Lab 6: Managing OS updates for Apple devices

Introduction

This lab contains two modules that guide you through methods for managing operating system updates on iOS and macOS devices in Workspace ONE UEM. The two methods discussed are:

  • Assigning and Scheduling Updates with the Device Updates Dashboard.

  • Using a Software Update Enforcement Declaration to Update Devices.

Each module will guide you through the tasks required to assign, schedule, and deploy updates to devices.

Please note that if you’re using an enrolled iOS device, software updates are limited to supervised devices. Since your enrolled iOS device isn’t supervised in Apple Business Manager, the update command won’t work on your device. Nevertheless, you should still proceed with the following two modules to grasp the process of updating devices.

Objectives and Tasks

Module 1: Assigning and Scheduling Updates with the Device Updates Dashboard

  1. Create a Smart Group Containing Target Devices for the Update

  2. Assign a macOS Update to Devices

  3. Pause and Resume Existing Assignments

Module 2: Using a Software Update Enforcement Declaration to Update Devices

  1. Create a Smart Group Containing Target Devices for the Update

  2. Create a Software Update Enforcement declaration

Module 1: Assigning and Scheduling Updates with the Device Updates Dashboard

In this module, you use the Device Updates Dashboard in Workspace ONE UEM to push an update to iOS and macOS devices. For this exercise, you will be deploying an update for macOS 14.7 to devices running macOS Sonoma 14.0 to 14.6. Although this module is focused on macOS, the process is similar for iOS.

Task 1: Create a Smart Group Containing Target Devices for the Update

In this exercise, you create a Smart Group to be used to assign the update workflow. For this assignment group, you will set the criteria to only include corporate devices running a macOS version between 14.0 to 14.6.

This exercise demonstrates the diverse methods you can employ to manage assignments using Smart Groups. Notably, this Smart Group automatically removes devices that have been updated since they no longer adhere to the specified criteria for membership.

You have the flexibility to create any number of combinations of criteria or even utilize an existing Smart Group from your environment.

To create and configure the Smart Group:

  1. In the Workspace ONE UEM console, select Groups & Settings.

  2. Select Assignment Groups, and then Add Smart Group.

  3. For the group name, enter macOS 14.7 Update.

  4. From the list of available criteria, expand Ownership, click Selected, and ensure that Corporate is the only item with a check mark.

  5. Expand Platform and Operating System, and from the drop down, select Apple macOS.

  6. Change the condition to Less Than or equal to and select macOS Sonoma 14.6.0.

  7. Click the plus sign to add an additional condition.

  8. From the drop down, select Apple macOS.

  9. Change the condition to Greater than or equal to and select macOS Sonoma 14.0.0.

  10. Click Save.

Task 2: Assign a macOS Update to Devices

You now need to assign and publish the appropriate update to the assignment group you just created. For this example, you will assign and publish macOS 14.7.5 to the devices in the macOS 14.7 Update Smart Group you created.

If you don’t have an enrolled macOS device, you should still proceed with the exercise to understand the process of deploying updates.

To assign and publish the appropriate update to the newly created assignment group:

  1. In the Workspace ONE UEM console, select Devices, then select Device Updates.

  2. Click macOS.

  3. From the list of available macOS updates, click the radio button for macOS 14.7.5.

  4. Click Manage Assignments.

  1. If you already created assignments for this update, they are listed here. For this exercise, there should be no other assignments listed. Click New Assignment.

  2. Enter the Assignment Name. For this exercise, enter macOS 14.7 Update Assignment.

  3. Click the search box for Select Smart Group. From the list of assignment groups that appear, select the appropriate group. For this exercise, select the group you created earlier called macOS 14.7 Update, and click Next.

  4. To configure the Date that you want Workspace ONE to begin deploying the update, click the Calendar icon and select a date one week in the future from the current date.

  5. Enter 12:00 for the time and select PM from the dropdown.

  6. Click the dropdown labeled Install Action, and from the dropdown menu, select select InstallLater.

  7. For User Deferral, select Enabled.

  8. Set the Maximum Number of Deferrals to 4.

  1. Click Next.

  2. You have the option to configure Notification messages to be sent to users after successful download of the update, and after successful installation. For this exercise, leave these options disabled, and click Save.

  3. Click Close.

Task 3: Pause and Resume Existing Assignments

Within the Device Updates Dashboard, administrators can pause and resume updates without having to modify the assignments. This allows administrators to maintain visibility as to the deployments to-date while having the ability to halt further deployments for troubleshooting purposes.

To pause and resume an update assignment:

  1. On the Device Updates List View, select macOS from the options at the top.

  2. Select the row for the macOS update that you want to pause and click the Pause button. For this exercise, you will select macOS 14.7.5.

  3. When prompted, confirm the action by clicking Pause, causing the Assignment Status to change to Paused.

  4. To resume the macOS Update, select the row for the paused macOS update that you want to resume, and click Resume. For this exercise, you will select macOS 14.7.5.

  5. When prompted, confirm the action by clicking Resume, causing the Update Status to change to Assigned.

Module 2: Using a Software Update Enforcement Declaration to Update Devices

In this module, you use a Software Update Enforcement declaration to update iOS devices to iOS 18.0. For this tutorial, you will be deploying an update for iOS 18.0 to devices running iOS 17.0 or higher. Although this module is focused on iOS, the process is similar for macOS.

Managing OS updates with the Software Update Enforcement declaration is limited to supervised iOS devices. Your enrolled device won’t receive updates. Nevertheless, you should continue the exercise to grasp the process of deploying updates.

Task 1: Create a Smart Group Containing Target Devices for the Update

In this exercise, you will create a Smart Group to be used to assign the update workflow. For this assignment group, you set the criteria to only include corporate devices running iOS version 17.0 or higher.

This exercise demonstrates the diverse methods you can employ to manage assignments using Smart Groups. Notably, this Smart Group automatically removes devices that have been updated since they no longer adhere to the specified criteria for membership.

You have the flexibility to create any number of combinations of criteria or even utilize an existing Smart Group from your environment.

To create and configure the Smart Group:

  1. In the Workspace ONE UEM console, select Groups & Settings.

  2. Select Assignment Groups, and then click Add Smart Group.

  3. For the group name, enter iOS 18.0 Update.

  4. From the list of available criteria, expand Ownership, click Selected, and ensure that Corporate is the only item with a check mark.

  5. Expand Platform and Operating System, and from the drop down, select Apple iOS.

  6. Change the condition to Greater than or equal to and select iOS 17.0.0.

  7. Click Save.

Task 2: Create a Software Update Enforcement Declaration

The Software Update Enforcement declaration, which allows IT admins to assign specific updates to devices and specify a date and time when the update, will be enforced on the device regardless of user deferrals. In this exercise, you will create a Software Update Enforcement declaration that will update iOS devices to version 18.0.

  1. In the Workspace ONE UEM console, select Resources.

  2. Select Profiles.

  3. Click on the Add dropdown.

  4. Select Add Profile.

  5. From the platforms displayed, click on iOS.

  6. Select Declarative for the Management Type.

  7. Choose Configuration for the Declaration Type.

  1. Click Next.

  2. Enter the Declaration Name. For this exercise, enter iOS 18 Update.

  3. Look for Software Update Enforcement in the list of available options. Click Add.

  4. Enter the Target OS Version. For this exercise, enter 18.3.

  5. Enter the Target Local Date Time. For this exercise, pick a date that is one week in the future from the current date and set the time to 00:00:00. For example, 2025-06-01 00:00:00.

  6. Click Next.

  7. Select the group you created earlier called iOS 18.0 Update, and click Save & Publish.

0 Comments

Add your comment

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.