Skip to main content

How we manage software updates on macOS with datajar.mobi

  • Updated

Introduction

This document describes the default macOS Software Update configuration and user experience for datajar.mobi managed macOS devices. To provide the most reliable and consistent experience, we only leverage the built-in software update frameworks and mechanisms provided by Apple's MDM specification that are made available.
 
By default, macOS devices will:
  • Check for and install App Store app, operating system and security updates automatically, where possible.
  • Set a 7 day Software Update and Managed Distribution app deferral. Please note that Managed Distribution app update deferrals are only supported in macOS 11 Big Sur and above.

If you wish to change these options for your datajar.mobi instance, please submit a support request. 

Scope

Items covered by macOS's built-in Software Update framework are covered, including minor or "point releases", security updates and select Apple applications (e.g. Safari):
 

Examples of what is covered:

  • macOS Catalina 10.15.5 updating to 10.15.6.
  • macOS Catalina 10.15.6 updating to Security Update 2021-004.
  • macOS Big Sur 10.5.1 updating to 10.5.2.
  • macOS Catalina updating Safari.

Examples of what is NOT covered:

  • Applications deployed manually (i.e. a static version we package for you) by our Auto-Update framework, which functions independently.
  • Major macOS upgrades (e.g. upgrading from macOS Catalina 10.15 to macOS Big Sur 11). Please note that Auto-Update can deploy in-place macOS upgrades automatically or via Self Service.

User Experience

The user experience follows Apple's default behaviour, in the same way as if the computer was unmanaged. If users open System Preferences > Software Update, they will see all the options below enabled and locked:
 
mceclip0.png
 

When updates are available, users will see the following notification and can install immediately or select from the options presented under the Later item:

macOS-Notification.png

  • With our default 7 day deferral in place, updates will only be visible to macOS devices managed by datajar.mobi after 7 days have passed following their initial release from Apple. Users will not be prompted to install updates until then.
  • Updates that do not require a restart will install in the background automatically (for example, Safari, XProtect definitions and other background configuration updates).
  • If an update requires a restart, users will receive a notification that updates are available and are prompted to install or delay the update.
    • If the computer is left logged in and connected to mains power, it will try to automatically log the user out and install the update between 02:00 and 04:00 or another time where the Mac is not in use.
    • This will fail if users have applications open that interrupt a graceful logout, for example prompting to save an open document in Microsoft Word.
  • On Apple Silicon Macs, users may be prompted for the password of a Volume Owner to install updates. The Volume Owner is the user who's account was created during initial setup of the Mac at the point it was enrolled.
  • Users can also install available updates at any time through System Preferences > Software Update.
  • If the Mac is at the Login Window, updates will not install. Currently for shared computers that have Intel processors with the T2 chip or Apple Silicon, there is no reliable solution to automatically install updates. For shared pre-T2 Intel Macs, we can use a legacy process to install software updates when users log out. Please submit a support request to us if you wish to explore this further.

We are bound by the limitations above as they are imposed by Apple's own Software Update frameworks that are built into macOS and the MDM specification. Upcoming changes in macOS 12 Monterey may help to alleviate the recent reliability and consistency issues experienced with macOS Software Updates and allow us to forcibly deploy them in a more proactive way. For more information, please see the following video from this year's Worldwide Developer Conference (WWDC): Manage software updates in your organisation.

Troubleshooting

If you encounter issues with installing software updates for macOS, please follow the steps in this article: https://support.apple.com/en-gb/HT212526

If you continue to have problems, please submit a support request to us and we will be happy to assist.

Further information

Related articles