Skip to main content
iOS10.3-|Supervised
tvOS
The screenshots in this manual show the Japanese version of each screen.

OS Update Management (Legacy)

info

This page describes the template item OS Update Management (Legacy) in the admin console.

On devices running iOS / iPadOS 17 or later, macOS 14 or later, or tvOS 18.4 or later, you can also use OS Update Management (DDM). In a template, you can force an update by specifying the OS version to apply and a deadline, and configure update-related restrictions.
On devices running iOS / iPadOS 27, macOS 27, or tvOS 27 or later, the feature on this page does not run OS updates. Use OS Update Management (DDM).

▶︎Related video (OS Update Management)

You can instruct managed devices to run an OS update at a specified time. You configure this per template, which helps you keep the devices assigned to the same template on the same OS version.
Because you can specify the time window in which the update instruction is sent, you do not need to worry about an update starting during business hours and disrupting work.

When you run Sync with OS auto update set to ON, the device starts downloading the update data.
After the download is complete, installation starts at the next Sync.

Before installation, a confirmation pop-up for the update appears on the device, and the user can select Install Now or Later.
Whichever option the user selects, the user must then enter the device passcode.

If the user selects Later three times, only Install Now is displayed in subsequent pop-ups.

info

This feature sends the OS update instruction when the setting is On. Setting it to Off does not prevent users from updating the OS on the device.

info

Even during the period set by Defer Software Updates in a profile (for example, 90 days), you can have the OS updated automatically while preventing users from performing the update themselves.

Steps

  1. Open the template creation/edit screen.
    For details on creating a template, see Create a Management Group (Template).
  2. Set OS Auto Update to On, enter the required items, and click Save.
(1) OSItems (2) to (6) are displayed only when iOS / tvOS is selected.
(2) OS Auto UpdateItems (3) to (6) are displayed only when On is selected.
(3) OS Update Start Time

Specify the time window in which the OS update instruction is sent to managed devices.
The OS update runs at synchronization. Therefore, if no automatic synchronization takes place within the specified time window, the OS update instruction is not sent that day.
In addition, the download and installation required for the OS update cannot both run in a single automatic synchronization, so an OS update takes at least 2 days to complete.

(4) Start

The daily automatic synchronization start time (1:00 a.m.) or a manual synchronization instruction

(5) End

The end time for executing the OS update instruction.
The time at which a managed device receives the instruction varies depending on the device's communication status and other factors. If automatic synchronization runs after the time specified here, the OS update instruction is not sent.

The device cannot be used while the OS update is running, so we recommend setting a time before business hours.
Also, the time specified here is the latest time at which the OS update can start, not the time at which the OS update completes on the device.
We recommend allowing for the time the OS update takes when you specify this time.

(6) Auto Update Target Version

Specify the highest OS version targeted by the OS update instruction.
You cannot specify a version using the \* wildcard.
Even if Apple releases a version update later than the specified version, the OS update instruction is not executed.
If a version later than the specified version has already been released, the update may not run.
Note: This does not restrict OS updates that users run on the device.

(7) Auto Update Target Rapid Security ResponseA Rapid Security Response is a software release intended for urgent security fixes that do not require a full software update.
Specify the highest OS version targeted by the software update instruction.
Even if Apple releases a version update later than the specified version, the OS update instruction is not executed.
If a version later than the specified version has already been released, the update may not run.
Note: This does not restrict OS updates that users run on the device. To restrict operations on the device, use the Restrictions payload of the profile.
  1. At the next Sync, the data download instruction is sent.
    The following message is recorded in the log.
    --------------------------------------------------------------------
    Download of iOS version X.X has been scheduled
    --------------------------------------------------------------------
  2. After the data download in step 3 is complete, the data installation instruction is sent at the next Sync.
    The following message is recorded in the log.
    --------------------------------------------------------------------
    Update to iOS version X.X has been scheduled
    --------------------------------------------------------------------
warning

Device-side conditions for performing an OS update (these may vary depending on the OS version)

• Download: A Wi-Fi connection is required
• Installation: The device must be connected to power or have at least 50% battery remaining

warning

If a passcode is set on the device, the passcode must be entered to start the installation. If no passcode is set on the device, the update is installed automatically.

warning

If OS Update Management (DDM) is set to On in the same template, the settings on this page do not take effect on devices running a DDM-compatible OS version (iOS / iPadOS 17 or later, macOS 14 or later, tvOS 18.4 or later). The settings on this page are used only for devices running versions that do not support DDM.

If your environment has devices running both supported and unsupported versions, do not delete the settings on this page.