XenMobile Server Current Release

Control OS Updates device policy

The Control OS Updates device policy lets you deploy:

  • The latest OS updates to supervised iOS devices.

    The OS Update device policy only works for supervised devices enrolled in the Apple Deployment Program.

  • The latest OS and app updates to DEP-enrolled macOS devices running macOS 10.11.5 and later.

  • The latest OS updates to Android Enterprise Work Managed devices.

    For Android Enterprise Work Managed devices, XenMobile sends the Control OS Updates policy to Secure Hub, which then applies the policy to the device. The Manage > Devices page shows when XenMobile Server sends the policy and when the device receives the policy.

To add or configure this policy, go to Configure > Device Policies. For more information, see Device policies.

iOS settings

Image of Device Policies configuration screen

  • OS update options: Both of the options download the latest OS updates to supervised devices according to the OS update frequency. The device prompts you to install updates. The prompt is visible after you unlock the device.
  • OS update frequency: Determines how frequently XenMobile checks and updates the device OS. The default is 7 days.
  • OS updates version: Specifies the OS version to use to update the supervised iOS devices. The default is Latest version.
    • Latest version: Select to update to the latest OS version.
    • Specific version only: Select to update to a specific OS version and then type the version number. This option is applicable for iOS 11.3 or later.

macOS settings

Image of Device Policies configuration screen

  • OS update options: Both of the options download the latest macOS updates according to the OS update frequency. You can choose to install the updates or notify the user through the App Store that updates are available.
  • OS update frequency: Determines how frequently XenMobile checks and updates the device OS. The default is 7 days.

Get status for iOS and macOS update actions

For iOS and macOS, XenMobile doesn’t deploy the Control OS Updates policy to devices. Instead, XenMobile uses the policy to send these MDM commands to devices:

  • Schedule OS Update Scan: Requests that the device does a background scan for OS updates. (optional for iOS)
  • Available OS Updates: Queries the device for a list of available OS updates.
  • Schedule OS Update: Requests that the device does macOS updates, app updates, or both. So, the device OS determines when it has to download or install the OS and app updates.

The Manage > Devices > Device details (General) page shows the status of scheduled and available OS update scans, and scheduled macOS and app updates.

Image of Device details screen

For more details about the status of update actions, go to the Manage > Devices > Device details (Delivery Groups) page.

Image of Device details screen

For details such as available OS updates and the last installation attempt, go to the Manage > Devices > Device details (Properties) page.

Image of Device details screen

Image of Device details screen

Android Enterprise settings

Image of Device Policies configuration screen

  • System update policy: Determines when system updates occur. If you enable the Control Enterprise FOTA setting, updates occur automatically, regardless of the configuration for this setting.
    • Automatic: Installs an update when it’s available.
    • Windowed: Installs an update automatically within the daily maintenance window specified in the Start time and End time.
      • Start time: The start of the maintenance window, measured as the number of minutes (0 - 1440) from midnight in the device local time. Default is 0.
      • End time: The end of the maintenance window, measured as the number of minutes (0 - 1440) from midnight in the device local time. Default is 120.
    • Postpone: Allows a user to postpone an update for up to 30 days.
    • Default: Sets the update policy to the system default.
  • Allow over-the-air upgrade: If disabled, user devices can’t receive software updates wirelessly. The default is On.
Control OS Updates device policy