Requirements

• Jamf Pro 9.21 or later
  Note: If you are using Jamf Pro 8.3-9.1, see the Deploying macOS 10.7 or Later with Jamf Pro Knowledge Base article for instructions on deploying a macOS upgrade.

• Jamf Admin

• The .app file for the version of macOS that you plan to deploy (For example, Install OS X Mountain Lion.app.)
  You can obtain the latest .app file for macOS from the Mac App Store.

• Managed computers with:

  • (For deployments of macOS 10.10 or later only) macOS 10.7 or later
    Computers with macOS 10.5 or macOS 10.6 must be upgraded to macOS 10.7 or later before upgrading to macOS 10.10.

  • Self Service

  • The system requirements for the version of macOS that you plan to deploy

    • macOS 10.7: http://support.apple.com/kb/HT4949

    • macOS 10.8: http://support.apple.com/kb/HT5444

    • macOS 10.9: http://support.apple.com/kb/HT5842

    • macOS 10.11: https://support.apple.com/kb/SP728?locale=en_US

    • macOS 10.12: https://support.apple.com/en-us/HT201475

Step 1: Add the .app File for macOS to Jamf Admin

Add the .app file for macOS to Jamf Admin. Jamf Admin extracts the InstallESD.dmg file from the .app file so you can cache and install it using policies.

1. Open Jamf Admin and authenticate to the Jamf Pro server.

2. Drag the .app file to the main repository in Jamf Admin.
   Jamf Admin extracts the InstallESD.dmg file, analyzes its contents, and adds it to the master distribution point and Jamf Pro.
   The InstallESD.dmg file is displayed in blue text until you add it to a category.

   

3. Double-click the package in the main repository.

4. Click the General tab and choose a category for the package.

   

5. Click OK.

Step 2: Cache the InstallESD.dmg File

After adding the .app file to Jamf Admin, you can cache the InstallESD.dmg file using a policy. Caching the file ahead of time speeds up the upgrade process.

1. Log in to Jamf Pro.

2. Click Computers at the top of the page.

3. Click Policies.
   On a smartphone, this option is in the pop-up menu.

4. Click New .

5. In the General payload, enter a display name for the policy. For example, “Cache InstallESD.dmg”.

   

6. Select Recurring Check-in as the trigger.

7. Choose “Once per Computer” from the Execution Frequency pop-up menu.

8. Select the Packages payload and click Configure.

9. Click Add for the InstallESD.dmg file.

10. Choose “Cache” from the Action pop-up menu.

    

11. Specify a distribution point for computers to download the package from.

12. Select the Maintenance payload and click Configure.

13. Ensure that the Update Inventory checkbox is selected.

14. Click the Scope tab and configure the scope of the policy.

    

15. Click Save.

The InstallESD.dmg file is cached on computers in the scope the next time they check in with Jamf Pro and meet the criteria in the General payload.

Step 3: Create a Smart Computer Group

Create a smart group of computers with the InstallESD.dmg file cached. The smart group will be used as the scope of the Self Service policy for upgrading macOS.

1. Log in to Jamf Pro.

2. Click Computers at the top of the page.

3. Click Smart Computer Groups.
   On a smartphone, this option is in the pop-up menu.

4. Click New .

5. On the Computer Group pane, enter a display name for the smart computer group. For example, “InstallESD.dmg Cached”.

   

6. Click the Criteria tab.

7. Click Add .

8. Click Choose for “All Criteria”.

9. Click Choose for “Cached Packages”.

10. Choose “has” from the Operator pop-up menu.

    

11. Click Browse .

12. Click Choose for the InstallESD.dmg file.
    Note: The InstallESD.dmg file is not available as a value until it has been cached on at least one computer.

13. Click Save.

Step 4: Create a Self Service Policy for Upgrading macOS

After caching the InstallESD.dmg file, you can create a Self Service policy that allows users to upgrade macOS.

1. Log in to Jamf Pro.

2. Click Computers at the top of the page.

3. Click Policies.
   On a smartphone, this option is in the pop-up menu.

4. Click New .

5. In the General payload, enter a display name for the policy. For example, “Upgrade macOS”.

   

6. Choose “Once per Computer” from the Execution Frequency pop-up menu.

7. Select the Packages payload and click Configure.

8. Click Add for the InstallESD.dmg file.

9. Choose “Install Cached” from the Action pop-up menu.

   

10. Click the Scope tab.

11. Click Add .

12. Click the Computer Groups tab.

13. Click Add for the smart computer group you just created.

    

14. Click the Self Service tab.

15. Select Make the policy available in Self Service.

16. Configure how the policy is displayed in Self Service using the settings on the pane.

    

17. Click Save.

The policy is made available in Self Service on computers in the scope the next time they check in with Jamf Pro and meet the criteria in the General payload. macOS is upgraded when users run the policy from Self Service.

Upgrading FileVault 2-enabled drives from macOS 10.7 or 10.8 prompts users to enter their password after reboot. Upgrading FileVault 2-enabled drives from macOS 10.9 or later automatically bypasses authentication after reboot.

Note: The Jamf Binary automatically enables Core Storage on the target computer before installing an macOS 10.11 upgrade using a policy. This only occurs for macOS 10.11 upgrades that are installed using a policy.