Patching Mac Endpoints

Products

• Client Management Suite

Issue/Introduction

How to patch Mac OS 12 and newer versions?

Environment

Release: 8.6 and 8.7.x

Cause

Per the technical articles listed below, Mac OS 12 and 13 patch are only supported after applying pointfixes.

Resolution

WORK AROUND: USE MacOS MDM

First of all (and actually the most challenging part) is to configure MacOS MDM. 
Some information how to configure macOS MDM are located here:

 

 - https://imsacademy.broadcom.com/catalog/courses/2647707 [registration  (email+password) needed]
 - Setting up MDM for macOS

 

After MacOS MDM is configured and MacOS endpoints are enrolled, it will be possible to run a "Check Updates" task to get a list of updates that need to be installed on MDM managed endpoints. Task is added to the queue of MDM commands for every managed MDM device and executed as soon as macOS device gets it. Task result is the list of applicable and not yet installed updates for each endpoint. Consolidated view of all such updates(from all devices) is visible in the console UI under  "MDM - MacOS"  workspace.

Additional Information

Technical Documentation: https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/it-management-suite/ITMS/Administration/About-Modern-Device-Management.html

Mac OS 13 support matrix: https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/it-management-suite/ITMS/Platform-and-OS-Support/Full-Support-Statements/macos-13--ventura--support-statement.html

Mac OS 12 support matrix: https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/it-management-suite/ITMS/Platform-and-OS-Support/Full-Support-Statements/macOS-12-Support-Statement.html

Mac OS 11 support matrix: https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/it-management-suite/ITMS/Platform-and-OS-Support/Full-Support-Statements/MacOS-11-Big-Sur-Support-Statement.html