The payload that configures the software update policy. Removed: use the declarative management `com.apple.configuration.softwareupdate.settings` configuration.
| Setting | Type | Required | Default | Manual Install | Supported OS |
|---|---|---|---|---|---|
CatalogURL CatalogURL Deprecated (macOS 11.0) The URL of the software update catalog. This property isn't supported in macOS 11 and later. | string | optional | — | ✓Yes | macOS (10.7 - 11.0) |
Allow pre-release update installation AllowPreReleaseInstallation Deprecated (macOS 26.0) If `true`, prerelease software can be installed on this computer. | boolean | optional | true | ✓Yes | macOS (10.9 - 26.0) |
restrict-software-update-require-admin-to-install restrict-software-update-require-admin-to-install Deprecated (macOS 26.0) If `true`, restrict app installations to admin users. This key has the same function as the `restrict-store-require-admin-to-install` key in the `com.apple.appstore` payload. | boolean | optional | false | ✓Yes | macOS (10.14 - 26.0) |
AutomaticallyInstallMacOSUpdates AutomaticallyInstallMacOSUpdates Deprecated (macOS 26.0) If `false`, restricts the "Install macOS Updates" option and prevents the user from changing the option. | boolean | optional | true | ✓Yes | macOS (10.15 - 26.0) |
AutomaticallyInstallAppUpdates AutomaticallyInstallAppUpdates Deprecated (macOS 26.0) If `false`, deselects the "Install app updates from the App Store" option and prevents the user from changing the option. | boolean | optional | true | ✓Yes | macOS (10.15 - 26.0) |
AutomaticCheckEnabled AutomaticCheckEnabled Deprecated (macOS 26.0) If `false`, deselects the "Check for updates" option and prevents the user from changing the option. | boolean | optional | true | ✓Yes | macOS (10.15 - 26.0) |
AutomaticDownload AutomaticDownload Deprecated (macOS 26.0) If `false`, deselects the "Download new updates when available from the App Store" option and prevents the user from changing the option. | boolean | optional | true | ✓Yes | macOS (10.15 - 26.0) |
CriticalUpdateInstall CriticalUpdateInstall Deprecated (macOS 26.0) If `false`, disables the automatic installation of critical updates and prevents the user from changing the "Install system data files and security updates" option. | boolean | optional | true | ✓Yes | macOS (10.15 - 26.0) |
ConfigDataInstall ConfigDataInstall Deprecated (macOS 26.0) If `false`, restricts the automatic installation of configuration data. | boolean | optional | true | ✓Yes | macOS (10.15 - 26.0) |
Explore the full catalogue of Apple Mobile Device Management (MDM) and Declarative Device Management (DDM) policies for macOS and iOS. Search, filter, and reference policy keys for use with Microsoft Intune, Jamf, or any standards-compliant MDM solution.
com.apple.wifi.managed – Wi-Fi network configurationcom.apple.vpn.managed – VPN configurationcom.apple.applicationaccess – App and feature restrictionscom.apple.security.pkcs1 – Certificate (PKCS#1) payloadcom.apple.security.pkcs12 – Identity certificate (PKCS#12) payloadcom.apple.security.scep – SCEP certificate enrolmentcom.apple.mail.managed – Mail account configurationcom.apple.eas.account – Exchange ActiveSync accountcom.apple.MCX – Managed Client (macOS) preferencescom.apple.MCX.FileVault2 – FileVault 2 disk encryptioncom.apple.dock – macOS Dock configurationcom.apple.screensaver – Screensaver configurationcom.apple.loginwindow – macOS login window configurationcom.apple.systempolicy.managed – Gatekeeper / system policycom.apple.systempreferences – System Preferences pane restrictionscom.apple.SoftwareUpdate – Software update behaviourcom.apple.TCC.configuration-profile-policy – Privacy Preferences Policy Control (PPPC)com.apple.notificationsettings – Per-app notification settingscom.apple.webcontent-filter – Web content filtercom.apple.dnsSettings.managed – DNS settings (DoH / DoT)com.apple.relay.managed – Network relay configurationcom.apple.extensiblesso – Extensible Single Sign-Oncom.apple.configuration.passcode.settings – DDM: passcode policycom.apple.configuration.softwareupdate.enforcement.specific – DDM: enforced software updatecom.apple.configuration.services.configuration-files – DDM: service configuration filescom.apple.configuration.management.status-subscriptions – DDM: status subscriptionscom.apple.activation.simple – DDM: simple activation predicatecom.apple.management.organization-info – DDM: organization information