What's new for enterprise in iPadOS 18

Learn about the enterprise content that Apple has released for iPadOS 18.

iPadOS 18 updates improve the stability, performance, or compatibility of your device and are recommended for all users. Device administrators can manage software updates using an MDM solution.

For information about general improvements, learn about iPadOS 18 updates.

For details about the security content of these updates, see Apple security releases.

iPadOS 18.2

• MDM can manage Apple Intelligence Integrations including ChatGPT.

• MDM can restrict Apple Intelligence image generation in Image Playgrounds and other apps.

• Multi-factor authentication in Safari reliably accepts the PIN for hardware security keys.

• A default browser can be set, and users can be prevented from modifying the default browser, using MDM.

• New skip keys have been added to allow automated enrollments in Apple Configurator to complete.

• Service discovery as part of account-driven enrollment can request the well-known resource from an alternative location specified by the MDM solution linked to Apple School Manager or Apple Business Manager.

iPadOS 18.1

• MDM can disable RCS messages.

• MDM can manage Writing Tools and Mail summarization.

• Messages.app restriction can no longer be bypassed using ShareSheet.

• Users can no longer deactivate per-app VPN.

• Seventh-generation iPad can now successfully scan QR codes with Camera app.

• MDM can disable the ability to record phone calls.

• MDM can disable the ability to hide apps.

• MDM can block apps from being locked by users, which also blocks the ability to hide the app.

iPadOS 18.0.1

Improved reliability for single sign-on authentication in Safari.

iPadOS 18

iPadOS includes new features, bug fixes, and improvements for enterprise and education deployments.

Education

• The Calculator app is now available on iPad.

• Restrictions for Math Notes, Math Notes keyboard, scientific mode, and unit conversions are available in MDM and Assessment mode.

Device Management

• Software updates can now be managed entirely with declarative device management, replacing the MDM profiles for software update restrictions, settings, and software update commands and queries.

• MDM can manage which Safari extensions are allowed, always on or always off, and what websites they can access.

• On supervised devices, organizations can disable a user’s ability to hide and lock apps.

• The allowVPNCreation restriction now prevents VPN settings from being modified by unmanaged apps.

• Profile-based User Enrollment is no longer supported. For User Enrollment, sign in to a Managed Apple Account in Settings.

• A new MDM restriction can be set to prevent eSIM from being removed when a device is erased locally. When using the MDM erase command, eSIM can still be cleared, regardless of whether the restriction is in place.

• The MDM restrictions and commands for managing alternative marketplaces on iOS are now available for iPadOS.

Bug fixes and other improvements

• Proprietary in-house apps installed without the use of MDM will now require a device restart to complete trust of the distribution identity. Identities trusted prior to upgrading will be preserved.

• The Security Framework can now import PKCS12 files created with AES-256-CBC encryption.

• Users with complex passwords no longer need to lock and unlock a device with a home button to see the keyboard.

• Devices with host pairing restricted can connect to Xcode on Mac computers with the correct supervision identity.

• Shared iPad users can authenticate while network extensions are in use.