---
title: Software update enforcement policy
slug: device-management-apple/software-update-enforcement-policy
createdAt: 2026-10-06T07:47:35.260Z
---

The Software Update Enforcement policy lets the administrators perform the following tasks:

- Administrators can set up a deadline to force upgrade the device.
- Administrators can also set a URL with a message to display on the Settings of the device to notify the upcoming software update.

**Prerequisites**

- iOS 17 and later versions, iPadOS 17 and later versions, or macOS 14 and later versions
- Always create a dedicated policy for iOS and macOS devices.
- DDM configuration takes precedence over MDM protocol configurations.

**Procedure **

1. In the EPMM admin portal, navigate to Policies and Configs > Policies.
2. Select Add New.
3. Navigate to Apple > iOS/macOS > Software Update Enforcement. The **New Software Update Enforcement** window pane appears.

::Image[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/x17UMizmMXS31eE1RswMh_softwareupdateenforcementlatest.png" size="68" isUploading="false" initialPath="../Resources/Images/SoftwareUpdateEnforcement_latest.png" githubPath="Device Management Guide for Apple/Resources/Images/SoftwareUpdateEnforcement_latest.png" width="682" height="603" darkWidth="682" darkHeight="603" showCaption="false" indent="1"}

4. Enter the Name for the software enforcement.
5. Select the Status as Active or Inactive
6. Select the Priority of upgrade appropriately.
7. Enter a Description.
8. In the **Choose to upgrade the OS version** field, select one of the following options:
   - **Latest Version**: Ivanti EPMM can recognize the latest available OS version on the device during runtime based on the model of the devices.
   - **Specific Version**: You need to enter the build number and the target OS version to enforce a new software update on the devices.

:::hint{type="info" indent="1"}
To enforce a Rapid Security Response software update on a device, you must provide the build version in the **Software Update Enforcement** policy, even though the field is optional.
:::

9. Enter the following details, if you select the **Latest Version** option:
   - Enter the number of days in the **Enforce update after number of days when a update is published** field.
   - Select the time from the **Local time of device when device should get update** drop-down list in 24-hour format.
   - Enter the **Details URL** link.

     :::hint{type="info"}
     Ivanti EPMM will automatically enforce the **Latest Version** of the OS on the devices based on the number of days specified in the **Enforce update after number of days when a update is published** field, which is dependent on the OS release date.
     :::
10. Enter the following details, if you select the **Specific Version** option:
    - Enter the **Target OS Version** to upgrade.
    - Enter the **Target Build Version**.
    - Select the time from the **Target Local Date Time** drop-down list in 24-hour format.
    - Enter the **Details URL** link.

:::hint{type="info" indent="1"}
To enforce a Rapid Security Response software update on a device, you must provide the build version in the **Software Update Enforcement** policy, even though the field is optional.
:::

11. Click Save.
12. Select the policy created in to Policies and Configs > Policies.
13. Click Actions > Apply to Label.
14. Apply an appropriate label (iOS/macOS) to this policy.
15. Click Apply > Ok.
16. Click Devices & Users > Devices.
17. Select the device > Polices tab.
    The policy is in the pending state.

The configuration and details for software update is now visible on the device MDM profile.