Control OS Updates device policy 编辑

The Control OS Updates device policy lets you deploy:

• The latest OS updates to supervised iOS devices.

  The OS Update device policy only works for supervised devices enrolled in Apple Deployment Program.

• The latest OS and app updates to DEP-enrolled macOS devices running macOS 10.11.5 and later.

• The latest OS updates to supervised Samsung SAFE devices.

  For Samsung SAFE devices, XenMobile sends the Control OS Updates policy to Secure Hub, which then applies the policy to the device. The Manage > Devices page shows when XenMobile Server sends the policy and when the device receives the policy.

To add or configure this policy, go to Configure > Device Policies. For more information, see Device policies.

iOS settings

• OS update options: Both of the options download the latest OS updates to supervised devices according to the OS update frequency. The device prompts users to install updates. The prompt is visible after the user unlocks the device.
• OS update frequency: Determines how frequently XenMobile checks and updates the device OS. The default is 7 days.

macOS settings

• OS update options: Both of the options download the latest macOS updates according to the OS update frequency. You can choose to install the updates or notify the user through the App Store that updates are available.
• OS update frequency: Determines how frequently XenMobile checks and updates the device OS. The default is 7 days.

Get status for iOS and macOS update actions

For iOS and macOS, XenMobile doesn’t deploy the Control OS Updates policy to devices. Instead, XenMobile uses the policy to send these MDM commands to devices:

• Schedule OS Update Scan: Requests that the device performs a background scan for OS updates. (optional for iOS)
• Available OS Updates: Queries the device for a list of available OS updates.
• Schedule OS Update: Requests that the device performs macOS updates, app updates, or both. Thus, the device OS determines when it should download or install the OS and app updates.

The Manage > Devices > Device details (General) page shows the status of scheduled and available OS update scans, and scheduled macOS and app updates.

For more details about the status of update actions, go to the Manage > Devices > Device details (Delivery Groups) page.

For details such as available OS updates and the last installation attempt, go to the Manage > Devices > Device details (Properties) page.

Samsung SAFE settings

Samsung Enterprise FOTA, also referred to as E-FOTA, lets you determine when devices get updated and the firmware version to use. To use E-FOTA:

1. Create a Samsung MDM License Key device policy with the keys and license information you received from Samsung. For more information, see Samsung MDM license key device policy.

2. Create a Control OS Updates device policy to enable Enterprise FOTA.

   

   • Enable Enterprise FOTA: Set to On.
   • Enterprise FOTA License Key: Select the Samsung MDM License Key device policy name.

Android Enterprise settings

• System update policy: Determines when system updates occur. If you enable the Control Enterprise FOTA setting, updates occur automatically, regardless of the configuration for this setting.
  • Automatic: Installs an update when it is available.
  • Windowed: Installs an update automatically within the daily maintenance window specified in the Start time and End time.
    • Start time: The start of the maintenance window, measured as the number of minutes (0 - 1440) from midnight in the device local time. Default is 0.
    • End time: The end of the maintenance window, measured as the number of minutes (0 - 1440) from midnight in the device local time. Default is 120.
  • Postpone: Allows a user to postpone an update for up to 30 days.
• Allow over-the-air upgrade: If disabled, user devices can’t receive software updates wirelessly. The default is On.
• Control Enterprise FOTA: If enabled, Samsung devices check for the latest update and install it automatically. When disabled, users can check for updates and install them manually. For Android Enterprise devices running Samsung Knox 3.0 or later. Default is Off.
  • Enterprise FOTA License Key: Select the License Key to use when checking for updates. You can configure this setting in the Samsung MDM License Key policy. For Android Enterprise devices running Samsung Knox 3.0 or later. Default is None. The key can be set using the Samsung MDM license key device policy. See Samsung MDM license key device policy.