MacOS Update from Terminal

[foreverkan]

Hello, I would like to update some devices from Jamf. I create a script but it doesnt work. Where is the problem?

The script is,

#!/bin/bash

sudo softwareupdate -i macOS\ Monterey\ 12.6.3-21G419 -R

exit 0

Thank you.

[Bol]

https://learn.jamf.com/bundle/technical-paper-deploying-macos-upgrades-current/page/Running_Software...

Alternatively, a policy could call the softwareupdate framework directly, bypassing Jamf Pro's restart options in the policy. This can be achieved in a Files and Processes payload, running the command softwareupdate -iaR as a local command. When running updates this way, macOS restarts the computer automatically if needed for the update to complete.

---

[jtrant]

This isn't going to work on Apple Silicon Macs, if that's what you're trying to do.

[foreverkan]

Apple silicon and intel cpu macs. I'm very lost.

[mhasman]

Hopefully, we will see new better system software management with Sonoma, soon

[howie_isaacks]

At a past job I used Nudge for prompting users to run the macOS software updates. I'm in the middle of getting that setup and tested at my new job. Because of the volume owner feature of macOS on Apple Silicon Macs, it's a lot more difficult to create software updates policies without user involvement. That's why Nudge works so well. It guides the user to do the update, and we can allow standard users to install the updates. I have been able to do that using Nudge on both Apple Silicon and Intel Macs.

https://github.com/macadmins/nudge/wiki 

[Bol]

---

@foreverkan wrote:

Hello, I would like to update some devices from Jamf. I create a script but it doesnt work. Where is the problem?

The script is,

#!/bin/bash

sudo softwareupdate -i macOS\ Monterey\ 12.6.3-21G419 -R

exit 0

Thank you.

---

I believe this is the command you were trying to run but corrected;

sudo -S softwareupdate -iR "macOS Monterey 12.6.3-21G419" --stdinpass "loggedInUserPassword" --user "LogedInUserName"

[foreverkan]

Here is the last situation;

I created a policy like this, 

Its downloading last major update from apple and install it.

In Intel cpu's user can restart mac and update finish succesfly. 

But in Silicon cpu's user cannot restart mac to finish update. Because when they click to restart now button mac asks user credentianls. Mac doesnt accecpt logged user(standard user) credentianls. When i try to enter local admin username and password it says this.

[Bol]

You need to authenticate with credentials of a volume owner, either standard user or admin.

If there isn't one, there needs to be a bootstrap token escrowed to Jamf which can then allow the restart to complete the install.

[mhasman]

To update Macs with Apple CPU, send MDM command. In the list of Macs, click "Action"

[foreverkan]

Thank you for your quick reply. Here is the second question, we dont use mdm profile. İs there any option?

[MatG]

if your Mac's are enrolled correctly they should have an MDM profile on them, if not that you are not enrolling correctly. 

[foreverkan]

here is the final, I write a policy to install update from apple.

It's downloading os from and it's installing and the final system settings ask admin credentinals. 

not: Encptryp is enabled and users are not admin on macbooks.

policyPolicy