KACE® Cloud Mobile Device Manager
Release Notes
December 2021
These release notes provide information about the latest KACE Cloud release.
About this release
KACE Cloud Mobile Device Manager allows you to quickly enroll mobile devices, manage their inventory, and to apply required configurations and policies. You can interact with managed devices using a standard set of commands, such as resetting a password or locking a device, as needed. This cloud-based product helps you implement your entire device management solution quickly, and ensuring that managed devices follow your organization guidelines and standards, while protecting your data integrity.
This release contains several new features and a number of resolved issues. See New features.
Supported platforms
MDM managed devices:
The following operating systems are supported for MDM managed devices:
Android
- Android 13.0+
Apple
- iOS, iPadOS, tvOS15+
- macOS 13+
Windows:
- Windows 10 Professional, Enterprise, Education, 1709 or later
- Windows 11
Registered Devices:
KACE Cloud uses an agent to deliver some management functionality to Windows and macOS devices. Windows and macOS devices can be partially managed without an MDM connection through device registration. The following operating systems are supported:
Windows:
- Windows Server 2016 (Standard and Datacenter Editions with .NET Framework 4.7 or later)
- Windows Server 2019, 2022, 2025 (Standard and Datacenter Editions)
- Windows 10 Professional, Enterprise, Education, 1709 or later
- Windows 11
|
NOTE:32-bit versions of Windows are unsupported by KACE Cloud Agent. |
Apple:
- macOS 13+
Browsers:
The following browsers are supported:
- Google Chrome 109+
- Microsoft Edge 118+ (Not supported on mobile devices.)
- Mozilla Firefox 119+
- Apple Safari 12+ (Mac only)
- Opera 15.6+
System-provided mobile administrative applications are not currently available.
New features
New features in KACE Cloud MDM:
- Scheduled policies: Starting in this release, you can add schedules to a policy and activate it at specified times. This is useful for the policies that you want to enable periodically. By default, all policies are enabled at all times. Each policy must have at least one active period per week.
Some actions (primarily Android app installations) are completed outside of the control of KACE Cloud MDM. These are only initiated during the available schedule window, however if the managed device is unavailable when the associated policy initiates the action, the action is completed outside the associated schedule. This type of action is different than those associated with other entities, such as iOS or Windows apps, Wi-Fi, or VPN configurations.
Communication with associated devices only occurs during the policy's active periods in the time zone reported by each device. You can override the time zone for selected devices, as required.
- Silent authentication for Android devices: KACE Cloud MDM now allows you to enroll Samsung Knox and Android Zero Touch devices without creating login accounts for your end users. The silent authentication uses a certificate that you generate in KACE Cloud MDM to sign the initial enrollment request. KACE Cloud MDM verifies the following information in the signature before proceeding with the enrollment:
- A valid certificate from KACE Cloud MDM is used to sign the request.
- The certificate used to sign the request has not expired.
- The certificate used to sign the request matches the one stored in the customer's database as their Android Identity certificate.
- Automating user provisioning: You can now automate the exchange user accounts between different identity domains using the System for Cross-domain Identity Management (SCIM) protocol. You can use this feature to easily pull their user information from any identity provider that supports the SCIM protocol into KACE Cloud MDM. For example, you can easily sync your users from Microsoft Azure AD or Okta. This process quickly pre-populates KACE Cloud MDM with the information from your user database, before those users have a chance to log in to KACE Cloud MDM, in order to configure policies associated with their devices, as needed.
The User Provisioning page enables system administrators to create one or more SCIM configurations and define the required properties used by the associated external provider such as MS Azure AD. The system administrator can also define which user attribute data to import from the SCIM provider by creating mappings between SCIM user schema attributes and KACE Cloud MDM user attributes. Any information synced this way from an identity provider appears as read-only in KACE Cloud MDM, and cannot be modified.
For complete information about these features, visit the KACE Cloud Mobile Device Manager Help Center.
See also:
Resolved issues
The following issues are addressed in this release.
Table 1: General resolved issues
| Resolved Issue | Issue ID |
|---|---|
| The MSI installer for LDAP Sync did not provide a way to override the installation with a user-specified password. | 5587 |
| An error occur if an Android Zero-Touch profile was saved without an Android identity Certificate. | 5579 |
| Users sometimes experienced issues enrolling Android 12 devices due to new serial number restrictions. | 5576 |
| Commands sent to unresponsive iOS devices were not getting timed out properly. | 5574 |
| An error was occurring when an iOS device certificate renewal occurred within 60 days of expiration. | 5571 |
| An error would occur when editing a Windows custom profile if it had been linked to multiple devices. | 5556 |
| Importing a previously-deleted Windows custom profile that had been linked to a device failed. | 5520 |
| When a user adds a new web app for a specific OS, then switches the OS in the form, the form was not updating to reflect the user choice. | 5441 |
| An app could not be deployed to an Android device if no user was assigned to the device. | 5014 |
| Expired certificates could be added to a device. | 4962 |
Known issues
The following issues are known to exist at the time of release.
Table 2: General known issues
| Known Issue | Issue ID |
|---|---|
| Windows devices in Eastern time zone are showing as Easter Island time zone (minor issue – processing is handled correctly). | 5552 |
| If a device has an app in one applied policy without an associated app configuration and the same app in another applied policy with an associated app configuration, the admin portal may show the wrong compliance state for the app on the device. | 5530 |
| Smart label is not automatically including new macOS 12 devices. | 5514 |
| The KACE Connect app occasionally fails to deploy with the configured settings. The root issue is that the app settings are not always imported from Google Play appropriately. Deleting the app from the library and re-importing typically fixes the issue. | 5510 |
| iOS restriction sets can occasionally get left behind on a device. This is rarely an issue when applied through policies, but can occur if a restriction set is manually deployed to the device before the policy manager has a chance to push it. | 4949 |
| Installing a VPP (iOS) app to device while assigning the license to the user (instead of the device) fails. | 4756 |
| Uploading an Android system app to the app library fails. | 4694 |
| An Android Web App cannot be deleted from the app library if it was unapproved from the Google Play store. | 4693 |
| Occasionally the policy details for a device may show success even if the entity in question did not successfully install. | 3286 |
Product licensing
Subscription and licensing information is managed from the Settings page in KACE® Cloud MDM. It includes information on paid and trial subscriptions, licenses, start and end dates, available licenses, and more. For details, see About subscriptions and licensing.
More resources
Additional information is available from the following:
- Online product documentation: KACE Cloud Mobile Device Manager Help Center
- Product videos: How-to Videos
About us
Quest Software creates technology and solutions that build the foundation for enterprise AI. Focused on data management and governance, cybersecurity and platform modernization, Quest helps organizations address their most pressing challenges and make the promise of AI a reality. Around the globe, more than 45,000 companies including over 90% of the Fortune 500 count on Quest Software. For more information, visit www.quest.com or follow Quest Software on X (formerly Twitter) and LinkedIn.
Technical support resources
Technical support is available to Quest customers with a valid maintenance contract and customers who have trial versions. You can access the Quest Support Portal at https://support.quest.com/kace-cloud/current.
The Support Portal provides self-help tools you can use to solve problems quickly and independently, 24 hours a day, 365 days a year. The Support Portal enables you to:
- Submit and manage a Service Request
- View Knowledge Base articles
- Sign up for product notifications
- Download software and technical documentation
- View how-to-videos
- Engage in community discussions
- Chat with support engineers online
- View services to assist you with your product
© 2021 Quest Software Inc. ALL RIGHTS RESERVED.
This guide contains proprietary information protected by copyright. The software described in this guide is furnished under a software license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any purpose other than the purchaser’s personal use without the written permission of Quest Software Inc.
The information in this document is provided in connection with Quest Software products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Quest Software products. EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, QUEST SOFTWARE ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL QUEST SOFTWARE BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF QUEST SOFTWARE HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Quest Software makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. Quest Software does not make any commitment to update the information contained in this document.
If you have any questions regarding your potential use of this material, contact:
Quest Software Inc.
Attn: LEGAL Dept
4 Polaris Way
Aliso Viejo, CA 92656
Refer to our Web site (https://www.quest.com) for regional and international office information.
Patents
Quest Software is proud of our advanced technology. Patents and pending patents may apply to this product. For the most current information about applicable patents for this product, please visit our website at https://www.quest.com/legal.
Trademarks
Quest, the Quest logo, and Join the Innovation are trademarks and registered trademarks of Quest Software Inc. For a complete list of Quest marks, visit https://www.quest.com/legal/trademark-information.aspx. All other trademarks and registered trademarks are property of their respective owners.
Legend
|
|
Caution: A CAUTION icon indicates potential damage to hardware or loss of data if instructions are not followed. |
|
|
|
KACE Cloud Help Center
Updated - December 2021