Product Updates

A new key size, 4096 bits, is available in the Simple Certificate Enrollment Protocol (SCEP) Profile. This is the largest key size available, providing the most robust security measures.

A new version of the Kandji Agent has been released. In addition to minor bug fixes and feature enhancements, the Agent will now perform a lightweight check-in prior to its full check-in immediately following a wake from...

While previously only available for iOS, Managed Applications are now coming to macOS with Big Sur. Kandji now supports Managed Apps for macOS from Apps and Books with Apple Business Manager (formerly VPP). This new...

We’ve made some design updates to improve your experience when using and configuring the Software Update profile. There is a two-column layout and a simple slider to determine the amount of time to defer software...

In Apps and Books within the Settings section in Kandji, the option to automatically update apps is now turned on by default. This option enables Kandji to audit your App Store apps daily and update to the latest version...

We’ve written a lot about the changes to Bootstrap Token and SecureToken for devices running macOS Big Sur with Apple Silicon. MDM will require Bootstrap Token in order to approve and load KEXTs and install Software...

Automated Device Enrollment (formerly DEP) used to be the only way to supervise devices. With macOS Big Sur, it's now possible through manual Device Enrollment with UAMDM status. In Kandji, this supervision will occur...

Additional customization is available within the Kerberos Extension UI. This includes the ability to set a custom username label that is displayed on the “Username” field, such as “Company ID.” You can also set a custom...

Auto Advance for Mac allows IT admins to set up Mac devices very quickly by leveraging Automated Device Enrollment (formerly DEP) and plugging a Mac into power and ethernet. Once the Mac starts, it will automatically...

To support changes to Kernel Extensions (KEXTs) on macOS Big Sur, we support a new option on the Kernel Extension payload which allows standard users to approve a restart that rebuilds the Kernel Cache for Kernel...

Admins can now be proactively alerted when an MDM profile is removed from a device locally. Notifications will be displayed in the Alerts section and can also be configured to send as a Slack notification.