: On computers with Apple silicon (i.e., M1 chip), users may be prompted to authenticate before an update can be installed. There are additional requirements for computers with Apple silicon if you want the update to be installed automatically without user authentication:
Bootstrap token for target computers escrowed with Jamf Pro
The Allow remote management of kernel extensions and automatic software updates option enabled in the Startup Security Utility (in macOS Recovery)
For more information about how to enable this setting, see Change startup disk security settings on a Mac with Apple silicon from Apple's support website.
Alternatively, enrolling computers with Jamf Pro via a PreStage enrollment can automatically enable this setting.