Updating iOS, iPadOS, and tvOS Using a Mass Action Command

Jamf Pro Documentation 11.16.0
Solution
Application
Content Type
Technical Documentation
Utilities & Services
version
11.16.0
ft:locale
en-US
vrm_version
11.16.0

To update iOS, iPadOS, and tvOS devices using the mass action workflow, you need to identify target devices. You can do this using one of the following methods:

  • Simple search

  • Advanced search

  • Static group

  • Smart group

Best Practice:

Using a Smart Group to Identify Target Devices

Create a smart mobile device group similar to the following to find and target supervised devices:

Screenshot of criteria for a smart device group. The first criteria is set to iOS version less than 17 and the second criteria is set to Supervised is Supervised.

For more information on creating a smart device groups, see Smart Groups.

Requirements

  • Target devices with iOS 14 or later, iPadOS 14 or later, or tvOS 14 or later, supervised or enrolled via Prestage enrollment in Jamf Pro.

  • A valid push certificate in Jamf Pro

Note:

Devices in Single App Mode may not receive update commands. Consider deploying any iOS, iPadOS, or tvOS updates before placing a device in Single App Mode. Devices already in Single App Mode may need to be taken out of this mode to receive the update.

Considerations for devices with a passcode enabled:
  • If a device has a passcode enabled, you can optionally clear the passcode by sending a mass action before attempting the update.
    Important:

    Jamf does not recommend clearing passcodes for security purposes. For example, clearing a passcode from an iOS device with a mass action command will disable security functions such as FaceID and TouchID, and will remove passcode-secured items from Apple Wallet. This allows anyone with physical access to the device to use it. If a configuration profile with a passcode requirement was set, the next person to use the device is prompted to set a new passcode. Consider how this may impact your organization before using this option.

    For more information about Apple's security capabilities, see Apple Platform Security.

  • If a device is locked with a passcode, the update will download but remain uninstalled until the user acknowledges the update. The user is prompted to enter their passcode to install the update or defer for an overnight installation. The user can defer the prompt up to three times before they are required to schedule the update.

For more information on updating devices with a passcode enabled, see Installing software updates and upgrades in Apple Platform Deployment.

  1. In Jamf Pro, click Devices in the sidebar.
  2. Click Search Inventory, Smart Groups, or Static Groups.
  3. Click the name of an advanced mobile device search, smart device group, or static device group.
  4. Click View.
  5. Click Action.
  6. Select Send Remote Commands.
  7. Click Next.
  8. Select Update OS Versions on supervised devices.
  9. If updating iOS devices or iPadOS devices, ensure the Update iOS Version (iOS 9 - 10.2, enrolled via a PreStage enrollment; and/or iOS 10.3 or later) checkbox is selected.
  10. Select one of the following for Target Version:

    • To download the update for the latest iOS, iPadOS, or tvOS version, select Latest version based on device eligibility.

    • To download the update for a specific iOS, iPadOS, or tvOS version, select Specific version and select the version from the pop-up menu.

  11. Select one of the following for iOS Install Action:

    • To download the update on devices for users to install themselves, select Download the update for users to install.

    • To download and install the update on devices automatically, select Download and install the update, and restart devices after installation.

  12. If updating Apple TV devices, ensure the Update tvOS Version (tvOS 12 or later) checkbox is selected, and then select a Target Version.
  13. To send the remote command, click Next.
  14. Click Done.

The operating system on the devices is updated.