Release Notes for XenMobile Server 10.15 Rolling Patch 6 Release

What's new

• Secure Hub APNs certificate renewal
  The Secure Hub Apple Push Notification Service (APNs) certificate for XenMobile Server 10.15 expires on March 12, 2024. This update renews the Secure Hub APNs certificate automatically to a new certificate which will expire on February 9, 2025.
• Added new field Profile scope under Webclip Policy Settings for iOS
  For iOS devices, a new field named Profile scope is added under the Policy Settings in the Webclip device policy. This feature allows you to select whether the policy applies to a user or a system. For more information, see Webclip device policy - iOS settings.
• Update deployment rule for the public store app using REST API
  A new field naming rules is added to the Add New Public Store App and Update Public Store App REST APIs. This feature allows you to update the deployment rules for the public store app. For more information, see the Public REST API documentation.
• App attributes device policy supports new iOS app attributes
  You can now specify the following attributes for apps installed on iOS devices:
  • Removable app: Specify whether the app is removable by users when it's a managed app.
  • Enable associated domain direct download: Specify whether the app can do the claimed site association verification at the domains directly.
  • Associated Domains: Specify the associated domains to add to an app.
  For more information, see App attributes device policy.
• Added new Knox Platform for Enterprise Key device policy
  A new device policy named Knox Platform for Enterprise Key has been added. This policy allows you to provide the required Samsung Knox Platform for Enterprise (KPE) license information and use the KPE licenses to enhance the security of your Samsung device. For more information, see the Knox Platform for Enterprise Key device policy.
• Support for Apple Business Manager for shared iPads
  Starting from XenMobile Server 10.15 RP6, shared iPads support Apple Business Manager (ABM) with XenMobile Server. This feature allows you to sign in to the shared iPads using the ABM accounts and use them. For more information, see Configuring shared iPads.
  Note:
  Currently there is a limitation within this feature where the logged-in user may display as "Anonymous" on the XenMobile® Server console. Consequently, certain secure actions, such as "Delete All Users," may fail to perform on devices, particularly those utilized as shared iPads. To workaround this issue, it is recommended to manually add DEP users (managed Apple IDs) to the XenMobile Server console, especially if you are using shared iPads of ABM. A permanent solution will be included in upcoming releases.

• Added new security action named Delete All Users for shared iPads
  Starting from XenMobile Server 10.15 RP6, a new security action naming Delete All users is added for shared iPads in XenMobile Server. This feature allows you to delete all the users on the device. For more information, see Security actions for shared iPads.
• Clone a delivery group to use as the basis for a new delivery group
  This feature lets you copy a complex delivery group that includes multiple policies, apps, and actions. You can then edit the copy such as adding enrollment profiles or a new set of Active Directory users. For more information, see Clone a delivery group.
• Support for auto-update of optional apps in iOS
  Starting from the XenMobile Server 10.15 RP6, a new server property named apple.ios.optional_app_update is added. This property allows you to auto-update the optional apps in iOS. The default value of apple.ios.optional_app_update is set as False. For more information, see Server Properties.
  For more information about auto-update of optional Volume Purchased apps, see Check for the app updates.
• Optimize database upgrade mechanism
  The database upgrade process is optimized to make sure that each cluster is upgraded only once. This allows you to minimize the downtime during the Rolling Patch updates in the HA cluster.

Fixed issues

• You aren't able to deploy the Webclip device policy on the iOS-shared devices when you're using ABM or ASM configurations.