You know what the worst nightmare of an admin is – Non-compliant devices! Imagine if the devices are compliant even before they are allowed to enroll. Well, believe me or not, it’s no longer a dream. Now, you can ensure that devices are compliant as far as the required OS version is concerned, even before the enrollment process begins.

In my previous blog post, I talked about the Return to Service feature. Another iOS 17 MDM feature that I am really excited about is this one – Required Minimum Version. With this feature, MDM can now enforce a minimum operating system version when enrolling devices using an automated device enrollment.

But what happens if the device is old and you still want to proceed with the enrollment process? – Sure, no problem, we got you covered!

How does it work?

Let’s dive deep and understand how the feature works with Citrix Endpoint Management.

Open the  CEM Console and navigate to -> DEP Account -> iOS setting page. A new section, Required Minimum Version, is added to this page.

Let’s understand the available options.

  • Allow old devices to enroll

This option is enabled by default and allows devices to enroll even if they cannot upgrade to the required minimum version.

  • Specified OS version

If selected, the admin can specify a required minimum OS version***.

***Please enter the correct version number; otherwise, an unknown error may occur.

  • Available iOS version

Another way to specify the minimum required version is selecting a value from the list. This list is populated using Apple’s API, so rest assured, it’s always the latest.

Note: If the device’s iOS version is lower than the above provided, it will kick off the update process.

If the version expires in the future, a minimum version of the available list is used.

End Users Experience

If the device OS is lower than the configured minimum version, an update page will be displayed, prompting the user to update the device. After the update, the device will restart and re-enter the enrollment process, allowing for the normal user authentication process. The device can be activated and enrolled in CEM and is ready to be used!

Quite quick and useful, isn’t it?

See you soon with more exciting Citrix Endpoint management features!

Happy Enrolling!


Disclaimer: This publication may include references to the planned testing, release and/or availability of Cloud Software Group, Inc. products and services. The information provided in this publication is for informational purposes only, its contents are subject to change without notice, and it should not be relied on in making a purchasing decision. The information is not a commitment, promise or legal obligation to deliver any material, code, or functionality. The development, release, and timing of any features or functionality described for products remains at the sole discretion of Cloud Software Group, Inc.