Sections
Purpose
This article provides guidance on preparing Apple devices (macOS, iOS, and iPadOS) for centrally managed software updates deployed by OIT Managed Desktop Services using Jamf and Declarative Device Management (DDM).
What do I need to do?
You will receive a notification that your Apple device requires a software update. Follow the steps outlined below based on your device type to ensure successful compliance. OIT Managed Desktop Services Support team members are available to assist with update related issues.
User Actions —– macOS Computers—– User Actions
- Watch for prompts like these.
Scheduled by OITMDS
Appears when Apple Software updates are available- Ensure the device is connected to a stable network
- Update as computer as your schedule permits
*Note: We recommend performing macOS updates manually once you are notified which will be prior to any mandated deadline.
User Actions —– iOS Devices (iPads/iPhones) —– User Actions
- Ensure the device is connected to a stable network
- Updates will install automatically or prompt you with options depending on configuration.
⚠️ End of user responsibility ⚠️
For Support —– Apple Devices & Computers —– For Support
Apple’s Declarative Device Management (DDM) allows automated updates without admin rights or VPN. Settings are deployed via Jamf Pro using configuration profiles.
| Update Action | Description |
|---|---|
| Download Only | Downloads update, not installed |
| Download + Install | Installs after download |
| Schedule Install | Sets install time |
| Install + Deferral | User may defer update up to 99 times |
| Force Install + Restart | Update and restart occur automatically |
Only devices running macOS 14+ or iOS/iPadOS 17+ can receive managed updates.
Post update actions
After the initial push of updates, there inevitably will be some cleanup. To do this, we used a webhook, an API call, a Google Apps Script, and a Google Sheet to determine which computers still haven't been updated, and use this to automatically generate tickets.
- Update success is confirmed via webhook → API call → Google Sheet → Email alert to
OIT_DESKTOP_SUPPORT. - Easily check compliance using a Jamf Pro Dashboard
Links and Resources
Apple’s Worldwide Developers Conference
WWDC 2021 - Meet Declarative Device Management
WWDC 2022 - Adopt Declarative Device Management
WWDC 2023 - Explore Advances in Declarative Device Management
Jamf
Jamf - Getting to Know Declarative Device Management
Jamf - Managed software updates via DDM
Jamf Learn / Documentation - Declarative Device Management
Apple Platform Deployment Guide
Apple Platform Deployment - Declarative status reports for Apple devices
Apple Platform Deployment - Intro to declarative device management and Apple devices
Apple Platform Deployment - Software Update settings declarative configuration for Apple devices
NCSU EPS & Patch Policies
RUL 08.00.14 – System and Software Security Patching Standard
Title: OITMDS - Apple Software Updates
Service: Security Policy & Compliance
Template if applicable: NA
Assignment Group(s): OIT_DESKTOP_SUPPORT
Document Owner: OIT_DESKTOP_SUPPORT
Available Priorities: Medium, Low
Keywords: EPS, macOS, iPadOS, iOS, iPhone, iPad, compliance, Endpoint Protection Standard, Device, Apple, Computer, update, software, patch, patching, management