Software Update Settings (DDM)

IBM® MaaS360® enhances the iOS policy payload for Software Update Settings by using Declarative Device Management (DDM). With the release of iOS 26, iPadOS 26, and macOS 26, Apple deprecates older methods of OS software update management, including the earlier Mobile Device Management (MDM) profiles for software update restrictions and commands. Henceforth, Apple promotes the use of Declarative Device Management (DDM) and new Software Update Enforcement and Software Update settings for a more proactive and automated approach.

Software Update Settings

The following table describes the Software Update Settings that the administrator can configure on a supervised iOS device.
Policy setting Description Supported devices
Enable Software Update Settings Select the checkbox to enable the Software Update Settings. iOS 18.0+
Allow Notifications When enabled, the device displays all notifications that are related to software update enforcement. When false, the device shows only those notifications that are triggered one hour before the enforcement deadline, and the restart countdown notification. The default is Allow. iOS 18.0+
Recommended Cadence The admin can specify how the device displays software updates to the user. When more than one update is available, the device behaves as follows.
  • All
    Displays all software update versions to the user.
  • Oldest
    Displays only the oldest (least numbered) software update version to the user.
  • Newest
    Displays only the newest (highest numbered) software update version to the user.
 iOS 18.0+
Configure Automatic OS Update Settings Select the checkbox to configure the Automatic OS Update Settings. iOS 18.0+
Download OS Updates The admin can specify whether the user can control automatic downloads of available updates. The following values are available.
  • User Controlled
    This option enables the user to control the Download OS Updates manually.
  • Disable OS Updates
    This option disables the Download OS Updates option on the device and the user cannot do any modification.
  • Push OS updates automatically
    This option enables the Download OS Updates option on the device and the user cannot do any modification.
 iOS 18.0+
Install OS Updates The admin can specify whether the user can control automatic installation of available updates. The following values are available.
  • User Controlled
    This option enables the user to control the Install OS Updates manually.
  • Disable OS Updates
    This option disables the Install OS Updates option on the device and the user cannot do any modification.
  • Push OS updates automatically
    This option enables the Install OS Updates option on the device and the user cannot do any modification.
Note: When Download OS Updates is set to Disable OS Updates, then Install OS Updates cannot be set to User Controlled or Push OS updates automatically. The system does not allow this combination and an error message is displayed.
 iOS 18.0+
Install Security Update The admin can specify whether the user can control automatic installation of available security updates. The following values are available.
  • User Controlled
    This option enables the user to control the Install Security Update manually.
  • Disable OS Updates
    This option disables the Install Security Update option on the device and the user cannot do any modification.
  • Push OS updates automatically
    This option enables the Install Security Update option on the device and the user cannot do any modification.
Note: When Download OS Updates is set to Disable OS Updates, then Install Security Update cannot be set to User Controlled or Push OS updates automatically. The system does not allow this combination and an error message is displayed.
 iOS 18.0+
Configure Update Deferrals Select the checkbox to configure the Update Deferrals. The administrator can delay the user visibility to software updates on devices based on the number of days (1-90 days). iOS 18.0+
Combined Period In Days The admin can specify the number of days to defer a major or minor OS software update on the device. This number is 1 to 90 days from the OS release date. It cannot be extended beyond 90 days of release. Enable Configure Update Deferrals to view Combined Period In Days. The user cannot see the software updates for the mentioned number of days. iOS 18.0+
Configure Background Security Improvement Select the checkbox to configure the Background Security Improvement settings. The admin can enable this option for a quick security response on the device. iOS 18.0+
Enable Rollback When disabled, the system does not offer the Background Security Improvement rollbacks to the user. iOS 18.0+
Enable When disabled, the Background Security Improvement is not offered to the user for installation. iOS 18.0+