OS Update Policy
Through the OS update policy you can manage system updates for the Android and iOS/iPadOS devices.
Before you begin
This allows you to install system updates without user interaction.
- Prerequisite for the iOS/iPadOS devices to support OS update
-
- On iOS 10.3 and later, supported Software Update commands require supervision but not DEP enrollment. That means the device could either be OTA enrolled or DEP enrolled. If there is a passcode on the device, a user must enter it to start a software update.
- Prior to iOS 10.3, the supervised devices need to be DEP-enrolled and have no passcode
- Updates will not be installed if the battery level falls below 50% unless plugged in.
About this task
Creating an OS update policy
To create an OS update policy, perform the following steps:
Procedure
- Log in to BigFix WebUI.
- Go to .
- Click Create Policy on the top right corner.
-
From the list of policy types, select OS Update Policy. The OS Update
Policy page appears.
- Under the General Settings section, enter the OS update policy name and description.
- Select the Operating System.
- From the Assign Policy to Site dropdown, select the desired site.
-
Configure the OS specific settings.
- Android System Update
- This section appears when you have selected Android as operating
system. For Android, system updates can only be performed on fully
managed devices. Select the required Update
Type.
- Automatic: Installs system updates (without user interaction) once they become available. Setting this policy type immediately installs any pending updates that might be postponed or waiting for a maintenance window.
- Windowed: Installs system updates during a daily maintenance window (without user interaction). Set the start time and end time of the daily maintenance window to create a windowed policy.
- Postponed: Postpones the installation of system updates for 30 days. After the 30-day period, the system prompts the device user to install the update.
- iOS/iPadOS System Update
- This section appears when you have selected iOS/iPadOS as operating
system. For iOS/iPadOS, system updates can only be performed on
supervised devices. An open action is created when deploying this
policy that will periodically perform the selected update type.
- Version: This lists available versions found in the environment for updating to specific versions, or can chose "Latest" to update to latest regardless of version.
- Update Type:
- Download and Install: Downloads or installs the system update depending on state of device. Two applications of the policy action will be required for the update to be installed.
- Download Only: Download the software update without installing it.
- Install Only: : Installs a downloaded
update.Note: : If no passcode is set on the device, the device restarts without prompting end user when performing an install. If passcode is set, device user is prompted to install the update; user also can decline.
- Apply Frequency (Days): Select an option from the dropdown to set the frequency in which you want to run the system updates.
- Click Save.