SimpleMDM supports the ability to remote perform iOS and iPadOS software updates on devices. This article covers the different configurations and commands that can be used.

Modern iOS Software Updates (iOS 17+)

"Managed Software Updates" profile

This profile, which is technically a Declaration using Apple's Declarative Device Management framework, is the recommended method for deploying macOS Software Updates on devices running macOS 14 or greater. This profile provides significant improvements in terms of reliability, user experience, and granular control.

To create this profile, go to Configs > Profiles > "Create Profile" > Managed Software Updates. Once created, assign the profile to your Groups to apply it to devices in those groups.

Version: In this field, select what OS version you want to enforce.

• Latest Minor Version: Always install the latest minor OS version available.
• Latest Major Version: Always install the latest minor and major OS version available.
• Minimum Specific Version: Enforce a specific OS version to install. If that version is not available to the device at the time of the update, the next closest available version will be installed.
  • Note: For macOS software updates, make sure to set the "macOS Version" field.
• Latest Version Minus: Enforce the second latest (N-1), third latest (N-2), etc. OS version available.

Enforce By: In this field, select the date that you want the OS update to be installed on.

• Specific Date: When selected, the admin can pick a specific date to enforce the update on targeted devices. This option is typically preferred if you just want to enforce a one-off OS update. The profile will need to be updated to enforce subsequent updates.
  • Enforcement Date: This is the date the update will be installed on devices. Targeted devices will download the update files prior to the enforcement date so that the device is ready to install at the enforcement time.
• Relative Date: This allows admins to select the number of days after Apple releases an OS version to enforce the update. This option is typically preferred if you want to automatically keep devices on latest versions within a certain period of time after Apple releases them.
  • Days After Public Release: When using a relative date, this is the number of days after Apple releases the OS update to be enforced. For example, if iOS 26.0 is released on September 15, 2025 and 15 days is selected, the update will be enforced on September 30, 2025.

Enforcement Time: This is the local time that the update will be enforced on devices. Devices will interpret this and use the local timezone set on the device itself to determine the correct time. For example, if 8:00 is selected, devices will always install it at 8am regardless of what timezone they are in.

Details Page URL: This is an optional URL that end-users can click when they receive the notification prompts. You can use this to display your own internal documentation, for example.

Enable additional days until update for devices that enroll after the original enforcement date: This option allows you to add an additional grace period for devices that enroll after the enforcement date and receive this profile so that they are not immediately forced to update.

Managed Software Updates Notes:

• End-User Experience: As the enforcement date & time get closer, device users will receive notifications with increasing frequency encouraging them to update their device and letting them know that if they choose not to, it will be forcefully installed at the enforcement date.
• Checking Managed Software Updates configuration on devices: To view the configuration set on the device, go to System Settings > General > Device Management > click the top-level MDM profile (usually your account/org name) > under "Device Declarations", click "Required Software Update". This will display the payload values including required OS version and enforcement date.
• More reading: See Apple's Deployment Guide documentation for more resources and information on managing Software Updates.

Legacy iOS Software Updates (macOS 16.x and earlier)

"Software Update Policy for iOS" profile

**The commands mentioned below are deprecated in iOS 26 and will no longer work. Use Managed Software Updates profile instead for iOS 17+.

This profile provides several options for scheduling iOS software updates.

Version Type:

• Latest Minor Version: This option will only update devices to the latest minor OS version available to the device (ex. 16.0 --> 16.1.1)
• Latest Major Version: This option will always update devices to the latest OS version available, including both major and minor updates.

Update:

• Immediately: Will attempt to perform the update as soon as possible.
• During Window: Will only send commands to update during a scheduled window between the "Start Hour" and "End Hour" selections. We recommend allowing at least 2-3 hours for this window, as updates can take quite a while to download.

Time zone: The timezone used for the update window specified above.

Permitted days: The days of the week that updates will be attempted.

"Install Update" and "Update OS Version" Device Actions

For legacy software updates, the command to update can be sent as a device action from the Device Details page.

• This option will require you to specify one of the available OS updates to install.
• "Download Only" will download the update, but will not initiate the installation without further action.

• "Install As Soon As Possible" will download the update and attempt to install it. User interaction may or may not be required. See notes below.

   

Legacy iOS Software Update Notes:

• For iOS updates to occur, if a passcode is present, the user will need to enter their passcode on the device. If no passcode is present, the update can be performed without user interaction.
• The OS update file must be downloaded before it can be installed. This process can take a while. The update command may need to be sent again after download to initiate the installation.
• The legacy Apple MDM commands for software updates are known to have bugs and reliability issues.
• For troubleshooting, see Why isn't the "Update iOS" feature working?
• For best results on iOS/iPadOS 17+, use the Managed Software Updates profile.