Fleet 4.90.0 has officially rolled out, bringing a wave of substantial enhancements for IT administrators and security engineers. Whether you manage a fleet of Apple, Windows, or Linux devices, this update bridges gaps in device management and bolsters vulnerability tracking across the board.
Here is a breakdown of the most critical updates in this release.
Enhanced Cross-Platform Device Management
Managing a diverse ecosystem of devices just got easier with several cross-platform improvements:
- Custom Host Vitals: You can now define custom fields, such as asset tags or warranty expiration dates, across all platforms (macOS, Windows, Linux, iOS/iPadOS, and Android). These vitals can be injected as variables into scripts and configuration profiles to drive automation.
- In-Place Configuration Editing: IT Admins no longer need to delete and re-upload configuration profiles. You can now edit labels and contents directly, making staged rollouts much smoother.
- Multiple Custom Packages: You can upload up to 10 custom packages for the same software title. This is perfect for deploying different architectures (like Arm vs. Intel) or managing variant rollouts without maintaining separate fleets.
- Direct Splunk Integration: Fleet now supports sending reports and osquery logs directly to Splunk via HEC, eliminating the need for a Firehose middleman.
Apple Device Management Gets an Upgrade
Apple administrators have a lot to look forward to in this release, particularly around automation and Day-1 support:
- Full DDM Support: Fleet now supports uploading any Apple declarative device management (DDM) configuration or asset for both the device and user channels. When Apple ships new features, you can deploy them immediately.
- macOS Local Account Provisioning: During automated device enrollment (ADE), Fleet can now create local macOS accounts and sync passwords with any identity provider that supports OAuth ROPG (such as Okta).
- Standardized Host Naming: Apply a consistent host name template across macOS, iOS, and iPadOS devices (e.g., using the device's serial number) without relying on custom scripts.
Advanced Security for Windows, Android, and Linux
Security and compliance remain at the forefront of this release, with targeted improvements across various environments:
- Custom BitLocker Profiles (Windows): Move beyond built-in controls. You can now deeply customize Windows disk encryption using custom BitLocker profiles, matching the flexibility previously only available for macOS FileVault.
- Android Vulnerability Visibility: The Software OS page now tracks Android OS versions, security patch levels, and known vulnerabilities (CVEs). This provides a unified view of exposure, which is especially critical for BYOD environments.
- Linux Recovery Keys: Added support for silently escrowing disk encryption recovery keys from Linux hosts using TPM-backed full-disk encryption, such as Ubuntu 26.
Fleet 4.90.0 continues to solidify its position as a powerful device management platform. By expanding its cross-platform capabilities, organizations can maintain stricter security postures while simplifying day-to-day operations for IT teams.