Does Apple Passkey Attestation in Ivanti create or distribute passkeys to devices?

No. Apple Passkey Attestation validates that passkeys on devices are company-approved using identity certificates, but it does not create or distribute passkeys. Organizations must use separate mechanisms to provision passkeys while using this feature for attestation and compliance verification.

Ivanti's Apple Device Management: watchOS, Passkeys & ABM

Name: Ivanti's Apple Device Management: watchOS, Passkeys & ABM
Uploaded: 2026-05-08T19:18:16-04:00
Duration: 3 min 32 s
Description: ➡️ Boost both IT efficiency and end-user productivity by delivering a better mobile device management experience. https://www.ivanti.com ➡️ Watch full clip: https://youtu.be/Zfsh3QSW6gc?si=...

Ivanti

05/08/2026

0 (0%)

Report Like Favorite

Transcript

added the ability to support watchOS store applications and now you can directly push applications to watchOS that are specific to that device. Another innovation from this year is the Apple Passkey Attestation. Apple Passkey Attestation, not to be confused with Apple Passkeys or Passkeys in general, this configuration does not create Passkeys on the devices, it just does the attestation with an identity certificate to make sure that the Passkey is approved by the company. So if you want to have Passkeys that are company created with an identity certificate, this is the way, but this will not distribute Passkeys to the devices. This is just to attest that the Passkey on the device is company approved. So we have this ability. We know that the industry is moving in the way of adding Passkeys, moving away from passwords that we all know they are not secured, cannot be easily hacked, Passkeys is the new way that will secure the access and authentication for our end users. Another innovation from last year, Apple added the screen in our devices. So iPhones now have that default app screen and we added the ability to configure the browser app that is going to be the default app for those devices. So we can set that setting and all the browser app that you choose, those are going to be the application that will open with any link on the end user device. This year, we have available messaging and calling app. So those will be coming in a future release, but those are some of the innovations that Apple provided us for this year in this release in iOS 26. All right. So now we're going to move into the new ABM features. Apple is really strengthening their ABM use cases and they are providing a number of very useful features that customers have been asking for a while, and some of them require some MDM integration and some of them are just ABM features. But from our customers' questions, we want to still discuss them because it pertains also to our area of MDM. The first feature that we're going to touch upon is the Apple device migration. You probably saw the announcement this year. Now Apple has made it easy for our customers to move from one MDM solution to another. This can cover many use cases. As you know, we have an on-prem solution and we have our cloud solution at Ivanti. If our customers now are migrating from the on-prem solution into our cloud solution, they can use this feature to re-enroll the devices dynamically, automatically without the manual intervention. The feature is purely on ABM, there is no MDM.

TL;DR

Ivanti now supports direct watchOS store application deployment, eliminating the need to manage Apple Watch apps through paired iPhones.
Apple Passkey Attestation validates company-approved passkeys using identity certificates but does not distribute passkeys to devices—a critical distinction for security teams planning passwordless authentication strategies.
New default app configuration allows IT to set preferred browser apps on iOS devices, with messaging and calling app controls coming in future releases aligned with iOS 18 capabilities.

Summary

This demonstration highlights Ivanti's mobile device management (MDM) capabilities for Apple's latest ecosystem updates, focusing on iOS 18 and watchOS enhancements. The presenter walks through new support for watchOS store applications, enabling direct app deployment to Apple Watch devices without requiring iPhone intermediaries. A significant portion covers Apple Passkey Attestation, clarifying that this feature validates company-approved passkeys using identity certificates rather than distributing passkeys directly to devices. The session also addresses default app configuration capabilities introduced by Apple, including browser selection and upcoming support for messaging and calling apps. The final segment introduces Apple Business Manager (ABM) device migration features, which facilitate automated re-enrollment when organizations transition between MDM solutions, including migrations from Ivanti's on-premises platform to their cloud offering. Throughout the presentation, the speaker emphasizes how these capabilities align with industry trends toward passwordless authentication and streamlined device lifecycle management.

Chapters

0:00 - watchOS Store Application Support
0:22 - Apple Passkey Attestation Explained
1:25 - Default App Configuration
2:10 - Apple Business Manager Migration

Key Quotes

0:34 "This configuration does not create Passkeys on the devices, it just does the attestation with an identity certificate to make sure that the Passkey is approved by the company."
1:08 "We know that the industry is moving in the way of adding Passkeys, moving away from passwords that we all know they are not secured, cannot be easily hacked, Passkeys is the new way that will secure the access and authentication for our end users."
3:09 "If our customers now are migrating from the on-prem solution into our cloud solution, they can use this feature to re-enroll the devices dynamically, automatically without the manual intervention."

Categories:

Tags:

Show more Show less

Browse videos

Upcoming Webinar Calendar

06/23/2026

01:00 PM

06/23/2026

The AI-Powered VMware Alternative

https://www.truthinit.com/index.php/channel/2009/the-ai-powered-vmware-alternative/
06/24/2026

11:00 AM

06/24/2026

Accelerating Through AI: A Dynamic Webinar Series

https://www.truthinit.com/index.php/channel/2012/accelerating-through-ai-a-dynamic-webinar-series/
06/25/2026

01:00 PM

06/25/2026

Generative AI Security: Preventing AI from Becoming a Data Breach Multiplier

https://www.truthinit.com/index.php/channel/1998/generative-ai-security-preventing-ai-from-becoming-a-data-breach-multiplier/
06/30/2026

01:00 PM

06/30/2026

Mastering Active Directory Certificate Services for Long-Term Success

https://www.truthinit.com/index.php/channel/2018/mastering-active-directory-certificate-services-for-long-term-success/
07/01/2026

04:00 AM

07/01/2026

Integrating Security in AI: Automated Red Teaming Strategies for Private Models

https://www.truthinit.com/index.php/channel/1969/integrating-security-in-ai-automated-red-teaming-strategies-for-private-models/
07/01/2026

04:00 AM

07/01/2026

Schutz von KI in Anwendungen, Agenten und APIs.

https://www.truthinit.com/index.php/channel/2008/schutz-von-ki-in-anwendungen-agenten-und-apis/
07/01/2026

01:00 PM

07/01/2026

Preventing Your AI from Turning Against You: Essential Strategies

https://www.truthinit.com/index.php/channel/2021/preventing-your-ai-from-turning-against-you-essential-strategies/
07/02/2026

10:00 AM

07/02/2026

When the cloud goes dark: Resilience lessons from hybrid threats

https://www.truthinit.com/index.php/channel/2011/resilience-insights-from-hybrid-threats-when-the-cloud-faces-challenges/
07/07/2026

01:00 PM

07/07/2026

A Comprehensive Demonstration of DLP Solutions and Strategies

https://www.truthinit.com/index.php/channel/2030/a-comprehensive-demonstration-of-dlp-solutions-and-strategies/
07/09/2026

01:00 PM

07/09/2026

The HUMAN Experience: Empowering Trust Through Action and Engagement

https://www.truthinit.com/index.php/channel/2026/the-human-experience-empowering-trust-through-action-and-engagement/
07/14/2026

01:00 PM

07/14/2026

Crafting a Championship-Quality Security Team for Unmatched Defense

https://www.truthinit.com/index.php/channel/2025/crafting-a-championship-quality-security-team-for-unmatched-defense/
07/21/2026

04:00 AM

07/21/2026

Strategies for Managing AI Governance and Securing App-to-LLM API Traffic

https://www.truthinit.com/index.php/channel/1967/strategies-for-managing-ai-governance-and-securing-app-to-llm-api-traffic/
07/21/2026

01:00 PM

07/21/2026

HUMAN Dialogue: Insights from Attackers Revealed at the FIFA World Cup

https://www.truthinit.com/index.php/channel/2029/human-dialogue-insights-from-attackers-revealed-at-the-fifa-world-cup/
07/22/2026

06:30 AM

07/22/2026

Understanding the Dynamics of Data Privacy and Protection Regulations

https://www.truthinit.com/index.php/channel/2000/understanding-the-dynamics-of-data-privacy-and-protection-regulations/
07/28/2026

01:00 PM

07/28/2026

Illumio + Netskope: Zero Trust in the Age of AI Autonomy

https://www.truthinit.com/index.php/channel/2031/illumio-netskope-zero-trust-in-the-age-of-ai-autonomy/
07/29/2026

04:00 AM

07/29/2026

Real-Time Strategies for Safeguarding Against Prompt Injections

https://www.truthinit.com/index.php/channel/1968/real-time-strategies-for-safeguarding-against-prompt-injections/
09/30/2026

04:00 AM

09/30/2026

AI Command Center: Optimizing Visibility and Control in Your Operations

https://www.truthinit.com/index.php/channel/2024/ai-command-center-optimizing-visibility-and-control-in-your-operations/