Software Update Settings
The software update policy settings specify these parameters are to support software updates on iPhone, iPad, and Mac devices, which can now be managed entirely with declarative device management, replacing the MDM profiles for software update restrictions, settings, and software update commands and queries. This policy is supported on iOS 18 and later devices and on macOS 15 and later devices.
Procedure
- Select Policies & Configs > Policies.
- Select Add New > Apple > iOS / macOS > Software Update Settings.
- Use the guidelines in the Software Update Settings table below to complete the New Software Update Settings dialog box.
- Select Save.
- Apply the policy to an iOS or macOS label.
Table: Software Update Settings
Item | Description |
|---|---|
Name | Enter a name for the policy. |
Status | Select the relevant radio button to indicate whether the policy is Active or Inactive. Only one active policy can be applied to a device. |
Priority | Specifies the priority of this policy relative to other custom policies of the same type. This priority determines which policy is applied if more than one policy is available. Select Higher than or Lower than, then select an existing policy from the drop-down list. For example, to give Policy 'A' a higher priority than Policy B, you would select “Higher than” and “Policy B”. |
Description | Enter an explanation of the purpose of this policy. |
Allow Standard User OS Updates (Boolean) | This key is available in macOS to determine whether both standard users and local administrators can perform an update or upgrade (the default behaviour), or determine whether administrative permissions are required (default is True and not required). If true, a standard user can perform updates and upgrades. If false, only administrators can perform updates and upgrades. |
Beta Enrollment Program (applicable for iOS 18.0+, iPadOS 18.0+, and macOS 15.0+ devices) | Beta Program: Configures the beta program settings for a device. This setting also determines how administrators can manage beta program enrollment for devices in Ivanti EPMM. Apple governs all beta programs for Apple devices. Select one of the following options from the drop-down list:
|
Automatic Actions | The Automatic Actions dictionary contains keys like: Download: Specifies whether automatic downloads and preparation of available updates only (not upgrades and Rapid Security Responses). You can select as per your requirement:
Install OS Updates: Specifies whether automatic installation of available operating system updates only (not upgrades and Rapid Security Responses). You can select as per your requirement:
Install Security Updates (only for MacOS): Specifies whether automatic installation of available security updates. You can select as per your requirement:
|
Deferrals | The Deferrals dictionaries offer different keys to configure the behavior depending on the platform (no defaults, not required):
|
Notifications (Boolean) | If true, the device shows all software update enforcement notifications. If false, the device only shows notifications triggered one hour before the enforcement deadline and the restart countdown notification. |
Rapid Security Response (Boolean) | The Rapid Security Response dictionary contains:
|
Recommended Cadence (String) | Specifies how the device shows software upgrades to the user. When a software update and upgrade is available, the device behaves as follows:
|