Manage macOS Auto-Updates on devices

When you create macOS Auto-Update Configurations in the Security Library, you can apply them to your managed devices either directly, or through a policy. Each type of configuration can include various options that control different areas of macOS updates on managed devices, such as automatically downloading and installing critical updates, or allowing users to install preview features, if applicable.

To apply a macOS Auto-Update Configuration to managed devices:

  1. To apply a macOS Auto-Update Configuration to one or more macOS devices using the Devices tab:
    1. Select the Devices tab in top navigation.
    2. Select one or more macOS devices in the list.
    3. In the left panel, click Security.
    4. In the Security area that appears, in the Updates section, under macOS Updates, on the right of Auto-Update, click Set.
    5. In the Security Configuration Library view that appears, select a macOS Auto-Update Configuration, and click Apply to Device.

      NOTE: You can only select and apply a single macOS Auto-Update Configuration to a device.

    For more information about working with devices using the Devices tab, see Managing devices.

  2. To apply a macOS Auto-Update Configuration to one or more devices using policies:
    1. Select the Policies tab in top navigation.
    2. Complete one of the following steps:
      • To create a policy, click Add New.
      • To edit an existing policy, click an individual policy to open the policy details.
    3. In the Applies Tosection, select one or more labels associated with target devices. For more details about labels, see Using labels to group similar items.
    4. In the right pane, in the Resources tab, click Add Resources to open the drop-down list, and then click Security to open a dialog.
    5. Slide the Link toggle to link/unlink a a macOS Auto-Update Configuration, as applicable.
      • To link a macOS Auto-Update Configuration to policy, slide the Link toggle to right. The color of the toggle changes to green indicating the resource is linked.
      • To unlink a previously linked a macOS Auto-Update Configuration, slide the Link toggle to left. The color of the toggle changes to red indicating the resource is unlinked.
    6. (Optional) In the Options column, click the icon to open Resource Options dialog. Select one of the following Compliance Type:
      • Include - Select this option to include the resource when determining the compliance status.
      • Exclude - Select this option to exclude the Resource when determining the compliance status.

      NOTE: You can only associate a single macOS Auto-Update Configuration with a policy.

    7. Click Add Resources to associate the macOS Auto-Update Configuration to the policy. You can view the resource in the Resources pane.
    8. Click Push Resource to deploy the added the macOS Auto-Update Configuration to the target devices or users.
      For more information about policies, see Using policies to manage device configurations.