KACE® Cloud

Release Notes

October 2023

These release notes provide information about the latest KACE Cloud release.

About this release

KACE Cloud allows you to quickly enroll mobile devices, manage their inventory, and to apply required configurations and policies. You can interact with managed devices using a standard set of commands, such as resetting a password or locking a device, as needed. This cloud-based product helps you implement your entire device management solution quickly, and ensuring that managed devices follow your organization guidelines and standards, while protecting your data integrity.

This release contains one new feature and a number of resolved issues. See New features.

Supported platforms

MDM managed devices:

The following operating systems are supported for MDM managed devices:

Android

  • Android 13.0+

Apple

  • iOS, iPadOS, tvOS15+
  • macOS 13+

Windows:

  • Windows 10 Professional, Enterprise, Education, 1709 or later
  • Windows 11
Registered Devices:

KACE Cloud uses an agent to deliver some management functionality to Windows and macOS devices. Windows and macOS devices can be partially managed without an MDM connection through device registration. The following operating systems are supported:

Windows:

  • Windows Server 2016 (Standard and Datacenter Editions with .NET Framework 4.7 or later)
  • Windows Server 2019, 2022, 2025 (Standard and Datacenter Editions)
  • Windows 10 Professional, Enterprise, Education, 1709 or later
  • Windows 11

NOTE:32-bit versions of Windows are unsupported by KACE Cloud Agent.

Apple:

  • macOS 13+
Browsers:

The following browsers are supported:

  • Google Chrome 109+
  • Microsoft Edge 118+ (Not supported on mobile devices.)
  • Mozilla Firefox 119+
  • Apple Safari 12+ (Mac only)
  • Opera 15.6+

System-provided mobile administrative applications are not currently available.

 

New features

New features in KACE Cloud:

  • macOS software distribution. Starting in this release, you can manage macOS apps. Distributing macOS apps requires a set of parameters that need to be provided while adding the app to the KACE Cloud Apps Library. Start by installing the app on a test machine and obtaining the required values before adding it to the library. The upload process is fairly straight-forward. Simply navigate to the Apps Library and choose Add New > Upload App (exe, zip, dmg, pkg). Next, specify the required app options. You can edit these options at a later time, if needed.

  • Custom-hosted apps. When adding an EXE, ZIP, DMG, or PKG app to the Apps Library, you have an option to provide a URL path to the file. The file's checksum is also required. Most custom-hosted apps provide a checksum, however for those that do not, you can easily generate it. It is recommended to install the app on a test machine and collect the required parameters, and add it to the Apps Library.

  • Windows Custom Profile enhancements. In Windows Custom Profiles, a documentation element is added to help you better understand the action associated with the selected OMA-URI path. The supported Windows edition and version is also displayed. In some cases a specific Windows patch level may be required for a selected element. This is also indicated in the documentation section, when applicable.

  • WPA3 protocol support for Wi-Fi configurations. WPA3 (Wi-Fi Protected Access 3) improves the security of wi-fi connections. Support for WPA3 Enterprise EAP (Extensible Authentication Protocols) is included, with an optional 192-bit security option that better protects enterprise data.

  • Apple VPP notifications. If an VPP uploaded token is already in use by another MDM provider, a notification appears on the Settings tab, on the Apple Volume Purchase Program page. This may cause issues with how total app licenses are reported in KACE Cloud. It is recommended that each MDM provider uses their own VPP token. Also, when assigning a VPP app license to a user, the administrators must add the user to the VPP, and then send them an invitation. An email is sent to the user, and notifications appear on the associated iOS devices. The user must then accept the EULA to get the app. Once the user is successfully added to the VPP, the VPP Status field changes to Associated. The list of licensed apps in the user view shows the apps assigned to the user account. The same list appears when the user logs in to the app store.

For complete information about these features, visit the KACE Cloud Help Center.

See also:

Deprecated features

The following deprecations affect KACE Cloud:

  • Google Android deprecations: Several libraries, classes, methods and constants in the Android agent code base that have been deprecated. At this moment, these deprecations have no effect on Android enrollments, but this may change with the new version of Android coming out later this year. The current API that the KACE Cloud Android agent uses to manage Wi-Fi Configurations has been deprecated since Android 10 and there is no replacement. This prevents KACE Cloud from supporting WPA3 on Android devices enrolled using the Enterprise Mobility Management (EMM) path.
  • macOS deprecations: System Preferences panes are deprecated in macOS 12.0+. Any devices with an existing restriction set are not affected until the restriction set is updated. When that happens, the administrator must apply the relevant System Settings available in version 13.0+. Failing to do so disables any settings previously configured for the System Preference panes. For example, if the System Preferences Apple ID Pane is restricted, and the administrator updates the associated restriction set without selecting Apple ID setting in the Disabled System Settings for versions 13.0+, this prevents the Apple ID Pane from being restricted.

Resolved issues

The following issues are addressed in this release.

Table 1: General resolved issues

Resolved Issue Issue ID
Android EMM deployments did not force passcodes on Work Profile devices if the devices previously did not have passcodes. 8591
Android Fully Managed enrollment failed if the device's Play Store services were out of date. 8577
Help documentation did not list all available custom variables. 8556
Patching Reporting view error observed if more than 300 patches were attempted. 8535
Windows device history had extra inventory entries. 8516
Windows manual enrollment types always showed MDM Only on first load. 8510
Reporting: Some field data was not exported to CSV. 8497
If no unmanaged apps are returned, inventory was incorrect for some agent apps. 8488
Device history record was not logged when macOS managed app had been rejected. 8485
Windows Inventory: Windows sent multiple IP addresses separated by semi-colon instead of comma. 8444
Duplicate Exchange accounts were not handled properly. 8430
Apple VPP iOS Install Application command syntax was incorrect. 8415
Newer Apple OS updates were not being stored during inventory. 8401
macOS Restriction Set settings now indicate that the System Preference panes are deprecated in macOS 12.0+. 8400
Patching history record was displayed multiple times. 8392
AMAPI Fully Managed enrollment instructions are updated. 8391
Null value in tenant TimezoneIdentifier field caused an exception in the Settings view. 8386
AMAPI UsbFileTransferDisabled field is deprecated. 8339
If personal enrollment of Windows devices was disabled, signing in to Microsoft Edge with an Azure account allowed the user to enroll the device as a personal device. 8334
Apple VPP B2B custom apps were marked as needing an update. 8330
It was not possible to save a Windows Custom Profile Delete command. 8223
It was not possible to change the name of a Web app. 8201
Some dangerous Android permissions were missing from the app permission section. 8185
Web apps can now be created with the same host but different sub-folders. 8174
When uploading a new version of a sideloaded app to the Apps Library, the app updated an old version that was no longer in the Library. 8156
Windows device IP address was not displayed properly in Device Details. 7935
Windows inventory process has changed so that the IsEnterprise flag is only set to True if the app was uploaded into KACE Cloud. 5871
Android 12 personal devices showed as tablet devices due to a missing IMEI or MEID. 5806
Wi-fi SSID names were wrong for Windows 10 devices. 5051
Installing a VPP (iOS) app to device while assigning the license to the user (instead of the device) failed. 4756

Known issues

The following issues are known to exist at the time of release.

NOTE: In some cases, KACE Connect can stop reporting the device location. For more information, see KB4259107.

Table 2: General known issues

Known Issue Issue ID
KB5029244 prevents Inventory to return any apps on Windows 10 21H2/22H2. 8484
All labels are deleted under certain circumstances. 8461
KACE Cloud cannot load Windows Custom Profile setting documentation for ./Vendor URIs. 8191
Apps that have been removed from a Windows 10 device continue to show in inventory. This only applies if unmanaged app collection is enabled. Rarely, an EXE/ZIP app uploaded to KACE Cloud that has been added to a device and subsequently removed continue to be reported by Microsoft in the device inventory. It appears to be an intermittent bug with an app cache used by Microsoft. It is also possible this may occur with Windows 11 devices, although it has not been observed yet. 8148
When a macOS upgrade targets a device with an unsupported OS version (lower than 12.x), the error reported on the device does not clearly communicate the cause of the problem. 8011
Uploading sideloaded app with Google Developer account fails to upload if Publish Apps to KACE Cloud is cleared. 7919
App catalog is listing uploaded apps on non-fully managed Android devices. 6826
Sideloaded apps are not always installing on Android devices. 6800
On Android, when installing kiosk apps during enrollment, the Installation Window may close prematurely leaving a blank app window. This should resolve automatically within a few minutes, after the apps in question complete installation. 6667
Android app associated with a policy appears to be installed on a device before it is actually installed, for example when the device is unavailable. 6182
Reporting: Device threats fields different in CSV than in the report. 6183
Defender configuration: Randomize scheduled scans setting does not change Defender setting. 6449
Defender: EDR card have enough space for Organization ID and Last Connected. 6177
Windows variable replacement does not remove spaces. 5975
An Android agent update causes the device to exit kiosk mode. 5850
Some types of option sets are not applied to Android COPE devices. 5843
The KACE Connect app occasionally fails to deploy with the configured settings. The root issue is that the app settings are not always imported from Google Play appropriately. Deleting the app from the library and re-importing typically fixes the issue. 5510
iOS restriction sets can occasionally get left behind on a device. This is rarely an issue when applied through policies, but can occur if a restriction set is manually deployed to the device before the policy manager has a chance to push it. 4949
An Android Web App cannot be deleted from the app library if it was unapproved from the Google Play store. 4693

Product licensing

Subscription and licensing information is managed from the Settings page in KACE® Cloud. It includes information on paid and trial subscriptions, licenses, start and end dates, available licenses, and more. For details, see About subscriptions and licensing.

More resources

Additional information is available from the following:

About us

Quest Software creates technology and solutions that build the foundation for enterprise AI. Focused on data management and governance, cybersecurity and platform modernization, Quest helps organizations address their most pressing challenges and make the promise of AI a reality. Around the globe, more than 45,000 companies including over 90% of the Fortune 500 count on Quest Software. For more information, visit www.quest.com or follow Quest Software on X (formerly Twitter) and LinkedIn.

Technical support resources

Technical support is available to Quest customers with a valid maintenance contract and customers who have trial versions. You can access the Quest Support Portal at https://support.quest.com/kace-cloud/current.

The Support Portal provides self-help tools you can use to solve problems quickly and independently, 24 hours a day, 365 days a year. The Support Portal enables you to:

  • Submit and manage a Service Request
  • View Knowledge Base articles
  • Sign up for product notifications
  • Download software and technical documentation
  • View how-to-videos
  • Engage in community discussions
  • Chat with support engineers online
  • View services to assist you with your product


© 2023 Quest Software Inc. ALL RIGHTS RESERVED.

This guide contains proprietary information protected by copyright. The software described in this guide is furnished under a software license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any purpose other than the purchaser’s personal use without the written permission of Quest Software Inc.

The information in this document is provided in connection with Quest Software products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Quest Software products. EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, QUEST SOFTWARE ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL QUEST SOFTWARE BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF QUEST SOFTWARE HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Quest Software makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. Quest Software does not make any commitment to update the information contained in this document.

If you have any questions regarding your potential use of this material, contact:

Quest Software Inc.

Attn: LEGAL Dept

4 Polaris Way

Aliso Viejo, CA 92656

Refer to our Web site (https://www.quest.com) for regional and international office information.

Patents

Quest Software is proud of our advanced technology. Patents and pending patents may apply to this product. For the most current information about applicable patents for this product, please visit our website at https://www.quest.com/legal.

Trademarks

Quest, the Quest logo, and Join the Innovation are trademarks and registered trademarks of Quest Software Inc. For a complete list of Quest marks, visit https://www.quest.com/legal/trademark-information.aspx. All other trademarks and registered trademarks are property of their respective owners.

Legend

Caution: A CAUTION icon indicates potential damage to hardware or loss of data if instructions are not followed.

IMPORTANT, NOTE, TIP, MOBILE, or VIDEO: An information icon indicates supporting information.

 

KACE Cloud Help Center
Updated - October 2023