Category filter
How to enforce software updates on iOS devices?
The Update OS remote action in Hexnode UEM allows IT administrators to remotely deploy iOS and iPadOS updates to managed devices, ensuring consistent security, performance, and access to the latest management features.
Why Enforce iOS Software Updates?
Regularly updating mobile operating systems is a critical security practice. By enforcing the latest versions of iOS/iPadOS, organizations can eliminate software vulnerabilities, maintain device performance, and ensure that all endpoints support current enterprise applications and management profiles.
- Security: Mitigates vulnerabilities that could lead to data breaches.
- Productivity: Grants users access to the latest productivity tools and OS optimizations.
- Management: Unlocks advanced administrative features only available in newer OS iterations.
Prerequisites for iOS OS Updates
To successfully execute remote software updates, devices must meet specific management and hardware criteria.
| Requirement | Specification |
|---|---|
| Management State | Devices must be Supervised. |
| ADE Enrollment | Required only for devices running versions prior to iOS 10.3. |
| Network | Updates over 100 MB require a Wi-Fi connection. |
| Battery/Power | Devices usually require being plugged in or charged to at least 50%. |
| Storage | Sufficient free storage space must be available on the device for the update package. |
Step-by-Step Guide: Enforcing iOS Software Updates
Administrators can initiate updates for individual devices or in bulk from the Hexnode console.
- Log in to the Hexnode UEM portal.
- Navigate to the Manage tab.
- Check the box next to the target iOS device(s).
- Navigate to Actions > Updates > Update OS.
- Select one of the following deployment options:
Software Update Deployment Options
| Option | Functional Behavior |
|---|---|
| Download Only | Updates are downloaded to the device but not installed. The user must manually tap Settings > General > Software Update > Install. |
| Download and Install | Updates are downloaded over the air and installed automatically. If the device has a passcode, the user must enter it to proceed. |
- (Optional) Enable Clear Passcode to Force Update Installation: If selected, the device passcode is removed to allow immediate installation without user intervention.
Warning:
The device remains unprotected until the user sets a new passcode.
- Click Execute (or the respective confirmation button).
Troubleshooting Guides
| Problem | Resolution |
|---|---|
| Update remains in “Downloading” status | Verify the device is connected to a stable Wi-Fi network, as updates over 100 MB will not download via cellular data. |
| Installation fails due to battery | Ensure the device is connected to a power source or has a battery level of at least 50%. |
| Update fails with “Insufficient Space” | Manually or remotely remove unnecessary applications or media to free up the required storage space for the update package. |
| Passcode prompt blocks installation | If the admin did not check Clear Passcode to Force Update Installation, the user must physically enter the passcode on the device to start the installation. |
Frequently Asked Questions (FAQs)
Does remote OS update work on unsupervised iPhones?
No. The ability to enforce software updates remotely is strictly limited to Supervised iOS and iPadOS devices.
Will Hexnode install updates that were already downloaded manually?
Yes. If the Download and Install option is selected, Hexnode will trigger the installation of any update packages already present on the device.
What happens to device security if the passcode is cleared for an update?
The device will be temporarily unprotected. Once the update installation is complete, the user will need to set a new passcode to restore device security.
