Updating macOS by Sending a Mass Action Command

This workflow covers how to update macOS on an individual computer or group of computers by sending an MDM command to computers using a mass action. You can use a mass action command to update macOS on computers that are enrolled via automated MDM enrollment (formerly DEP) using a PreStage enrollment in Jamf Pro. To identify the target computers for a mass action command for this workflow, you need to perform an advanced computer search. This method is recommended for minor macOS releases, and is the workflow recommended by Apple.

Note: Using a cache server can decrease the update time.

Requirements

To update macOS, you need the following:

  • Jamf Pro 9.96 or later

  • Computers with macOS 10.11 or later enrolled via automated MDM enrollment (formerly DEP) using a PreStage enrollment in Jamf Pro

  • A valid push certificate in Jamf Pro

Note: To have the update for computers with Apple silicon (i.e., M1 chip) installed automatically without user interaction, a Bootstrap Token for target computers must be escrowed with Jamf Pro.

For more information about how Jamf Pro manages software updates, see Managing software updates for Apple devices in Apple's Mobile Device Management Settings.

Performing an Advanced Computer Search

You can use an advanced computer search to find and target managed computers that are not using the current macOS version and are enrolled in Jamf Pro via automated MDM enrollment.

  1. Log in to Jamf Pro.

  2. Click Computers at the top of the page.

  3. To search for computers using an advanced computer search, click Search Inventory.

  4. Click New images/download/thumbnails/81949325/Icon_New_Button.png .

  5. To save the search, select the Save this Search checkbox and create a display name in the Display Name field.

  6. Click the Criteria tab.

  7. Click Add images/download/thumbnails/81949325/Icon_Add_Button.png .

  8. Click Show Advanced Criteria at the top of the pane.

  9. Do one of the following:

    • (macOS 10.13.2 or later) Find the "Enrolled via Automated Device Enrollment" criteria and click Choose. For the " Enrolled via Automated Device Enrollment " criteria, choose "is" from the Operator pop-up menu, and then click Browse images/download/thumbnails/81949325/Browse_icon.png . From the values, select Choose for "Yes".

    • (macOS 10.13.1 or earlier) Find the "Enrollment Method: PreStage enrollment criteria" and click Choose. For the "Enrollment Method" criteria, choose "is" from the Operator pop-up menu, and then click Browse images/download/thumbnails/81949325/Browse_icon.png . From the values, select the PreStage enrollment that the computers belong to.

  10. Click Add images/download/thumbnails/81949325/Icon_Add_Button.png .

  11. Find the "Operating System Version" criteria and click Choose.

    Note: Only your 30 most frequently used criteria are listed. To display additional criteria, click Show Advanced Criteria.

  12. For the "Operating System Version" criteria, choose an appropriate operator from the Operator pop-up menu:

    • To update a specific macOS version, choose "is" from the Operator pop-up menu.

    • To update more than one macOS version, choose "greater than", "less than", "greater than or equal", or "less than or equal" from the Operator pop-up menu. For example, to update all versions of macOS greater than 10.12, you would choose the "greater than" operator and enter "10.12" in the Value field.

  13. Enter a macOS version in the Value field, or browse for a macOS version by clicking Browse images/docs.jamf.com/10.9.0/jamf-pro/administrator-guide/images/download/thumbnails/18795838/Browse_icon.png .

  14. (Optional) To update a range of macOS versions, repeat steps 14 through 17.

  15. Choose "and" from the And/Or pop-up menu to specify the relationship between criteria.

  16. Choose parentheses from the pop-up menus around the criteria to group them.

  17. Click Save.

Updating macOS by Sending a Mass Action Command

You can use a mass action command to update the operating system for computers not using the current macOS version targeted by the advanced computer search.

Note: If a new, major macOS release is available in the Mac App Store, computers could download the installer to upgrade macOS regardless of the update OS version mass action sent.

  1. Log in to Jamf Pro.

  2. Click Computers at the top of the page.

  3. Click Search Inventory.

  4. Select the name of the advanced computer search you created.

  5. Click View at the bottom of the pane.

  6. Click Action at the bottom of the pane.

  7. Select Send Remote Commands.

  8. Click Next.

  9. Under Remote Commands, select Update OS version and built-in apps (v10.11 or later computers enrolled with DEP only).

  10. At the bottom of the pane, select one of the following for Update Action:

    • To download the update on computers for users to install themselves, select Download the update for users to install.

    • To download and install the update on computers automatically, select Download and install the update, and restart computers after installation.

      Note: Selecting this option will cause any computers to download and install the update after the remote command is sent and they are connected to the network. If the computer has a passcode, the user is prompted to enter the passcode after the computer reboots.

  11. To issue the remote command, click Next.

    Note: Computers will not download or install the update if they have limited storage space and will not install the update if they have low battery.

  12. Click Done.

Computers in the advanced search check for updates as soon as the mass action command is sent.

Copyright     Privacy Policy     Terms of Use     Security
© copyright 2002-2021 Jamf. All rights reserved.