University IT (UIT) will roll out a new solution for patching macOS applications to the university in late October. MacOS Application Patching is a native feature of Jamf Pro that helps ensure essential applications remain secure and up-to-date without disrupting user productivity.
With automatic updates, patching addresses security vulnerabilities and provides access to the latest features. Users will receive informative notifications, allowing them to manage when updates occur and minimize downtime.
How it works
Here’s an overview of the application patching process:
- Daily Update Checks: Jamf Pro checks daily for available updates across these system applications:
- Microsoft Office Suite (Excel, OneNote, Outlook, PowerPoint, Word)
- Slack
- Zoom
- Google Chrome
- Minimal Disruption: Updates occur quietly in the background, but the application must be closed to complete the update.
- Notifications to Stay Informed:
- If the application is running during the update, the system will notify the user to close the application when convenient without forcing it to quit, ensuring minimal disruption.
- If the application has not been updated, notifications will continue to be sent once a week until the update is complete.
- If Focus is enabled on the device, notifications will be hidden and can be viewed by clicking the clock in the upper right corner.
- Stability & Recovery: The system will automatically attempt retries for any failures and provide rollback capabilities in case of serious problems. Additionally, it provides detailed reporting to track the patch status on all devices.
- Self Service Option: Managed applications can be manually installed or updated through the Self Service application. Install times range from approximately 15 to 50 seconds, depending on the application. Manually updating through the application itself is also supported.
What to expect
Jamf macOS application patching will be rolled out in two phases:
- During the week of October 21, UIT will begin rolling out the solution specifically for macOS systems to individuals in Business Affairs.
- During the week of October 27, UIT will complete the rollout of macOS systems for the rest of the university.
Initial Update Period: When application patching is first enabled on macOS systems, users may receive multiple “stacked” notifications prompting them to quit applications to allow updates to be installed. This occurs when the supported applications are open and patching is needed.
Users can click on the body of the top notification to expand and view all notifications. Once the initial updates have been applied, notifications will stabilize, and users will only receive notifications for new versions when they become available.
Why are we making this change?
By implementing the Jamf macOS application patching, we reduce our reliance on BigFix for Mac systems, bringing us closer to the possibility of retiring BigFix altogether. This transition not only improves our capability to secure and update applications but also streamlines our device management processes. As a result, it enhances user productivity and security in the long run.
Resources
- Learn more: Visit the macOS Application Patching UIT page for more information and FAQs.
- Jamf for IT admins: How to Exclude a Device from Mac App Patching
- Reporting Problems: If applications do not function correctly after updates, please report issues to the Jamf team. They will investigate the problem and may adjust the patching policies if necessary.
