Using an MDM to manage software updates can save you time while giving you more control. In this article, we'll discuss how to delay device software updates, install software updates remotely, and manage the software update experience for end users using SimpleMDM.
Deferring OS software updates
Apple provides mobile device management (MDM) solutions with multiple options for delaying OS updates on managed devices. These options are found within the native Restrictions configuration profile in SimpleMDM.
Streamline your Apple device management
Try SimpleMDM free for 30 days to see how the ultimate Apple MDM helps you manage your fleet with ease.
OS update delay options
The OS update delay settings prevent devices from installing OS updates for up to 90 days after Apple publicly releases them.
Example 1: Delaying major macOS updates
Goal: Prevent Macs from updating to macOS until compatibility testing with business apps and processes is complete.
Solution: Set the delay period using the macOS major OS update delay option.
For example, if a software is publicly released by Apple in October, setting macOS major OS update delay to 90 days means users won’t be able to install the new macOS until January.
Example 2: Allowing macOS security updates for previous OS versions
Goal: Block major macOS updates while allowing critical security patches after testing.
Solution: Set the macOS minor OS update delay option to 7 days. This ensures security updates are tested before deployment while maintaining best security practices.
Example 3: Delaying iOS updates
Goal: Allow time to test an internal custom app before users update their iPhones or iPads to a newer iOS version.
Solution: Set the iOS OS update delay option to 30 days, preventing users from updating for a month after Apple's public release.
Example 4: Delaying macOS app updates
Goal: Ensure adequate testing time for business apps before allowing updates on macOS devices.
Solution: Enable the macOS software update delay setting for the desired period.
Installing OS software updates
SimpleMDM supports multiple methods for installing OS updates remotely on iOS, tvOS, and macOS.
iOS and tvOS software updates
Apple imposes certain conditions for fully remote updates, including:
The device must be in supervised mode.
It must detect an available update.
It should have sufficient battery or be plugged in.
It must be connected to Wi-Fi.
It must have enough storage.
Passcode requirement: If a passcode is set, iOS prompts users to enter it before installation. However, the update file can still be downloaded remotely.
Methods to initiate an iOS or tvOS update in SimpleMDM
Single device update: On the Device Details screen, click the update button next to OS version.
Bulk update: Select multiple devices from the Devices page, then choose Update OS Version from the Actions menu.
Scheduled updates: Under Configs > Profiles, click Create Profile > Software Update Policy for iOS profile to schedule updates at specific time ranges.
macOS software updates
Software Update Policy for macOS
This profile allows remote configuration of System Preferences > Software Update > Advanced settings and additional update controls.
Available update settings
Check for updates: Enables automatic checks for software updates.
Download new updates when available: Downloads updates automatically.
Install macOS updates: Attempts to install macOS updates (may require user interaction).
Install app updates from the App Store: Tries to install updates for App Store apps (user interaction may be required).
Install system data files and security updates: Ensures security updates are installed automatically.
Additional restrictions
Allow pre-release software installation: Blocks users from installing beta versions.
Require admin for app installation: Forces authentication for app installations.
Updates to Display: Controls which updates users can install:
All available updates: Users can install any version.
Lowest versioned update only: Users can install only the next sequential version.
Highest versioned update only: Users can install only the latest available version.
Managed OS Updates for macOS
This section of the profile provides remote update control and requires macOS 12 or later.
Update modes
Install ASAP: Installs updates immediately with a user prompt and countdown.
Smart Update: Installs updates automatically at an optimal time (usually overnight while plugged in).
Notify Only: Alerts users about updates but allows them to install at their discretion.
Disabled: No automatic updates or user notifications.
Version types
Latest Minor Version: Updates to the latest minor release (e.g., 12.5 → 12.6.1).
Latest Major Version: Updates to the latest macOS release (e.g., 12.5 → 13.0.1).
“Install Update” command
If macOS detects an available update, admins can send an Install Update command to push the installation.
Ways to initiate macOS updates in SimpleMDM
Single device: On the Device Details page, click Install Update next to OS Version.
Multiple devices: From the Devices page, select multiple devices, then choose Update OS Version from the Actions menu.
With SimpleMDM, administrators gain complete control over software updates on managed Apple devices. Whether delaying updates, pushing updates remotely, or defining specific update policies, these tools help businesses maintain security and compatibility without disruption.
