Release Notes Silverback 25.0 Update 1
About This Release
Matrix42 Silverback 25.0 Update 1 provides new and improved features that have been implemented. During the development of this version, we have been focusing on valued feedback from our customers and partners to provide an ideal feature selection.
Visit the following playlists on the Matrix42 YouTube channel to get a short overview presentation of the major new features: Link to English Video-Playlist | Link to German Video-Playlist.
Build Information
- Current Status: Technical Preview
- Download: Marketplace
- Initial Build Version: 25.0.1.8
Important Announcements
New from WWDC2025
Apple hast finished their WWDC2025, and as part of this event, MDM vendors have already received early information regarding upcoming changes and enhancements to Apple’s platforms. Below is a summary of the key points that are relevant to the day-to-day use of Silverback and may require your attention:
- The legacy Kerberos Single-Sign On (com.apple.sso) is now deprecated and you should use Extensible Single Sign-On (com.apple.extensiblesso).
- A Profile removal is now disallowed before first unlock and will return NotNow. This means when you execute the Delete Business Data action, the device may answer not now and the profile will only be removable after the device has been first time unlocked.
- Top-level Telephony properties have been removed from the DeviceInformation command, and the ServiceSubscriptions property should now be used to get Telephony properties. This affects getting the SIM Card information from devices in your Device Information and we will provide a Hotfix for 25.0 Update 1, where this changes will be reflected.
Overview
New Features
New Improvements and Changes
New Features
Location Tracking for Android Enterprise
With this new release, we introduce Location Tracking for devices enrolled via Android Enterprise. Administrators now have the ability to monitor real-time and historical location data of managed Android Enterprise devices. This feature enhances device visibility, improves field operations coordination, and supports security use cases across logistics, service, and mobile workforces.
![]() |
Key Capabilities
- Location tracking of Android Enterprise-enrolled devices
- One-time location request to retrieve the current device position
- Time-stamped historical data for movement analysis
- Configurable tracking accuracy:
- Balanced (optimized for battery life)
- High accuracy (using GPS and additional location sources)
- Flexible update intervals:
- Configurable from every 15 minutes up to every 24 hours
- Allows a tailored balance between precision and battery usage
- Data retention policies:
- Location history can be retained for up to 365 days
- Manual deletion is possible via the device overview
- Default retention period is 7 days
Requirements
- Devices must be enrolled via Android Enterprise (Device Owner)
- Devices require an active internet access
- Depending on OS version and policy, user consent for location access may still be surfaced by the system
Privacy & Compliance
This feature has been implemented with a strong focus on enterprise data protection and Android Enterprise policy compliance:
- Tracking is explicitly profile-driven – only active on devices with an assigned location profile
- The current location can be request with a one time-action
- All data is access-controlled
- User transparency is ensured via system notifications and in-app visibility
Companion App Behavior
- The Companion App automatically applies all required location permissions immediately after profile assignment, ensuring smooth activation without user intervention.
- When users disable Location Services and/or the Restriction Allow Configuration of Location is set, Companion will enable and utilize the service automatically.
- Companion also reports the Location Service status to Silverback (Location Service Enabled).
- Users are transparently informed by the system that their organization allows access to their location.
- Additionally, within the Companion App’s “Profiles” section, a clear notice is displayed indicating:
- The assigned tracking profile
- The accuracy and interval settings in effect
![]() |
|
![]() |
Re-designed App Portal for Users
We’re excited to announce a complete redesign of the App Portal for managed Apple devices! The App Portal serves as a user-facing interface where employees can easily access and install enterprise-approved applications. When enabled via configuration, the portal is automatically deployed to managed devices as a web clip (home screen shortcut) – providing a seamless bridge between IT and end users.
What’s New in the Updated App Portal UI
- Modern and clean design optimized for iOS, iPadOS, macOS
- Improved navigation, with a clearer app layout
- Search and filtering options for faster app discovery
User Experience
- When a device is enrolled and App Portal is enabled, a shortcut is automatically added to the home screen.
- Users can launch the portal to browse and install available applications without needing access to the App Store or Apple ID credentials.
- The portal provides dynamic visibility, showing only the apps relevant to the user’s role, device group, or configuration.
- Updated icons, typography, and layout bring a modern, intuitive experience aligned with native design patterns.
Configuration & Requirements
- Available for all iOS, iPadOS, macOS devices
- The App Portal must be enabled in the configuration profile
- Automatically deployed as a web clip via device profile
Strong Certificate Mapping
With the introduction of KB5014754, Microsoft enabled Strong Certificate Mapping for certificate-based authentication — requiring inclusion of a user’s SID (Security Identifier) in the certificate. We now support this mechanism for devices enrolled via LDAP user association. This enhancement ensures compliance with Microsoft’s strong mapping requirements and enables seamless authentication for environments that depend on SID-based identity mapping.
How it works
- During pending enrollment creation, the user’s SID is automatically retrieved via LDAP and stored as part of the enrollment record.
- A background service runs every 4 hours to retroactively collect and store missing SIDs for already enrolled devices.
- When issuing SCEP certificates, the system includes the SID in the Subject Alternative Name (SAN) using the following format:
URL=tag:microsoft.com,2022-09-14:sid:<value>
New Improvements
Please find all new improvements in Silverback 25.0 Update 1 below.
Management Console
- Added additional debug information to external provider validation when Write detailed logs for STS is enabled.
Android Enterprise
- Improvements for enrollment process in Companion.
- Improvements for background services including notifications and logging in Companion.
SQL
- Files from database are now downloaded in chunks to reduce memory consumption.
- Added Queue.CommandResults to Data Retention period
Knowledgebase
The following new Knowledge Base articles have been added:
New Changes
- We removed the tab "Enterprise" and "App Portal" apps within the App Portal based on user feedback, to provide a clearer and more streamlined experience for end users.