Category filter
Manage app patches on macOS devices using Hexnode UEM
This document will guide you on how to manage app patches on macOS devices using Hexnode.
Updates and patches are released for applications on a regular basis to improve functionality, fix bugs, and address security vulnerabilities. These updates play a crucial role in keeping software reliable and secure over time. Keeping applications up to date is essential for maintaining device performance and ensuring compatibility with the latest macOS features. Outdated apps can often lead to performance issues, and potential security vulnerabilities across the organization.
Hexnode’s App Updates feature helps configure app updates on macOS devices, enabling IT admins to define maintenance windows, configure automatic update preferences, and ensure that critical app updates are deployed without disrupting user productivity.
App patch configuration using this feature is supported only for VPP apps.
Configure updates for apps
- Login to your Hexnode UEM portal.
- Navigate to the Policies tab.
- Click on New Policy to create a new policy or select an existing policy. Provide a suitable name and description (optional) for the policy.
- Navigate to macOS > Patches & Updates > App Updates.
- Click on Configure.
App Updates
You can configure the following options under App Updates:
- Maintenance Window
- Auto-update preference
Maintenance Window
This option can be used to specify the time window during which the device undergoes app updates and other maintenance tasks.
| Setting | Description |
|---|---|
| Scheduled Day | You can choose between the following options to specify when the device can perform updates and device maintenance tasks.
|
| Scheduled Time | You can schedule the time window during which the updates and device maintenance tasks will be performed by setting the Start time and End time. |
Auto-update preference
The options below will help you configure the auto-update settings of applications.
| Setting | Description |
|---|---|
| Update all apps | On selecting this option, all applications present on the device will be updated automatically. |
| Update targeted apps only | Selecting this option will update only the targeted apps selected in the Targeted Apps section. This is useful when IT admins need to selectively manage updates for specific applications without initiating updates for all apps on the device.
To add apps under Targeted Apps:
|
| Scan for updates, do not auto-update apps | On selecting this option, the system will be scanned for any available app updates, but will not perform any automatic app updates. This allows IT admins to review the available updates and schedule the deployment as needed. |
Associate the policy to target devices
If the policy hasn’t been saved,
- Navigate to Policy Targets.
- Click on +Add Devices.
- Search and select the required device(s) to which you need to apply the policy. Click OK.
- Click on Save to apply the policy to the devices.
You can also choose to associate the policy with device groups, users, user groups, or domains/OUs from the left pane of the Policy Targets tab.
If you have already saved the policy,
- Navigate to Policies > My Policies and select the required policy.
- Click on Manage and select Associate Targets.
- Select the required Devices, Users, Device Groups, User Groups or Domains/OUs.
- Click on Associate.
