We have tested this script using a self-service policy. The test MacBook is on macOS Big Sur and we have tried using the 12.4 and 12.5 macOS Monterey installer. The account is a standard account with securetoken and FileVault enabled.

The policy runs but we get stuck on the waiting screen. After checking the logs, we keep getting this error "Error: could not get authorization ...." Any insight or ideas to fix this error?

I removed all my helper prompts, and deferments. I used your fetch installer and sent it to a log to verify it is in fact downloading. It does. I get the full screen and it just hangs. I am using the script above.

Logs do not tell me much:

Check to see if the device you are testing has both a bootstrap token and secure token. FileVault enabled for all users, including any managed accounts for Secure token. Check to see if there's a Bootstrap token by running this command from admin account: 

sudo profiles status -type bootstraptoken

If response = NO run this to install: 

sudo profiles install -type bootstraptoken

 In order to successfully run forced update on M1 Macs you will need both the above or script will report it has run successfully but not complete the install. 

sudo profiles status -type bootstraptoken

sudo profiles install -type bootstraptoken

all of the bootstrap statues are good and I was able to validate my bootstrap secure key as well using the following:

Validation: 

sudo profiles validate -type bootstraptoken

Status:

sudo profiles status -type bootstraptoken

Output:

profiles: Bootstrap Token supported on server: YES

profiles: Bootstrap Token escrowed to server: YES

and:

profiles: Bootstrap Token escrowed on server: YES

profiles: Bootstrap Token validated.

Thanks. 

let me try that. But it all worked perfectly before now. 

Can you send an example, please?

Appreciateed.

I see exactly what your saying:

+ fvPass=AppleScript

+ heading='Please wait as we prepare your computer for macOS Monterey...'

+ description='

Gents: I would recommend utilizing this https://github.com/grahampugh/erase-install script/workflow by Graham to do your updates and fresh installs. It works on both intel and silicon. 

Just an update:

I was able to get the script to work on Silicon laptops by editing the apple script poprtion. Leaving the string at the beginning and editing the ending portion from AppleScript to > APPLESCRIPT which matched the top portion. 

In testing, before I ran the script captures the full fvPass and uses it. 

In Intel, right now I see the same behavior, but it stalls at the full window. 

Logs look the same. Nothing much there. 

I keep seeing these in the osinstall.log. The script without any of my deferments or helper prompts ran well on an M1 mac. But on my intel, standard user, Big Sur laptop. Same .pkg, same script. I verified bootstrap and secure tokens. 

One: 

2022-08-01 11:24:29-05 MacBook-Pro osinstallersetupd[28871]: ROM Features returned: 68703483254

2022-08-01 11:24:30-05 MacBook-Pro osinstallersetupd[28871]: ROM Features returned: 68703483254

2022-08-01 11:24:30-05 MacBook-Pro osinstallersetupd[28871]: mountDiskImageWithPath: /Applications/Install macOS Monterey.app/Contents/SharedSupport/SharedSupport.dmg

2022-08-01 11:24:30-05 MacBook-Pro osinstallersetupd[28871]: Using product <OSISCollectionInstallProduct: 0x7fcfba8b57c0> at distance 10

2022-08-01 11:24:30-05 MacBook-Pro osinstallersetupd[28871]: Helper tool loaded

2022-08-01 11:24:30-05 MacBook-Pro osinstallersetupd[28871]: ROM Features returned: 68703483254

2022-08-01 11:24:30-05 MacBook-Pro osinstallersetupd[28871]: Install was requested to a disk that was not evaluated. Blocking on evaluation.

2022-08-01 11:24:30-05 MacBook-Pro osinstallersetupd[28871]: ROM Features returned: 68703483254

2022-08-01 11:24:30-05 MacBook-Pro osinstallersetupd[28871]: ROM Features returned: 68703483254

2022-08-01 11:24:30-05 MacBook-Pro osinstallersetupd[28871]: The requested target is not valid because: BIPreflightError - Domain: com.apple.BuildInfo.preflight.error Code: 9 UserInfo: {

    NSLocalizedDescription = "The update cannot be installed on this computer.";

    NSLocalizedFailureReason = "The update cannot be installed on this computer.";

    NSUnderlyingError = "Error Domain=BIErrorDomain Code=2 \\"(null)\\"";

Two:

/Library/Application Support/JAMF/tmp/Upgrade to macOS Monterey M1 and Intel: line 49: /Applications/Install macOS Monterey.app/Contents/Resources/startosinstall: No such file or directory

Error: The update cannot be installed on this computer.

By using the agreetolicense option, you are agreeing that you have run this tool with the license-only option and have read and agreed to the terms.

If you do not agree, press CTRL-C and cancel this process immediately.

(this one is repeated over and over)

Now I see this in the log, after coping a fresh one:

@rcole  the process you sent at that link is a wonderful process. In testing, it works perfectly. It does take some reading and some configuration but the individual contributors have done a magnificent job. Just amazing!

What a community!

@dvasquez I'm so glad to hear this!  😀

My initial tests are failing on a M1 MBA running Big Sur with the full Monterey installer present. Get the helper screen for eternity. Never completes the process.

This simply is not working with Big Sur M1's with FileVault enabled:

#!/bin/bash

# Pulls the current logged in user and their UID
currUser=$(ls -l /dev/console | awk '{print $3}')
currUserUID=$(id -u "$currUser")

fvPass=$(
# Prompts the user to input their FileVault password using Applescript. This password is used for a SecureToken into the startosinstall.
/bin/launchctl asuser "$currUserUID" sudo -iu "$currUser" /usr/bin/osascript <<APPLESCRIPT
set validatedPass to false
repeat while (validatedPass = false)
-- Prompt the user to enter their filevault password
display dialog "Enter your macOS password to start the macOS upgrade" with icon file "System:Library:CoreServices:CoreTypes.bundle:Contents:Resources:FileVaultIcon.icns" default answer "" buttons {"Continue"} default button "Continue" with text and hidden answer
set fvPass to (text returned of result)
display dialog "Re-enter your macOS password to verify it was entered correctly" buttons {"Continue"} with icon file "System:Library:CoreServices:CoreTypes.bundle:Contents:Resources:FileVaultIcon.icns" default answer "" default button "Continue" with text and hidden answer
if text returned of result is equal to fvPass then
set validatedPass to true
fvPass
else
display dialog "The passwords you have entered do not match. Please enter matching passwords." with title "FileVault Password Validation Failed" buttons {"Re-Enter Password"} default button "Re-Enter Password" with icon file "System:Library:CoreServices:CoreTypes.bundle:Contents:Resources:FileVaultIcon.icns"
end if
end repeat
AppleScript
)
##Heading to be used for jamfHelper

heading="Please wait as we prepare your computer for macOS Monterey. Keep plugged in. Do not close lid..."

##Title to be used for jamfHelper

description="

This process will take approximately 20-30 minutes.

Once completed your computer will reboot and begin the upgrade which can take an additional 20-30 minutes."

##Icon to be used for jamfHelper

icon=/Applications/Install\\ macOS\\ Monterey.app/Contents/Resources/InstallAssistant.icns

##Launch jamfHelper

/Library/Application\\ Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper -windowType fs -title "" -icon "$icon" -heading "$heading" -description "$description" &

jamfHelperPID=$!

##Start macOS Upgrade

echo $fvPass | /Applications/Install\\ macOS\\ Monterey.app/Contents/Resources/startosinstall --agreetolicense --forcequitapps --nointeraction --user $currUser --stdinpass --pidtosignal $jamfHelperPID >> /var/log/startosinstall.log 2>&1 &

I'm getting following error in /var/log/startosinstall.log while trying to upgrade an M1 pro 16" macbook.

Error: could not get authorization...

By using the agreetolicense option, you are agreeing that you have run this tool with the license only option and have read and agreed to the terms

I would test and use this process:  https://github.com/grahampugh/erase-install 

It is really robust and deployable but I would test it for your environment. 

Thank you.

Thanks, I will definitely start testing that.  The process I was testing just worked without me doing anything.  It doesn't seem to be 100% working so having another process is great.  Thanks again I'll give that one a shot.

This is *not* working for me to update M1 Macs already on Monterey up to 12.5.1. For users *confirmed* to have SecureToken, and with a meticulously correctly typed password, the startosinstall.log *still* shows "Error: could not get authorization…" Hope someone has some insight; management urgently wants all these systems patched.

This solution has been working so beautifully on my Intel and M1 machines, thank you!!  Is it possible to add a conditional statement in the beginning that double checks that the installer is downloaded before proceeding and then prompt the user to contact IT for support?  I tried playing with it, but my scripting isn't that good yet.  

Sorry that posted in the wrong place - was meant as a separate question for me. 

Mentioned this above too. It’s the only proven solution that I’ve made work, and it’s very intuitive and a time-saver.

The problem we're running into is that the double password check isn't working. I can type in 2 different passwords and never get the "Please enter matching password" dialogue. It just jumps to the black update screen "Please wait..." We have the exact script posted above with the APPLESCRIPT fix. Any thoughts?

I downloaded 12.6.1 from the link below and have it installed to the /Application folder. When it runs, it errors out pretty quick with the below error message. I'm looking for other options to deploy 12.6.1, because I'm having issues with the erase-install.sh installing correctly on users devices.

https://scriptingosx.com/2021/10/download-full-installer-update/

Error:

Script result: By using the agreetolicense option, you are agreeing that you have run this tool with the license only option and have read and agreed to the terms.
If you do not agree, press CTRL-C and cancel this process immediately. Preparing to run macOS Installer... Preparing:

Preparing: 32.6% Failed to download required installer asset (SFR).