Skip to main content
Question

Managed Software Updates did not apply?

  • November 24, 2025
  • 6 replies
  • 72 views

Forum|alt.badge.img+1

Running a Jamf Cloud instance, and testing various methods for software update management.
I pushed out a managed software update to two test devices, update was configured to allow a max of three deferrals. This is the behavior experienced by both endpoints, each time a managed update was pushed:

  1. Maximum deferrals were selected, or deferral notifications otherwise ignored.
  2. Users received notifications that their computers would restart.
  3. No updates applied, computers did not restart.
  4. Logs reported that AvailableOSUpdates had changed

Bootstrap tokens are escrowed for every device in our inventory. Managed updates were pushed multiple times, reporting the same error at step four each time. No new updates were published between attempts.

Unless I’m mistaken, shouldn’t updates automatically authorize if a valid bootstrap token is escrowed in Jamf? Why did the available updates never apply?

6 replies

Chubs
Forum|alt.badge.img+21
  • Jamf Heroes
  • November 24, 2025

Existing software update deferral in place by chance?

FileVault encrypted?

Is this the old MDM based (aka mass action) or DDU Software Update / Blueprints based?


Forum|alt.badge.img+1
  • Author
  • New Contributor
  • November 25, 2025

Existing software update deferral in place by chance?

FileVault encrypted?

Is this the old MDM based (aka mass action) or DDU Software Update / Blueprints based?

No known software update deferral in place, FileVault 2 encryption enabled, DDU Software Update.


Chubs
Forum|alt.badge.img+21
  • Jamf Heroes
  • November 25, 2025

Existing software update deferral in place by chance?

FileVault encrypted?

Is this the old MDM based (aka mass action) or DDU Software Update / Blueprints based?

No known software update deferral in place, FileVault 2 encryption enabled, DDU Software Update.

Was/is there a pending update already in place on the device? What do the logs show?  If the console doesn’t show anything, the API should have something.


Forum|alt.badge.img+1
  • Author
  • New Contributor
  • November 25, 2025

Was/is there a pending update already in place on the device? What do the logs show?  If the console doesn’t show anything, the API should have something.

The error status was “ExistingPlanForDeviceInProgress.” There were no prior DDM or MDM update attempts. Each device had been freshly reset and re-enrolled within the quarter.

For more context, these devices were running MacOS 15.6.1 on Apple Silicon, and attempting to upgrade to 26.1 Tahoe.


mvu
Forum|alt.badge.img+20
  • Jamf Heroes
  • November 26, 2025

When I see that I toggle the Software Update Feature off, then back on.

 


Chubs
Forum|alt.badge.img+21
  • Jamf Heroes
  • November 26, 2025

When I see that I toggle the Software Update Feature off, then back on.

 

This is the way for DDU without blueprints 😊