iOS 16 support  iOS 16 devices can enrolled, and new iPhone 14, iPhone 14 Pro, and iPhone 14 Pro Max models can be reported in Systems Manager. Reminder that Systems Manager supports Automated Device Enrollment (ADE) for company owned devices, standard Device Enrollment via enroll.meraki.com for end-user owned devices, and/or User Enrollment for end-user owned devices. Or, leverage the Meraki MR and enable a special hardware integration to enable a splash page for end-user enrollments via Sentry Splash.  New iPhone 14 models are the first iPhones to support only eSIM for cellular activations, and Systems manager has added the following features to help administrators with eSIM for managed devices:   New "Cellular Access Point Name (APN)" activation profile for iOS (find in SM > Settings page) View eSIM (Phone#, IMEI, label, EID, slot#) for managed devices information directly in SM SM has new Single Sign On settings available (find in SM > Settings page) New Restrictions available:  allowUniversalControl, allowMailPrivacyProtection, allowRapidSecurityResponseInstallation, allowRapidSecurityResponseRemoval, more! Remember that iPadOS 16 and macOS 13 Ventura are right around the corner, and many more enhancements coming soon! Also as a reminder administrators can delay OS updates on Supervised Apple devices for more control of OS updates: https://documentation.meraki.com/SM/Apps_and_Software/Deploying_OS_Updates_with_Systems_Manager#Delaying_OS_Updates    Android 13 support  Android 13 devices can enrolled and Android 13 versions, PlayStore versions, and PlayStore Services versions, will be reported into Systems Manager device details.  New Google Play EMM App deployment solutions built from the ground up to support the future of app deployments with new Google Play integrations. This will allow enhanced app deployments with Public Play Store and Private Play Store via Systems Manager.  A new interface into the SM > Apps page will be rolling out in the next few weeks to further enhance this.  The "approve app" permission on SM > Apps page is no longer needed, and has been removed from the page. This gives administrator one less step to deploy apps, so should be a welcomed change.    ... View more

The Systems Manager app for Android has been updated with enhancements for Kiosk mode. This is a great way to lock down managed Android devices so they can only access specific applications. These Kiosk mode enhancements include:    Configure device for Kiosk into a Single-App Kiosk or into Multi-App Kiosk When using Multi-App Kiosk, remotely control device's branding logo/text/color Set brightness (automatic or 1-100%) Set screen orientation (automatic, landscape locked, or portrait locked) Various bug fixes and stability improvements          Bonus tip: Kiosk mode feature goes great with Android Zero Touch Enrollment (ZTE). ZTE allows Android devices to automatically enroll into your organization in Device Owner mode (required for Kiosk) upon initial setup, and optionally go directly into this Kiosk mode state. Perfect peace of mind for company owned point of sale devices and restaurant menu/ordering tablets!  ... View more

The SM > DEP page is now the SM > ADE page. All functionality remains the same and a few new features were added, specifically for macOS deployments. This change to "Automated Device Enrollment (ADE)" is so SM can stay current with the latest branding alignment with Apple. https://support.apple.com/en-us/HT204142    Additional details here:  https://community.meraki.com/t5/Feature-Announcements/New-features-for-macOS-device-deployments-account-configurations/ba-p/152968    Additional improvements/features for Apple Automated Device Enrollment are also currently underway, so feel free to give your feedback so our product and development teams can see! Happy SMing!  ... View more

Meraki Systems Manager has added many new exciting features for macOS deployments including:    In Dashboard, "Device Enrollment Program" or "DEP" have been rebranded to "Automated Device Enrollment" or "ADE". This is so SM can stay current with the latest branding alignment with Apple. https://support.apple.com/en-us/HT204142  New ADE assign settings interface with additional features   Configure local accounts on macOS! Administrator and Standard user accounts Dynamically pre-fill macOS accounts from the SM 'Owner' set in Dashboard   Provisioning package support during macOS initial setup  Add a signed .pkg to run on all devices during initial setup!    Apple Silicon improvements  Bootstrap token automatically escrowed for new enrollments Added security for MDM commands (e.g. OSUpdates and Kernel extensions) on Apple Silicon Macs.     SM Agent 3.5.0+ is now natively built for Apple Silicon. No longer need Rosetta 2 to run SM agent!   Updated documentation with more information: https://documentation.meraki.com/SM/Device_Enrollment/Apple_Automated_Device_Enrollment_(ADE)    Thank you to all the users who have requested these features, we hear you! We're continuing to shape up new improvements for device deployments, so please continue to send in feature requests as our product and engineering teams review every request.  ... View more

In the Systems Manager > Settings page, administrators can now find a new BitLocker profile payload. Simply search for "BitLocker" or look for the "Windows" profiles to find it. Documentation can be found here.    This new BitLocker profile allows setting BitLocker encryption enforcement rules with various settings, such as: Encryption method OS drive settings PIN length Recovery options Fixed data drive settings Removable data drive settings Administrators can also check for encryption as a Systems Manager security policy, to obtain a list of compliant and non compliant encrypted devices on the Systems Manager > Devices list in bulk. This will show the encryption compliance status, reason, and if BitLocker is currently enabled, disabled, or unknown (not reported yet). This security policy will also check all other OSes for encryption, such as macOS FileVault encryption, iOS encryption, and Android Work Profile encryption. So the security policy is a great way to read current encryption status in bulk for every device.  ... View more

Systems Manager has added a few new updates related to end user portals and authentication flows.    Enrollment portal is changing to enroll.meraki.com The previous enrollment portal, m.meraki.com, will be removed and redirected to enroll.meraki.com later this year.  Self Service Portal is portal.meraki.com  This is where (if enabled) end users can view all of their managed devices, Trusted Access devices, and create new Trusted Access devices. More information on Trusted Access, the unique SM+MR integration for unmanaged devices, view the documentation here.  Both of these portals now support custom branding!  Add your organization's custom logo and coloring, so end users see your organization's branding on both enroll.meraki.com and portal.meraki.com to give a more personalized portal experience. Documentation found here.     Both of these portals now support SAML authentication!  This allows Systems Manager integration via SAML with identity providers such as OneLogin, Azure, and more. Documentation found here.  Optionally add Duo 2FA prompts to the identity provider for additional security! Documentation found here.  Example end user flow via enroll.meraki.com with SAML OneLogin + Duo 2FA: ... View more

A new profile for Android was just released allowing more granular control over how the Google Play Store sends app updates to Systems Manager managed devices.     This allows administrators to configure Android managed apps to be in 3 different auto-update mode policy states:    Default - In this mode, the device needs to meet certain criteria to automatically update the app, and it will happen at some point (uncontrolled) within a 24 hours period of the new app update becoming available on the Google Play Store. The criteria for the device to update: device has an active WiFi connection to the Play Store, device is charging, device is idle, and the app to be updated is not running in the foreground.  Postpone - When using the Postpone mode, the app will not be automatically updated during 90 days after it first became out of date. After this 90-day period, the latest available version of the app is automatically installed with the default update behavior. After the app is updated to the latest available version, a new 90-day postponement period will begin the next time the developer publishes a new version of the app. High Priority - When using the High priority mode, the app is updated, as soon as possible, after the developer publishes the new version and it has been reviewed by Google Play. If the device is offline then, the app will be immediately updated the next time the device is connected to the internet.   Full documentation here     ... View more

Our Systems Manager development team has been hard at work and we wanted to take a moment to share a few of the recent updates.    Support for the latest operating systems Just a general reminder that Systems Manager supports the latest operating systems released this Autumn: Windows 11, Android 12, and iOS/iPadOS 15, macOS 12 Monterey https://documentation.meraki.com/SM/Other_Topics/Supported_Operating_Systems_with_Meraki_SM And along with this, many new profile payloads were added for each platform which can be seen on the Systems Manager > Settings page. And there's still a few more in the works (looking at you, BitLocker!) which we will update everyone about soon.    Shared Device Mode is now expanding features and bringing Apple Business Manager support Apple Business Manager devices now support Shared Devices with some new features too! These updates apply to existing Apple School Manager Shared Device deployments as well.  Checkout the new video to see how you can leverage temporary guest sessions and Managed Apple ID sessions with Shared iPad:     Windows Trusted Access Beta A Windows Trusted Access .msi now has a beta release with UI. Be sure to see Kevin’s post on how to sign up. The product team is collecting feedback from Trusted Access feature for Windows, and for Trusted Access in general. So please give it a try and share feedback! If you're not familiar: Trusted Access allows simple and secure certificate based access to Meraki MR SSIDs for unmanaged devices! Here is the documentation with more information.    New Android SM app beta process We are constantly rolling out various updates to our Android SM app, and we are now publishing new updates to the beta Google Play channel before releasing to the main public store. This is a great opportunity to test a new SM app update before it is available to all devices. To subscribe a device to beta app updates simply find the Meraki Systems Manager app in the Google Play Store and press “Join" in the "Join the beta” section.    SM API updates SM has added a new API endpoint to get security policy compliance per device:  GET /networks/{networkId}/sm/security/policies Also now with the existing GET /networks/{networkId}/sm/devices endpoint, you can add /sm/devices/?fields=url parameter and have the device link in Dashboard returned as apart of the response. This can be extremely useful for custom monitoring and pulling additional device information from Dashboard.    There’s a few additional projects our developers are working on and we cannot wait to share them when they are ready. Happy SMing and see you all in the new year! ... View more