Matrix42 UEM and Endpoint Data Protection licensing covers the endpoint products that Matrix42 documents together under the heading Secure Unified Endpoint Management. That documentation area covers Unified User Experience, Unified Endpoint Management and Endpoint Security.[17] Matrix42 Unified Endpoint Management (UEM) manages PCs, servers, OS deployments, software distribution, patching and inventory, and can run in the cloud, on premises or hybrid.[1] It offers agent-based management, with a Mobile Device Management layer as an option. Intune, Empirum, Silverback and co-managed devices can be managed in one console.[1] Matrix42 Endpoint Data Protection (EDP), sold as EgoSecure Data Protection, adds device and access control, application control, secure audit and encryption.[2] FastViewer is Matrix42’s remote-control product.[14]
All of these are Subscription Services governed by the Matrix42 GTCs and Supplementary Terms concerning Products. They are counted in the metrics defined there: Device, User, Session and Remote Device.[3]
Editions
| Product | What it covers (vendor description) | Licensing unit in the retrieved documents |
|---|---|---|
| Matrix42 UEM, client management (Empirum) | Software management with rollout plans, inventory, OS installer with PXE boot through Depot Servers[1] | Device or User; add-ons follow the base product quantity (2024 guideline)[4] |
| Matrix42 UEM, mobile (Silverback) | Mobile device and application management, zero-touch deployment, remote wipe[1] | Enrolled devices against a licensed device quantity[11] |
| Patch Management add-on | Vulnerability scanning and third-party updates for device groups[1] | Same quantity as UEM (2024 guideline)[4] |
| PackageCloud | Pre-packaged applications for distribution with Empirum[12] | Per User (at least 250 users) or per Installation (up to 249 users)[12][13] |
| Endpoint Data Protection (EgoSecure) | IntellAct Automation, Insight Analysis, Device and Access Control, Secure Audit, Application Control, encryption modules[2] | Module licences activated per user or per computer[8] |
| FastViewer | Remote control, unattended access, file transfer; web, desktop or integrated with ESM[14] | Concurrent session[15] |
| Premium Services | Priority 24/7 support, higher SLAs, annual product health check[1] | By quote |
The UEM page states that PackageCloud gives access to over 2,100 pre-packaged applications.[1] The PackageCloud Marketplace listing gives “Packages for 400 software products (November 2024)”.[12] Buyers should confirm the current catalogue with the vendor.
Marketplace list prices, excluding 19% VAT, are recorded as catalog SKUs:
- PackageCloud Subscription - per user, annual: 7.56 EUR per user per year.[12]
- PackageCloud Subscription Small Business Edition - per installation, annual: 1,819.80 EUR per installation per year.[13]
- Matrix42 FastViewer - concurrent session, annual: 540.00 EUR per concurrent session per year.[15]
- Matrix42 Remote Support for SmartCards - per user, annual: 2.88 EUR per user per year.[16]
Metrics
UEM uses the record-based metrics of the Supplementary Terms. A Device is each computing device, such as a server, desktop, notebook, thin client, tablet, smartphone or handheld, that has an active administrative record in the Matrix42 Software.[3] A User is every natural person with an active administrative record.[3] The archived 2024 guideline shows how the two are chosen. If Matrix42 ITSM is licensed per user, UEM “must also be licensed “per user"". Add-ons follow the base product, so UEM for 1,000 users means Patch Management for 1,000 users.[4]
Remote control uses Session. Running several sessions at once needs a matching number of licences.[3] Remote Device covers target devices usable in a remote session.[3] The archived 2024 terms instead required every potential remote-control target device to have its own “Remote Client” licence.[5]
Counting / floors
Silverback device counts (documentation updated 2026-06-10). The Silverback licence view displays “how many devices are enrolled into Silverback and how many licenses are remaining”. It also shows the date the Maintenance Period expires.[11] Separate quantities are shown for Silverback devices, Silversync devices and Companion devices, each with used and remaining counts. After maintenance expires, the support contract must be renewed to regain access to the latest Silverback version.[11] Administrators can set a maximum number of devices each user may enroll. Duplicate device records can be removed automatically by matching IMEI or serial number.[11] Catalog proof: Silverback licences are counted per enrolled device, with separate Silversync and Companion quantities.
EgoSecure activation per user or per computer (documentation updated 2026-03-23). EgoSecure licences “can be activated either for users or for computers”.[8] Some modules can only be activated one way:[8]
| Activated only for computers | Activated only for users | Activated for users and computers |
|---|---|---|
| BitLocker Management, Green IT, EgoSecure Antivirus, Inventory, Data Loss Prevention - Data at Rest | Cloud Storage Encryption, Local Folder Encryption, Network Share Encryption, Password Manager, Permanent Encryption, Secure Erase, Data Loss Prevention - Data in Use | Access Control, Secure Audit, Shadow Copy, Application Control, Removable Device Encryption, Insight Analysis, IntellAct Automation |
Computer rights take priority over user rights. A module activated for a computer applies to every user who logs on to it. A module activated for a user can be used on every computer that runs the EgoSecure Agent.[8] If activation fails for both the user and the computer, EgoSecure Data Protection does not run on the client. The Access Control module is the only exception.[8] Some Access Control functions, such as antibridging, work without activating the product for a computer. For these, the Access Control licence only has to be available in licence management.[9] The Console shows used licences in the Active users and Active computers columns.[7] Catalog proof: EgoSecure modules are activated per user or per computer; computer rights take priority.
Trial licences. Activating an EgoSecure licence also activates “5 trial licenses for non-purchased products”.[7] The trial licences are shown in the Licenses work area alongside purchased licences. A licence position therefore needs to separate purchased quantities from trial quantities. Catalog proof: EgoSecure licence activation adds five trial licences for non-purchased products.
FastViewer sessions. Each FastViewer licence is one concurrent session with up to 100 agents installed. Seven licences therefore allow seven parallel sessions and up to 700 agents. Only the supporter needs a licence.[14] The Marketplace listing includes 100 unattended-access clients per licence.[15] Catalog proof: FastViewer: one licence per concurrent session with up to 100 installed agents; only the supporter needs a licence.
PackageCloud. The PackageCloud licence number “is related to the existing license number of your Client Management product”.[12] The packages contain only the parameters for an automated installation, “but no software licenses”. The customer must license the packaged third-party software separately.[4] Catalog proof: PackageCloud licence quantity follows the Client Management licence count.
Remote Support for SmartCards. This add-on is sold per user and requires the Matrix42 Remote License.[16] Catalog proof: Remote Support for SmartCards requires the Matrix42 Remote License.
Floors. No minimum quantity is published for UEM or EDP. The PackageCloud editions are split at 250 users.[12][13]
Virtualization & partitioning
The Supplementary Terms contain no virtual-machine exemption from the Device metric.[3] The 2024 Device definition stated that it “is irrelevant whether a computing device is operated in a virtualized environment”.[5] Virtual clients and servers managed by UEM or protected by EDP therefore count like physical ones, provided they have an active record. The 2024 guideline allowed the components of an on-premises instance to be distributed or clustered for load balancing and high availability.[4]
Cloud / BYOL
UEM can be run in the cloud, on premises or in a hybrid model.[1] FastViewer can run in the cloud or on premises.[14] The hosting model is named on the Order Form.[3] For customer-hosted deployments, overuse is charged at the current price list and may carry a contractual penalty of up to three times the annual licence price.[3] Some products and online services require a licence key to be activated before use. The customer must keep the keys confidential, including after the contract ends.[4]
Programs
- Endpoint Security Free Version. This gives 12 months of access to licences for 5 clients, with all security modules.[10] It is a Free Product under the Supplementary Terms, supplied as-is with liability capped at 100 EUR.[3]
- Premium Services. An optional extra for UEM and EDP products.[1][2]
- LTSB maintenance. Empirum 25.4 LTSB was released in April 2026, with maintenance “not earlier than May 2027”.[6]
Supported versions
The Product Maintenance Overview (updated 2026-05-22) states that each major release is supported for 12 months.[6]
| Product | Active versions and end of maintenance |
|---|---|
| Empirum | 26.1 (May 2026, until May 2027); 25.4 LTSB (April 2026, not earlier than May 2027); 25.4 (September 2025, until October 2026)[6] |
| Silverback | 26.1 (May 2026, until May 2027); 25.4 (September 2025, until October 2026)[6] |
| Endpoint Data Protection | 26.1 (May 2026, until May 2027); 25.4 (September 2025, until April 2026)[6] |
| UEM Agent Windows (Empirum) | 2604.2.2, 2510.2.2 and 2503.2.2 active[6] |
Third-party components
The archived 2024 guideline lists third-party software whose maintenance follows the supplier’s own conditions:[4]
- Clearswift, for DLP.
- Bitdefender, for EgoSecure Antivirus.
- Fortinet, for FortiEDR.
- Ivanti, for Patch Management.
Where Matrix42 Endpoint Security Antivirus was part of the contract, the 2024 terms added a Bitdefender annex. It required the end user to confirm in writing, on request, the number of servers, copies, configuration and location it uses.[5]
Out of scope
- Microsoft Intune, Apple Business Manager, Android Enterprise and Samsung Knox, which are licensed by their own vendors. Silverback manages Apple Volume Purchase Program licences but does not grant them.[11]
- Licences for third-party applications distributed through PackageCloud.
- UEM and EDP price levels, which are quote-based.