KACE® Cloud
Release Notes
June 2023
These release notes provide information about the latest KACE Cloud release.
About this release
KACE Cloud allows you to quickly enroll mobile devices, manage their inventory, and to apply required configurations and policies. You can interact with managed devices using a standard set of commands, such as resetting a password or locking a device, as needed. This cloud-based product helps you implement your entire device management solution quickly, and ensuring that managed devices follow your organization guidelines and standards, while protecting your data integrity.
This release contains one new feature and a number of resolved issues. See New features.
Supported platforms
MDM managed devices:
The following operating systems are supported for MDM managed devices:
Android
- Android 13.0+
Apple
- iOS, iPadOS, tvOS15+
- macOS 13+
Windows:
- Windows 10 Professional, Enterprise, Education, 1709 or later
- Windows 11
Registered Devices:
KACE Cloud uses an agent to deliver some management functionality to Windows and macOS devices. Windows and macOS devices can be partially managed without an MDM connection through device registration. The following operating systems are supported:
Windows:
- Windows Server 2016 (Standard and Datacenter Editions with .NET Framework 4.7 or later)
- Windows Server 2019, 2022, 2025 (Standard and Datacenter Editions)
- Windows 10 Professional, Enterprise, Education, 1709 or later
- Windows 11
|
NOTE:32-bit versions of Windows are unsupported by KACE Cloud Agent. |
Apple:
- macOS 13+
Browsers:
The following browsers are supported:
- Google Chrome 109+
- Microsoft Edge 118+ (Not supported on mobile devices.)
- Mozilla Firefox 119+
- Apple Safari 12+ (Mac only)
- Opera 15.6+
System-provided mobile administrative applications are not currently available.
New features
New features in KACE Cloud:
- Installation of Windows EXE and ZIP apps. Installing a Windows app distributed through an EXE or ZIP file requires a set of parameters that need to be provided while adding the app to the KACE Cloud Apps Library. Start by installing the app on a test machine and obtaining the required values before adding it to the library. The upload process is fairly straight-forward. Simply navigate to the Apps Library and choose Add New > Upload App (.exe, .zip). Next, specify the required app options. You can edit these options at a later time, if needed.
- Android Management API (AMAPI) device enrollments. AMAPI device enrollments, introduced in this release, use a Google Android agent that interacts with KACE Cloud through the Android Management APIs. To follow this enrollment path, you must create a valid AMAPI configuration in Google Console and connect the required elements with KACE Cloud. Devices enrolled using this path require the Google Android Device Policy app. Silent authentication is not supported in AMAPI enrollments.
The Google Android agent, used in AMAPI enrollments, does not support certificate management. The KACE Cloud AMAPI Companion App, also added in this release, extends the Google agent's functionality, allowing you to manage certificates on AMAPI-enrolled devices. This app must be installed on any Android devices that are enrolled through AMAPI and require the use of certificates.
- Improved editing of Windows Custom Profiles. Starting in this release, the OMA-URI field in the Custom Profile view supports auto-completion and displays the available segments for each level in the path as you type. You can also use it to search for a desired term, or for a specific element, as you assemble the URI. When you finalize the path, description about the selected path appears, along with a link to the associated topic in the Microsoft documentation.
- Patch Statistics dashboard. This dashboard shows the deployment status of patches that are associated with managed devices. This information can help administrators to understand the level of patch compliance in their environment, and to look for any indicators that can improve the overall security of their environment. The dashboard displays a variety of statistical data to assist the administrator to easily identify the software patches that can be rolled out to specific devices.
- Ability to report on macOS and iOS update profiles. New properties are added to the Devices and Device Policy Configurations entity sets in KACE Cloud reports, to easily report on macOS and iOS auto-updates and version upgrades.
- Apple VPP API upgrade. Device administrators can now use the new Apple VPP API to manage Apple VPP purchases.
- KACE Cloud Secure entitlement enforcement. KACE Cloud Secure licenses allow you to update the software on your managed Windows and macOS devices to their latest versions. A KACE Cloud Secure license is consumed each time any enrolled device uses a KACE Cloud Secure feature. For example:
- When a patch is deployed to an enrolled KACE Cloud device, a license is consumed. Only when all patches are rolled back from the device and the device is considered unpatched, the license is released.
- When a device uses an iOS or macOS feature upgrade, or a Windows Feature Update, a license is allocated for that device. The license is not released even if the feature is rolled back.
A license is released when:
- All patches are rolled back from a device and the device is considered unpatched.
- A managed KACE Cloud Secure device becomes unenrolled.
When a device is listed as being out of compliance due to insufficient KACE Cloud Secure licenses, this is stated in the Device History and also on the device's Policies tab.
- Ability to specify tenant-wide time zone. KACE Cloud Administrators can apply the tenant's zone to all devices, to those that do not report a time zone, and also override the policy schedule time zone on applicable devices, as applicable.
For complete information about these features, visit the KACE Cloud Help Center.
See also:
Resolved issues
The following issues are addressed in this release.
Table 1: General resolved issues
| Resolved Issue | Issue ID |
|---|---|
| Adding Modern And Co-Managed Llicenses with no dates broke the admin portal. | 8169 |
| Smart Label was not getting associated with device during Android enrollment. | 8085 |
| EMM-enrolled Android devices appeared as being out of compliance when Wi-Fi configurations were removed from a policy. | 8030 |
| LDAP password message is updated to include the requirement for special characters. | 8005 |
| Policy: The Next deployment text disappeared from all items on the Android device's Policy tab, if app was installed directly. | 7978 |
| App updater attempted to re-install lower version of the app from the app store (iOS or Android), | 7954 |
| Local account modifications in DEP Profile could not be saved. |
7950 7946 |
| No confirmation or notification that devices would be unenrolled if assigned KACE Cloud user was deleted. | 7944 |
| Manually enrolled Apple device showed as being DEP-enrolled. | 7940 |
| Apple devices: Attempting to remove a profile failed with an error, indicating that the profile was not found on the device, and the profile record remained on the device. | 7900 |
| Customer's macOS devices were linked to wrong Apple profile. | 7899 |
| iOS upgrade could become unresponsive. | 7896 |
| Too many device inventories were reported for Android app installations. | 7870 |
| Some iOS web apps were not installed. | 7810 |
| Apple tokens are no longer being cleared on purge. | 7801 |
| KACE Cloud Android enrollment instructions with QR codes did not include the QR code in emailed instructions. | 7792 |
| Apple devices were unenrolled unexpectedly. | 7791 |
| Redirection error observed when onboarding a tenant with a different realm name. | 7775 |
| Existing tenants could not access the enrollment portal. | 7763 |
| Invalid KACE Cloud Secure error message was displayed during FileVault configuration. | 7762 |
| Reusing deleted iOS Auto-Update configuration names were not being saved properly. | 7729 |
| When creating a new Option Set of any type, the configuration could be saved with no settings set. | 7660 |
| Exclusion filters were not working when attempting to View Devices and View Users associated with Option Sets, Vendor Profiles and Security Configurations. | 7124 |
| Reporting: Paging buttons did not scroll to the next page. | 5151 |
| The Clear button on the notifications panel cleared only visible notifications. | 4910 |
Known issues
The following issues are known to exist at the time of release.
Table 2: General known issues
| Known Issue | Issue ID |
|---|---|
| Apps that have been removed from a Windows 10 device continue to show in inventory. This only applies if unmanaged app collection is enabled. Rarely, an EXE/ZIP app uploaded to KACE Cloud that has been added to a device and subsequently removed continue to be reported by Microsoft in the device inventory. It appears to be an intermittent bug with an app cache used by Microsoft. It is also possible this may occur with Windows 11 devices, although it has not been observed yet. | 8148 |
| When a macOS upgrade targets a device with an unsupported OS version (lower than 12.x), the error reported on the device does not clearly communicate the cause of the problem. | 8011 |
| Uploading sideloaded app with Google Developer account fails to upload if Publish Apps to KACE Cloud is cleared. | 7919 |
| App catalog is listing uploaded apps on non-fully managed Android devices. | 6826 |
| Sideloaded apps are not always installing on Android devices. | 6800 |
| On Android, when installing kiosk apps during enrollment, the Installation Window may close prematurely leaving a blank app window. This should resolve automatically within a few minutes, after the apps in question complete installation. | 6667 |
| Android app associated with a policy appears to be installed on a device before it is actually installed, for example when the device is unavailable. | 6182 |
| Reporting: Device threats fields different in CSV than in the report. | 6183 |
| Defender configuration: Randomize scheduled scans setting does not change Defender setting. | 6449 |
| Defender: EDR card have enough space for Organization ID and Last Connected. | 6177 |
| Windows variable replacement does not remove spaces. | 5975 |
| An Android agent update causes the device to exit kiosk mode. | 5850 |
| Some types of option sets are not applied to Android COPE devices. | 5843 |
| The KACE Connect app occasionally fails to deploy with the configured settings. The root issue is that the app settings are not always imported from Google Play appropriately. Deleting the app from the library and re-importing typically fixes the issue. | 5510 |
| iOS restriction sets can occasionally get left behind on a device. This is rarely an issue when applied through policies, but can occur if a restriction set is manually deployed to the device before the policy manager has a chance to push it. | 4949 |
| Installing a VPP (iOS) app to device while assigning the license to the user (instead of the device) fails. | 4756 |
| An Android Web App cannot be deleted from the app library if it was unapproved from the Google Play store. | 4693 |
Product licensing
Subscription and licensing information is managed from the Settings page in KACE® Cloud. It includes information on paid and trial subscriptions, licenses, start and end dates, available licenses, and more. For details, see About subscriptions and licensing.
More resources
Additional information is available from the following:
- Online product documentation: KACE Cloud Help Center
- Product videos: How-to Videos
About us
Quest Software creates technology and solutions that build the foundation for enterprise AI. Focused on data management and governance, cybersecurity and platform modernization, Quest helps organizations address their most pressing challenges and make the promise of AI a reality. Around the globe, more than 45,000 companies including over 90% of the Fortune 500 count on Quest Software. For more information, visit www.quest.com or follow Quest Software on X (formerly Twitter) and LinkedIn.
Technical support resources
Technical support is available to Quest customers with a valid maintenance contract and customers who have trial versions. You can access the Quest Support Portal at https://support.quest.com/kace-cloud/current.
The Support Portal provides self-help tools you can use to solve problems quickly and independently, 24 hours a day, 365 days a year. The Support Portal enables you to:
- Submit and manage a Service Request
- View Knowledge Base articles
- Sign up for product notifications
- Download software and technical documentation
- View how-to-videos
- Engage in community discussions
- Chat with support engineers online
- View services to assist you with your product
© 2023 Quest Software Inc. ALL RIGHTS RESERVED.
This guide contains proprietary information protected by copyright. The software described in this guide is furnished under a software license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any purpose other than the purchaser’s personal use without the written permission of Quest Software Inc.
The information in this document is provided in connection with Quest Software products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Quest Software products. EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, QUEST SOFTWARE ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL QUEST SOFTWARE BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF QUEST SOFTWARE HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Quest Software makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. Quest Software does not make any commitment to update the information contained in this document.
If you have any questions regarding your potential use of this material, contact:
Quest Software Inc.
Attn: LEGAL Dept
4 Polaris Way
Aliso Viejo, CA 92656
Refer to our Web site (https://www.quest.com) for regional and international office information.
Patents
Quest Software is proud of our advanced technology. Patents and pending patents may apply to this product. For the most current information about applicable patents for this product, please visit our website at https://www.quest.com/legal.
Trademarks
Quest, the Quest logo, and Join the Innovation are trademarks and registered trademarks of Quest Software Inc. For a complete list of Quest marks, visit https://www.quest.com/legal/trademark-information.aspx. All other trademarks and registered trademarks are property of their respective owners.
Legend
|
|
Caution: A CAUTION icon indicates potential damage to hardware or loss of data if instructions are not followed. |
|
|
|
KACE Cloud Help Center
Updated - June 2023