Updating macOS by Sending a Mass Action Command

This workflow covers how to update macOS on an individual computer or group of computers by sending an MDM command to computers using a mass action. You can use a mass action command to update macOS on computers that are enrolled via automated MDM enrollment (formerly DEP) using a PreStage enrollment in Jamf Pro. To identify the target computers for a mass action command for this workflow, you need to perform an advanced computer search. This method is recommended for minor macOS releases, and is the workflow recommended by Apple.

Note: Using a cache server can decrease the update time.

Requirements

To update macOS, you need the following:

  • Jamf Pro 9.96 or later

  • Computers with macOS 10.11 or later enrolled via automated MDM enrollment (formerly DEP) using a PreStage enrollment in Jamf Pro

  • A valid push certificate in Jamf Pro

Note: To have the update for computers with Apple silicon (i.e., M1 chip) installed automatically without user interaction, a Bootstrap Token for target computers must be escrowed with Jamf Pro.

For more information about how Jamf Pro manages software updates, see Manage software updates for Apple devices in Apple Platform Deployment.

Performing an Advanced Computer Search

You can use an advanced computer search to find and target managed computers that are not using the current macOS version and are enrolled in Jamf Pro via automated MDM enrollment.

  1. Log in to Jamf Pro.

  2. Click Computers at the top of the page.

  3. To search for computers using an advanced computer search, click Search Inventory.

  4. Click New images/download/thumbnails/81949325/Icon_New_Button.png .

  5. To save the search, select the Save this Search checkbox and create a display name in the Display Name field.

  6. Click the Criteria tab.

  7. Click Add images/download/thumbnails/81949325/Icon_Add_Button.png .

  8. Click Show Advanced Criteria at the top of the pane.

  9. Find the "Enrolled via Automated Device Enrollment" criteria and click Choose. For the "Enrolled via Automated Device Enrollment" criteria, choose "is" from the Operator pop-up menu, and then click Browse images/download/thumbnails/81949325/Browse_icon.png . From the values, select Choose for "Yes".

  10. Click Add images/download/thumbnails/81949325/Icon_Add_Button.png .

  11. Find the "Operating System Version" criteria and click Choose.

    Note: Only your 30 most frequently used criteria are listed. To display additional criteria, click Show Advanced Criteria.

  12. For the "Operating System Version" criteria, choose an appropriate operator from the Operator pop-up menu:

    • To update a specific macOS version, choose "is" from the Operator pop-up menu.

    • To update more than one macOS version, choose "greater than", "less than", "greater than or equal", or "less than or equal" from the Operator pop-up menu. For example, to update all versions of macOS greater than 10.12, you would choose the "greater than" operator and enter "10.12" in the Value field.

  13. Enter a macOS version in the Value field, or browse for a macOS version by clicking Browse images/docs.jamf.com/10.9.0/jamf-pro/administrator-guide/images/download/thumbnails/18795838/Browse_icon.png .

  14. (Optional) To update a range of macOS versions, repeat steps 14 through 17.

  15. Choose "and" from the And/Or pop-up menu to specify the relationship between criteria.

  16. Choose parentheses from the pop-up menus around the criteria to group them.

  17. Click Save.

Updating macOS by Sending a Mass Action Command

You can use a mass action command to update the operating system for computers not using the current macOS version targeted by the advanced computer search.

  1. Log in to Jamf Pro.

  2. Click Computers at the top of the page.

  3. Click Search Inventory.

  4. Select the name of the advanced computer search you created.

  5. Click View at the bottom of the pane.

  6. Click Action at the bottom of the pane.

  7. Select Send Remote Commands.

  8. Click Next.

  9. Under Remote Commands, select Update OS version and built-in apps (v10.11 or later computers enrolled with DEP only).

  10. Select one of the following for Target Version:

    • To download the update for the latest macOS version, select Latest version based on device eligibility. To download and install the latest major update, select the Include major updates, if available checkbox. To only download and install the latest patch version, leave the checkbox deselected.

    • To download the update for a specific macOS version, select Specific version and select the version from the pop-up menu.

      Note: Updating to a specific macOS version requires computers with macOS 10.15 or later.

  11. Select one of the following for Install Action:

    • To download the update on computers for users to install themselves, select Download the update for users to install.

    • To download the update on computers for users to install themselves at a later time, select Download and allow macOS to install later. To configure the number of times a user can defer the update, enter an integer between 0-99 in the Max User Deferrals field.

      Note : Selecting this option requires computers with macOS 12 or later.

    • To download and install the update on computers automatically, select Download and install the update, and restart computers after installation.

      Note: Selecting this option will cause any computers to download and install the update after the remote command is sent and they are connected to the network. If the computer has a passcode, the user is prompted to enter the passcode after the computer reboots.

  12. To issue the remote command, click Next.

    Note: Computers will not download or install the update if they have limited storage space and will not install the update if they have low battery.

  13. Click Done.

Computers in the advanced search check for updates as soon as the mass action command is sent.

Copyright     Privacy Policy     Terms of Use     Security
© copyright 2002-2021 Jamf. All rights reserved.