Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Docs: OS updates page - unclear tooltip copy #22272

Merged
merged 5 commits into from
Sep 23, 2024
Merged

Docs: OS updates page - unclear tooltip copy #22272

Changes from 3 commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
ce2268c
Reference to Apple GMDF
marko-lisica Sep 20, 2024
dc78f7c
Update enforce-os-updates.md
marko-lisica Sep 20, 2024
63e23b2
Grammar tweaks
spokanemac Sep 20, 2024
3a9c86b
Update articles/enforce-os-updates.md
noahtalerman Sep 20, 2024
893eec2
Update enforce-os-updates.md
noahtalerman Sep 20, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 11 additions & 7 deletions articles/enforce-os-updates.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

_Available in Fleet Premium_

In Fleet you can enforce OS updates on your macOS, Windows, iOS, and iPadOS hosts remotely using the Fleet UI, Fleet API, or [Fleet's GitOps workflow](https://github.com/fleetdm/fleet-gitops).
In Fleet, you can enforce OS updates on your macOS, Windows, iOS, and iPadOS hosts remotely using the Fleet UI, Fleet API, or [Fleet's GitOps workflow](https://github.com/fleetdm/fleet-gitops).

Fleet UI:

Expand All @@ -18,12 +18,12 @@ Fleet API: API documentation is [here](https://fleetdm.com/docs/rest-api/rest-ap

### macOS

When a minimum version is enforced, the end users see a native macOS notification (DDM) once per day. Users can choose to update ahead of the deadline or schedule it for that night. 24 hours before the deadline, the notification appears hourly and ignores Do Not Disturb. One hour before the deadline, the notification appears every 30 minutes, and then every 10 minutes.
When a minimum version is enforced, the end users see a native macOS notification (DDM) once per day. Users can choose to update ahead of the deadline or schedule it for that night. 24 hours before the deadline, the notification appears hourly and ignores Do Not Disturb. One hour before the deadline, the notification appears every 30 minutes and then every 10 minutes.

If the host was turned off when the deadline passed, the update will be scheduled an hour after it’s turned on.

For macOS devices that use Automated Device Enrollment (ADE), if the device is below the specified
minimum version, it will be required to update to the very latest OS version during ADE before
minimum version, it will be required to update to the latest OS version during ADE before
device setup and enrollment can proceed.

### macOS (below version 14.0)
Expand All @@ -38,11 +38,19 @@ End users are encouraged to update macOS (via [Nudge](https://github.com/macadmi
| End user can defer | ✅ | ✅ | ❌ |
| Nudge window is dismissible | ✅ | ✅ | ❌ |

### iOS and iPadOS

End users will see a notification in their Notification Center after the deadline when a minimum version is enforced. They can’t use their iPhone or iPad until the OS update is installed.

### iOS and iPadOS (version 17.0 and above)
noahtalerman marked this conversation as resolved.
Show resolved Hide resolved

For iOS and iPadOS devices that use Automated Device Enrollment (ADE), if the device is below the specified
minimum version, it will be required to update to the very latest OS version during ADE before device setup and enrollment can proceed.

### Available versions for Apple hosts

The Apple Software Lookup Service (available at [https://gdmf.apple.com/v2/pmv](https://gdmf.apple.com/v2/pmv)) is the official resource for obtaining a list of publicly available updates, upgrades, and Rapid Security Responses. Make sure to use versions available in GDMF; otherwise, the update will not be scheduled.

### Windows

End users are encouraged to update Windows via the native Windows dialog.
Expand All @@ -55,10 +63,6 @@ If an end user was on vacation when the deadline passed, the end user is given a

Fleet enforces OS updates for quality and feature updates. Read more about the types of Windows OS updates in the Microsoft documentation [here](https://learn.microsoft.com/en-us/windows/deployment/update/get-started-updates-channels-tools#types-of-updates).

### iOS and iPadOS

When a minimum version is enforced, end users will see a notification in their Notification Center after the deadline. They can’t use their iPhone or iPad until the OS update is installed.

<meta name="category" value="guides">
<meta name="authorGitHubUsername" value="noahtalerman">
<meta name="authorFullName" value="Noah Talerman">
Expand Down
Loading