Software Update Settings (DDM)

IBM® MaaS360® enhances the macOS policy payload for Software Update Settings by using Declarative Device Management (DDM). With the release of macOS 15, Apple deprecates older methods of OS software update management, including the earlier Mobile Device Management (MDM) profiles for software update restrictions and commands. Henceforth, Apple promotes the use of Declarative Device Management (DDM) and new Software Update Enforcement and Software Update settings for a more proactive and automated approach.

Software Update Settings

The following table describes the Software Update Settings that the administrator can configure on a supervised macOS device.
Policy setting Description Supported devices
Enable Software Update Settings Select the checkbox to enable the Software Update Settings. macOS 15.0+
Allow Notifications When selected (default value), the device displays all notifications that are related to software update enforcement. When cleared, the device shows only those notifications that are triggered one hour before the enforcement deadline, and the restart countdown notification. macOS 15.0+
Allow Standard UserOSUpdates When this checkbox is selected, a standard user can perform major and minor software updates. When cleared, only administrators can perform major and minor software updates. macOS 15.0+
Configure Automatic OS Update Settings Select the checkbox to configure the Automatic OS Update Settings. macOS 15.0+
Download OS Updates
Note: Select Configure Automatic OS Update Settings to view this option.
The administrator can specify whether the user can control automatic downloads of available updates. The following values are available.
  • User Controlled
    This option enables the user to control the Download OS Updates manually.
  • Disable OS Updates
    This option disables the Download OS Updates option on the device and the user cannot do any modification.
  • Push OS updates automatically
    This option enables the Download OS Updates option on the device and the user cannot do any modification.
 macOS 15.0+
Install OS Updates
Note: Select Configure Automatic OS Update Settings to view this option.
The administrator can specify whether the user can control automatic installation of available updates. The following values are available.
  • User Controlled
    This option enables the user to control the Install OS Updates manually.
  • Disable OS Updates
    This option disables the Install OS Updates option on the device and the user cannot do any modification.
  • Push OS updates automatically
    This option enables the Install OS Updates option on the device and the user cannot do any modification.
Note: When Download OS Updates is set to Disable OS Updates, then Install OS Updates cannot be set to User Controlled or Push OS updates automatically. The system does not allow this combination and an error message is displayed.
 macOS 15.0+
Install Security Update
Note: Select Configure Automatic OS Update Settings to view this option.
The administrator can specify whether the user can control automatic installation of available security updates. The following values are available.
  • User Controlled
    This option enables the user to control the Install Security Update manually.
  • Disable OS Updates
    This option disables the Install Security Update option on the device and the user cannot do any modification.
  • Push OS updates automatically
    This option enables the Install Security Update option on the device and the user cannot do any modification.
Note: When Download OS Updates is set to Disable OS Updates, then Install Security Update cannot be set to User Controlled or Push OS updates automatically. The system does not allow this combination and an error message is displayed.
 macOS 15.0+
Configure Update Deferrals Select the checkbox to configure the Update Deferrals. The administrator can delay the user visibility to software updates on devices based on the number of days (1-90 days). macOS 15.0+
Major Period In Days
Note: Select Configure Update Deferrals to view this option.
The administrator can specify the number of days to defer a major OS software update on the device. This number is 1 to 90 days from the OS release date. It cannot be extended beyond 90 days of release. The user cannot see the software updates for the mentioned number of days.		 macOS 15.0+
Minor Period In Days
Note: Select Configure Update Deferrals to view this option.
The administrator can specify the number of days to defer a minor OS software update on the device. This number is 1 to 90 days from the OS release date. It cannot be extended beyond 90 days of release. The user cannot see the software updates for the mentioned number of days.		 macOS 15.0+
System Period In Days
Note: Select Configure Update Deferrals to view this option.
The administrator can specify the number of days to defer a system or non-OS software update on the device. This number is 1 to 90 days from the OS release date. It cannot be extended beyond 90 days of release. The user cannot see the software updates for the mentioned number of days.		 macOS 15.0+
Configure Background Security Improvement Select the checkbox to configure the Background Security Improvement settings. The administrator can enable this option for a quick security response on the device. macOS 15.0+
Enable
Note: Select Configure Background Security Improvement to view this option.
When cleared, the Background Security Improvement is not offered to the user for installation.		 macOS 15.0+
Enable Rollback
Note: Select Configure Background Security Improvement to view this option.
When cleared, the Background Security Improvement rollbacks are not offered to the user.		 macOS 15.0+