Enforce Patch Deadlines in Hexnode UEM: Configuration Guide

Quick Summary

The Enforce Patch Deadline automation action in Hexnode UEM allows IT administrators to ensure that targeted Apple devices are updated to a specified OS and build version within a defined deadline. If the update is not installed by the deadline, Hexnode enforces the update on the device. Administrators can set a patch deadline — the date and time by which the specified update must be installed on the device. This is useful when administrators need to ensure that devices meet organizational requirements, such as maintaining a minimum OS version for access to corporate resources, meeting security standards, or supporting business applications that require a specific OS version.

Supported Platforms

Prerequisites

Ensure the following requirements are met before configuring Enforce Patch Deadline:

• Declarative Device Management (DDM): DDM must be active on the device. For more information, see Declarative Device Management.
• Enrollment Type: User Enrollment is not supported. The action is supported on all other Apple enrollment types. For more information, see Apple Enrollment Types.

Steps to configure Patch Deadline

1. Log in to Hexnode UEM.
2. Navigate to the Automate tab and click New Automation.
3. Select the required platform.
4. Under Create New Automation, select Quick.
5. Under Triggers and Schedules, select when the configured action should be sent to the target devices. The selected trigger determines when the patch deadline configuration is delivered to the devices.
   • Apply Now – Sends the configured action to the target devices immediately.
   • On a Schedule – Sends the configured action to the target devices according to the selected schedule. Each time the schedule runs, the action is sent to the devices.
   • Event – Sends the configured action to the device when the selected event occurs.

6. Under Choose Actions, navigate to Patches and Updates and select Enforce Patch Deadline.
7. Configure the following settings:
   • Target OS version – Select the OS version to be enforced on the device.
   • Target build version – Specify the build version to be enforced on the device.
   • Time for enforcing the update – Specify the date and time by which the update must be installed on the device.
   • Details URL – Enter the URL of a webpage containing additional information about the update.

   After configuring the settings, click Confirm.

8. Under Assignments, specify the devices or users to which the automation should apply. You can target devices or users using:
   • Included Groups – Select the device or user groups to which the automation should apply.
   • Excluded Groups – Select the device or user groups to exclude from the automation.
   • Filters – Create custom filters to target devices or users based on specific attributes.
9. Under Review, verify the configured automation settings.
10. Click Save to create the automation.

What Happens at the Device End?

Once the configured trigger is met, the action is sent to the device, the specified update becomes available for installation. The user is notified about the available update and can choose to install it or defer the update until the configured deadline. If the update is not installed by the deadline, Hexnode enforces the update on the device.

Related Topics

Patch Management with Hexnode UEM