JRE/Jetty on all MDM components. 
  • Fixed a bug with "SAFE profile Removal Dashboard" showing errors when devices have multiple Exchange ActiveSync profiles. 
  • Fixed a bug which caused unrecommending Android Apps to fail.
 
Required Actions 
  • Update all MDM components in your deployment using the fixlet, "Upgrade JRE (6SR15FP1) and Jetty (8.1.14) for MDM components" at your earliest convenience.  

Site Version 88 – February 11, 2014

Release Features

  • Fixed a bug with some PDF exports of WebReports not working as expected.
  • Fixed a bug with the TSP that prevented authentication for some devices when group filtering was used.
  • Fixed a bug with the iOS Profile Configuration Wizard.  When iOS Exchange ActiveSync Profiles were created, incorrect actionscript was generated.

Required Actions

  • Update Trusted Service Providers (TSP) in your deployment at your earliest convenience.

     

Site Version 86 – January 20, 2014

Release Features

  • Updated the Enrollment and Apple iOS Management Extender to replace a certificate that is due to expire on January 24th, 2014. This certificate impacts the IBM Endpoint Manager Mobile Client.

After the certificate expires, Recommended Apps and sending messages through the client will not function fully until the certificate is replaced.

Required Actions

  • Update all Enrollment and Apple iOS Management Extenders in your deployment by running the upgrade fixlet in Setup and Configuration > Manage Components > Upgrade MDM Components.

Extenders should be upgraded before January 24th, 2014 to avoid service disruption to Recommended Apps and the ability to send messages through the client.  The update can be applied after the 24th if necessary.

 


Site Version 85 – December 23, 2013

Release Features

  • Fixed an issue incorrectly configuring Exchange Extenders when using EMT.
  • Fixed an issue with removing Exchange and Traveler Extenders during a refresh.

Required Actions

  • None.

Site Version 84 – December 18, 2013

Release Features

  • Updated the Enterproid Divide Management Extender to handle incomplete data received from Enterproid.

Required Actions

  • Update your Enterproid Divide Management Extenders.

Site Version 83 – December 17, 2013

Release Features

  • Fixed an issue blocking configuration of Enrollment and iOS Management Extenders when using wildcard certificates.

Required Actions

  • None.

Site Version 82 – December 16, 2013

Release Features

  • Updated Japanese translations.

Required Actions

  • None.

 


Site Version 81 – December 12, 2013

MDM Feature Release 2.5

Major Release Features

The Enterprise App Management Dashboard now includes the capability to create and manage custom App Configurations in supported iOS 7 apps.

  • iOS 7 App Feedback Support.

A new inspector receives data from supported iOS apps.  This data is found in device's Summary tab or the Apps - Android / Apple iOS analysis.

Required Actions

  • Update Lotus Traveler Management Extenders in your deployment.
  • Update Microsoft Exchange Management Extenders in your deployment.
  • Update all other components at your earliest convenience.

Related Links

Documentation is available on the IBM Endpoint Manager v9.0 Information Center:  Information Center

 


Site Version 80 - October 31, 2013

Release Features

  • Fixed an issue with the Samsung SAFE Profile Removal Dashboard.
  • Modified defaults in the iOS Profile Configuration Dashboard.
  • Localization fixes.

Required Actions

None


Site Version 79 - October 11, 2013

Release Features

  • Fixed an iOS device enrollment issue related to incomplete device data in the database.
  • Fixed an issue where un-enrolled devices were not reported as un-enrolled.
  • Fixed an issue related to the ability to create an iOS Cellular profile.
  • Fixed an issue in the Security Compliance Dashboard where it would hang while loading.
  • Localization fixes.

Required Actions

Update the Enrollment and Apple iOS Management Extender.


Site Version 78 – October 9, 2013

Release Features

  • iOS Profile Configuration Dashboard update.
  • The following profiles (payloads) have been updated to fix issues or add iOS 7 features:
    • AirPlay
    • AirPrint
    • Global HTTP Proxy
    • App Lock
    • Restrictions
    • Single Sign-On Account
    • Web Content Filter
    • Wi-Fi
  • The following iOS profile (payload) is new:
    • Cellular
  • Resolved an issue where policy actions to install iOS profiles failed on devices immediately after enrollment.
  • Additional localization fixes.

Required Actions

  1. Stop all open policy actions that install iOS configuration profiles.
  2. Update all iOS configuration profiles: edit each policy and complete it by clicking Finish.  No changes need to be made to the policy.
  3. Recreate required policy actions related to iOS configuration profiles.

Related Links:

Mobile Device Management Users Guide: Apple iOS Profiles


 

Site Version 77 - September 26, 2013

MDM Feature Release 2.4

Major Release Features

Android App Changes

  • Added support for Android x86 devices and optimized agent for ARMv7 devices.
  • Reduced the footprint of the agent by 20%.
  • Improved SAFE detection and error handling on non-SAFE devices.
  • Fixed some device-specific crashes reported via Google Play.

Additional Changes

  • Cookies now set the proper flag indicating that SSL is used when they are shared between the Enrollment and Apple iOS Management Extender and the Trusted Service Provider (APAR IV48025).
  • Fixed an issue where the Security Compliance Dashboard could cause the console to crash.
  • Fixed an issue where the Security Compliance Dashboard would flag all apps as blacklisted if no apps were marked as blacklisted.
  • Fixed an issue where iOS devices that haven’t reported in a number of days were not displayed correctly in the Security Compliance Dashboard.
  • Blacklisted apps in Enterprise App Management dashboard are now shared among operators.
  • Logs for iOS Extender are only kept for 10 days by default.
  • The Proxy Agent works better with time constraints on device actions.
  • Fixed an issue with open actions failing after the Proxy Agent is restarted.
  • Fixed an issue with Enrollment and Apple iOS Management Extender not saving enrollment answers when performing a web enroll.
  • Exchange profiles in the iOS Profile Configuration dashboard now allows usernames that are not proper email addresses.
  • Localization fixes.

Required Actions:

  • Upgrade components at your earliest convenience.

Site Version 76 - September 20 2013

 

New/Updated Content:
  • iOS Profile Configuration Dashboard:
    • The Restrictions Profile has been updated to include the option to restrict the iOS Control Center.  Once created, an iOS Profile can be deployed on iOS devices.
  • Install iOS Configuration Profile - Disable Lock Screen Control Center (Restrictions Payload) (ID: 703):
    • Fixlet ID 703 creates a targeted Restrictions Profile that disallows the Control Center on the iOS lock screen.  This Fixlet creates the same result as creating and deploying a properly configured Restrictions Profile as previously described.
  • Disabled VPN App Association:
    • The ability to set a VPN Profile for App Association has been disabled because this feature is currently not working as expected.

Reasons for Update:

An exploit has been identified in iOS 7 allowing access to some portions of the OS while devices are locked.  This exploit revolves around an issue with the Control Center that is accessible from the iOS lock screen.  This update creates two related methods to disable the Control Center allowing iOS 7 devices to remain secure when using Mobile Device Management for IBM Endpoint Manager.  Either method will block the exploit until an iOS patch is released.

Actions to Take:

  • The Mobile Device Management Site will update automatically. It can be gathered manually if desired.
  • If iOS 7 devices are part of your deployment, disable the Control Center using one of the methods described, to ensure device security.

 

Site Version 75 - September 18 2013

MDM Feature Release 2.3 iOS 7 Patch Release

Known Issue: VPN Profile App Association is not functioning as intended.

 

Site Version 74 - September 12 2013

  • Fix for Adobe Flash Player.
  • Added additional warning about upgrading your iOS Extender for iOS 7.

Site Version 73 - September 3 2013

  • The iOS Management Extender has been updated to support iOS 7.
  • Site level relevance and dashboard restrictions now enforce the stated 8.2 requirement for MDM.
  • Additional localizaton fixes.

Site Version 72 - August 7 2013

  • Updated the Enterprise App Management dashboard to import from the latest Google Play Store.

Site Version 71 - July 24 2013

  • Updated the Enterprise App Management dashboard to import from the latest Google Play Store.

Site Version 70 - July 22 2013

Fixed Issues:

  • The Admin Portal has been updated to fix an issue with the encoding of Korean language files.
  • Additional localization fixes.

Site Version 69 - July 8 2013

Fix an issue where the device mapping is not created properly when using Deploy Management Extender for Lotus Traveler Task.

Site Version 67-68 - June 28 2013

MDM Feature Release 2.3

New Major Features: 
  1. Enterproid Divide Integration Enhancements – You can now fully define and provision Divide policies through IEM for Mobile with our new Divide Policy Dashboard 
  2. Security Compliance Dashboard – Added a centralized view to help view and manage users who violate assigned security policies. 
  3. Refined UI for IBM Mobile Client for Apple iOS– Updated the iOS app to provide an easier, more streamlined view of recommended app list and messages. 
 
Additional Changes: 
  • Optimized the MDM Navigation Domain. The Domain (and the BigFix console in general) should refresh much more quickly in deployments with large numbers of actions. 
  • Fixed Setup Dashboard issue that prevented configuring LDAP using LDAP group filter. 
  • Fixed Setup Dashboard issue where passwords with certain special characters could not be set. 
  • Fixed a Traveler Extender bug which prevented using the “Deny Email” fixlet 
  • Fixed an iOS Profile Wizard bug where editing a profile would produce faulty relevance 
  • Added fixlet to send message to Android devices. 
  • Added a global security polices section to the Android client’s security compliance screen 
  • Android WifI Policies wizard now allows space in SSID 
  • Fixed iOS app crash when recommending apps with non-standard version numbers 
  • App Management dashboard now allows you to create Tasks instead of actions 
  • Updated OS detection logic for Lotus Traveler. Should remove many “Unknown” OS entries 
  • Fixed various broken links, typos and translation issues. 
Required Actions: 
Upgrade your MDM components. Use the MDM Health Checks dashboard to view the components that are out of date. 
 

Site Version 66 - June 4 2013

Updated the contact link for Enterproid Divide

Site Version 65 - May 21 2013

Fixed a faulty version check for the iOS App that was affecting the Health Checks Dashboard

 

Site Version 64 - May 13 2013

Fixed problem recommending apps for iOS devices 
Fixed potential problem upgrading the Enrollment and Apple iOS Management Extender.

 Required Actions:

  1. Upgrade your Enrollment and Apple iOS Management Extender. Use the MDM Health Checks dashboard to view the components that are out of date.

Site Version 63 - Apr 30 2013

MDM Feature Release 2.2

 

New Major Features:
  1. Enterproid Divide Integration – Devices can now be managed through Enterproid’s Divide device container solution.
  2. Admin Web Portal – Added a new simplified web based interface similar to the Self Service portal, for administrators to easily manage groups of device.
  3. Android 4.2 Support – Now fully support Android version 4.2. Note this does not require a new Android Agent to be installed.

Additional Changes:

  • Using the App Management will now issue an Android “GCM” message. This makes android agents much more responsive when managing Apps.
  • Fixed several issues around version detection and upgrading apps in the App Management dashboard for the iOS App
  • Fixed misleading text in the Setup and Configuration dashboard for Lotus Traveler. The setup options now correctly lists the supported versions of the Lotus Traveler server.
  • Removed a restriction when editing an iOS Profile where you couldn’t add or edit custom relevance expressions.
  • Fixed an issue in the Enrollment and Apple iOS Management Extender where recreating certificates forces you to re-enroll your iOS devices.
  • Fixed an issue in the Enrollment and Apple iOS Management Extender where an unreachable app URL would cause the extender to hang indefinitely.
  • Enrollment and Apple iOS Management Extender now works properly with Authenticating BigFix Relays
  • Enrollment and Apple iOS Management Extender now works on Turkish language Windows OSes
  • Several optimizations and performances enhancements to the Proxy Agent.

Required Actions:

  1. Upgrade your MDM components. Use the MDM Health Checks dashboard to view the components that are out of date.

 

Site Version 62 - Apr 16 2013

MDM Patch 2.1.1

  • Android Notifier now works with BigFix 9.0 servers on Linux
  • Public Key Synchronizer (for multitenancy) now works with BigFix 9.0 servers on Linux
  • Setup Dashboard for BlackBerry Management Extenders will now automatically accept the BlackBerry Enterprise Server certificate without requiring users to manually select and upload it
  • Setup Dashboard for BlackBerry Management Extenders no longer requires that an "Enrollment Tag" be defined
  • Fixed device counts for the App Management Dashboard
  • Fixed faulty version check relevance in the App Management Dashboard

 

Site Version 61 - Mar 28 2013

Fixed error pop up when first opening Enterprise Apps Management
 

Site Version 60 - Mar 28 2013

MDM Feature Release 2.1

New Major Features:

1. Reworked App Management – Viewing, deploying, and managing mobile apps has been completely remade into a more intuitive and streamline process
2. BlackBerry Enterprise Server Support – BlackBerry 4-7 devices can now be managed through the BlackBerry Enterprise Server using our new BlackBerry Management Extender
3. Smart-cloud for Notes Support - Updated our Lotus Traveler Extender to support the enhanced features available in the Smart-cloud for Notes offering.
4. FIPS Support – All components now support FIPS certified cryptography.
5. Expanded Lotus Traveler Security Policy Support – Lotus Traveler Security Policies now support a wider range of Android security policies using Lotus Traveler 8.5.3
6. Extended Android SAFE Capabilities – Added support for new Samsung Approved For Enterprise (SAFE) capabilities, such as Bluetooth and Certificate Management.
7. Enhanced Health Checks – The Health Checks Dashboard now helps address a much larger list potential optimizations and problems.



8. Update MobileSecurity Configuration ManagementAdded Center for Internet Security (CIS) Checklist for iOS 6.0

Additional Changes:

· Fixed notifications for the iOS App. The notification number will now accurately represent the number of new messages and recommended apps sent to the device.
· Fixed potential freeze in the iOS App during enrollment.
· Updated all components to support BigFix Platform 9.0
· Fixed problem with Exchange and Traveler managed devices that prevented them from being removed from the console.
· Updated how “Last Report Time” is determined in Exchange to properly reflect when a device last communicate with the Exchange server
· Added support for previously “unknown” device OSes
· The iOS Management Extender will no longer create unmanageably giant logs
· Fixed problem in Setup and Configuration Wizard where the “Test LDAP Settings” button would fail if LDAP contained too many users.
· Setup and Configuration Wizard now supports anonymous LDAP logins
· Fixed several rare potential crashes in the Android Agent.
· Fixed problem with SAFE storage decryption in the Android Agent
· Optimized the Proxy Agent to handle complex and deeply nested relevance expressions more quickly

Required Actions:

1. Upgrade your MDM components. Use the MDM Health Checks dashboard to view the components that are out of date.

 

Site Version 57-59 - Mar 13 2013

Fixed Issues:
  • Updated Fixlet 191 for IEM Platform 9.0 (Gilman) compatibility

 

Site Version 56 - Feb 21 2013

Updated text in the Setup and Configuration Wizard and various Fixlets, which incorrectly stated that Android Agents did not require an Enrollment Server Setup.

 

Site Version 55 - Jan 25 2013

MDM Patch Release 2.0.1
 

 

Site Version 54 – Jan 18 2013

MDM Feature Release 2.0

New Major Features:

1. Enhanced Multi-Tenancy Support – MDM now supports multi-tenancy with the addition of “enrollment” tags.
2. BlackBerry 10 support - BlackBerry 10 devices can now be managed through the Exchange Extender via the ActiveSync interface
3. Windows Phone 8 and Windows Surface RT support - These devices can now be managed through the Exchange Extender via the ActiveSync interface
4. Deny Email Access for Exchange – You can now deny email access to devices which are non-compliant in MS Exchange 2010 and Office 365.
5. Expanded Lotus Traveler Security Policy Support – Lotus Traveler Security Policies now support a wider range of Android security policies using Lotus Traveler 8.5.3
6. Enhanced iOS Security Options - iOS Management Extender now supports enhanced authentication of iOS Clients via client-side certificates.
7. Reworked Domain Tree Navigation - Reorganized the Mobile Device Management Domain to provide easier and more intuitive navigation.








Fixed Issues:

Required Actions:

  

Site Version 53 - Jan 09 2013

Fixed Issues:

Required Actions:

Vulnerability details:

 

Site Version 52 - Jan 4 2013

Fixed Issues:
  • Fixed problem where "Clear Passcode" fixlet was missing from iOS devices, and inaccurately relevant on Android devices
  • Fixed issues where Android GCM notifier would not properly send update notifications in all cases, causing unresponsive android agents (use Fixlet 199: "Upgrade Android Device Notifier Service (GCM) on Server" to correct this issue)

 

Site Version 51 - Dec 18 2012

MDM Patch Release 1.3.2
 

Fixed Issues:

 

Required Actions:

  1. Upgrade your Proxy Agents on all applicable Management Extenders (Fixlet 191: Upgrade Proxy Agents)
  2. Use Google Play to update your Android Agents from the Android Device.

 

Site Version 50 - Nov 29 2012

  1. Worklight App Support - You can now import Worklight apps from your Worklight server through the "Recommended Apps - Android" and "Recommended Apps - iOS" dashboards.

 

 

Site Version 49 - Nov 8 2012

 

Site Version 48 - Nov 7 2012

 

Site Version 47 - Nov 1 2012

  1. Integrated SAFE support - Integrated Samsung Approved For Enterprise (SAFE) Phase One APIs to enabled additional management capabilities (such as selective app wipe, application blacklisting, and device encryption) to SAFE enabled android devices.
  2. Self Service Portal Redesign - Reworked the Self Service Portal (SSP) to be easier to use and much more end user friendly.
  3. Mobile Security Configuration Management Sites - MDM now includes a new batch of Center for Internet Security (CIS) Checklist sites for iOS 5.0.1, and Android 2.3, 4. These can be enabled through the normal License Overview dashboard in BES Support.
  4. Expanded Proxy Agent Capabilities - The Proxy Agent for iOS, Lotus, and MS Exchanged managed devices now supports Multiple Action Groups, Baselines, and "createfile" commands.
  5. Change Notification Dashboard - New notification dashboard to help users stay on top of the changes and improvements made to the MDM site.

Required Actions:

  1. Your devices will no longer report location data until you run Fixlet 77: Enable GPS Location Properties.
  2. To upgrade your SSP, first upgrade your TSP (Fixlet 200: Upgrade Trusted Service Provider) before upgrading your SSP (Fixlet 184: Upgrade Self Service Portal)
  3. SAFE enabled devices require that a SAFE plugin is installed. Users will be prompted to install this plugin when they open the Mobile Client app on their SAFE enabled Devices.

 

 

Site Version 46 - Oct 23 2012

Site Version 45 - Oct 4 2012