Efficiently manage OS updates on your iOS devices to ensure they remain secure, compliant, and up-to-date. This guide walks you through configuring OS update policies, including enforcement rules, deferral periods, and user notifications for devices managed via MDM.
Configuring Your iOS OS Update Policy
Navigate to Settings-> Policy Management, then click on 'Apple IOS Device policies/ Apple Ipad OS device policies'.
From the left-hand menu, select 'OS Update' and then click the 'Add OS Update Configuration' button to begin creating a new policy.
General Notifications
When enabled, users receive update notifications, including reminders and countdowns to enforce deadlines. Disabling notifications restricts alerts to one hour before enforcement, minimizing user disruption
Rapid Security Response (RSR)
Admins can allow or block users from installing or rolling back Rapid Security Response updates. Enabling these options ensures swift response to critical vulnerabilities without waiting for major releases
Automatic Downloads and Installations
Admins may set automatic OS update downloads and installations:
Allowed: Users can toggle these features on/off for flexibility.
Always ON: Forces automatic actions, ensuring updates are acquired and installed promptly.
Always OFF: Blocks automatic update behavior, giving admins more control over update rollout.
Recommended Updates to Show
You can configure which update versions are presented to end-users when multiple updates are available. You have three options:
Show only newest: Only the highest numbered update is shown to users, promoting faster adoption of the latest security and feature updates.
Show only oldest: Displays only the earliest available update version, useful in staged rollouts or testing environments.
All: Users see every available update version, offering maximum flexibility.
Deferral Periods
Admins can specify the number of days to defer launching a major or minor OS update. Once set, devices will delay updates by the configured number of days after the release date, helping with phased deployments and compatibility testing.
Software Update Enforcement
Control when and how devices must apply updates:
No enforcement: Updates are optional for users; no strict deadline for installation.
Enforce minor/major update after N days: Forces users to install updates after a set period.
Enforce specific version: Mandate installation of a chosen version by a selected date, useful for emergency security updates or regulatory compliance.
By configuring these OS update policies, you can ensure your organization's iOS devices are managed effectively, balancing security requirements with user flexibility. For more device management options, explore our other policy settings.