iOS Software Update Reference Policy Configuration

This document provides a structured process to configure the software update reference policy for iOS devices using the UEM platform. It guides IT administrators on managing system and security updates efficiently through Apple's declarative device management (DDM) framework.

Step 1

Welcome to the UEM platform. In this step, you will explore the software update reference policy for iOS, which aids IT administrators in managing the delivery of system and security updates to devices. This policy is enhanced by Apple's new declarative device management (DDM) framework, which facilitates faster and more reliable autonomous device management.

Step 2

Please ensure this feature is only used on iOS devices running iOS 18 or later. It is not available for user-enrolled devices. To establish the update reference point, navigate to the Policies tab.

Step 3

Click "New Policy." You can select either from a template or start a new policy. To create a new policy, select the platform and click "Next."

Step 4

Select the "Enterprise" option.

Step 5

Proceed by clicking "Next." Clear the name and description fields as needed.

Step 6

Navigate to the patches section.

Step 7

In the update section, select the software update patches. This is applicable to unsupervised iOS devices running iOS 18 or later.

Step 8

Click "Configure" to view multiple configuration options.

Step 9

Press the "I" icon to learn more about each option. The configuration window offers sections such as "Start From Notification," where you can decide whether users should see all updates or only receive alerts just before installation.

Step 10

Under the "Automatic Software Updates" section, choose how OS and security updates are downloaded and installed—automatically, manually, or based on user preference.

Step 11

Configure automatic download of OS updates. In the "Beta Updates" section, determine whether to allow or restrict users from joining Apple's beta programs or security response initiatives.

Step 12

Decide how devices handle Apple's quick security patches.

Step 13

Set the security patches to install automatically or allow users the option to remove them.

Step 14

In the "Software Update Reference" section, set a delay for stability updates of up to 90 days. Choose if users can see all available versions or only the latest one.

Step 15

Complete the configuration process.

Step 16

Move to policy targets. Select the device groups to which the policy should be applied.

Step 17

Click "Okay" to confirm your selections.

Step 18

Click "Save" and wait for the policy to validate.

Step 19

Once configuration is complete, the policy is deployed, and devices will proactively adhere to the defined update behavior through the EDM.

Step 20

This setup ensures updates are installed as scheduled, reducing the need for repeated communication between the device and the server.

Step 21

This software update preference for iOS allows the IT team to control update timings, automate security patches, and minimize interruptions.

Step 22

All of these functions are powered by Apple's EDM framework. For more detailed information, refer to our help documentation or contact our support team.

Step 23

Thank you for your attention.