Running Software Update Using a Policy

Important:

Jamf recommends updating operating systems on computers using managed software updates. For more information, see Managed Software Updates in the Jamf Pro Documentation.

Jamf Pro can install available software updates using a policy that instructs the native macOS softwareupdate command-line framework to complete the installation. This method updates target computers to the latest macOS version the computer sees as available when querying Apple's software update catalog.

Jamf Pro includes a Software Update policy payload that installs all software updates a computer reports as available, in addition to other elements which may be configured in a policy. During the update process, the Jamf management framework monitors target computers to check for restart requirements and installation progress. When a restart is required, Jamf Pro instructs the softwareupdate framework to take over and finish the restart and installation.

Alternatively, a policy could call the softwareupdate framework directly, bypassing Jamf Pro's restart options in the policy. This can be achieved in a Files and Processes payload, running the command softwareupdate -iaR as a local command. When running updates this way, macOS restarts the computer automatically if needed for the update to complete.

Additional considerations when installing software updates using a policy:

When a configuration profile is installed on the computer restricting and deferring software updates for up to 90 days from its release, updates that macOS has deferred are unavailable to install using the softwareupdate framework on macOS.
Policies that use the softwareupdate framework will install any available macOS updates that the computer sees as available. Beginning with macOS 12.3, major upgrades (e.g., upgrading from macOS 12.3 to macOS 13), can also be installed using this framework.
Computers with Apple silicon (i.e., M1 chip) cannot be updated using a policy if a restart is required. Jamf recommends using remote commands instead. For instructions, see Updating macOS by Sending a Mass Action Command.
Computers will query Apple's update servers directly when checking for and downloading available software updates.

Note:

You can increase software download speeds for computers when content caching from Apple is enabled on your network. For more information, see Intro to content caching in Apple Platform Deployment.

In Jamf Pro, click Computers in the sidebar.
Click Policies in the sidebar.
Click New.
Use the General payload to configure basic settings for the policy, including the trigger and execution frequency.
For an overview of the settings in the General payload, see Policy Payload Reference in the Jamf Pro Documentation.
Select the Software Updates payload and click Configure.
Specify a server for computers to install software updates from.
Use the Restart Options to configure the following:
1. Choose the disk to boot computers to from the Startup Disk pop-up menu.
2. Choose "Restart if a package or update requires it" from the No User Logged In Action pop-up menu.
3. Choose "Restart if a package or update requires it" from the User Logged In Action pop-up menu.
4. Configure the rest of the settings as needed.
Click the Scope tab and configure the scope of the policy.
For more information, see Scope in the Jamf Pro Documentation.
(Optional) Click the Self Service tab and make the policy available in Self Service.
For more information, see Items Available to Users in Jamf Self Service for macOS in the Jamf Pro Documentation.
(Optional) Click the User Interaction tab and configure messaging and deferral options.
For more information, see User Interaction with Policiesin the Jamf Pro Documentation.
Click Save .

The policy runs on computers in the scope the next time they check in with Jamf Pro and meet the criteria in the General payload.