Apple Device Policy
Back to Explorer
GitHub YAMLApple Docs

Software Update (com.apple.SoftwareUpdate)

Deprecated (macOS 26.0)
com.apple.SoftwareUpdate

The payload that configures the software update policy.

macOS(10.7 - 26.0)
Branch: release

Settings (9)

SettingTypeRequiredDefaultManual InstallSupported OS
CatalogURL
CatalogURL
Deprecated (macOS 11.0)
The URL of the software update catalog. This property is not supported in macOS 11 and later.
stringoptional—
✓Yes
macOS (10.7 - 11.0)
Allow Pre-Release Update Installation
AllowPreReleaseInstallation
Deprecated (macOS 26.0)
If `true`, prerelease software can be installed on this computer.
booleanoptionaltrue
✓Yes
macOS (10.9 - 26.0)
restrict-software-update-require-admin-to-install
restrict-software-update-require-admin-to-install
Deprecated (macOS 26.0)
If `true`, restrict app installations to admin users. This key has the same function as the `restrict-store-require-admin-to-install` key in the `com.apple.appstore` payload.
booleanoptionalfalse
✓Yes
macOS (10.14 - 26.0)
AutomaticallyInstallMacOSUpdates
AutomaticallyInstallMacOSUpdates
Deprecated (macOS 26.0)
If `false`, restricts the "Install macOS Updates" option and prevents the user from changing the option.
booleanoptionaltrue
✓Yes
macOS (10.15 - 26.0)
AutomaticallyInstallAppUpdates
AutomaticallyInstallAppUpdates
Deprecated (macOS 26.0)
If `false`, deselects the "Install app updates from the App Store" option and prevents the user from changing the option.
booleanoptionaltrue
✓Yes
macOS (10.15 - 26.0)
AutomaticCheckEnabled
AutomaticCheckEnabled
Deprecated (macOS 26.0)
If `false`, deselects the "Check for updates" option and prevents the user from changing the option.
booleanoptionaltrue
✓Yes
macOS (10.15 - 26.0)
AutomaticDownload
AutomaticDownload
Deprecated (macOS 26.0)
If `false`, deselects the "Download new updates when available from the App Store" option and prevents the user from changing the option.
booleanoptionaltrue
✓Yes
macOS (10.15 - 26.0)
CriticalUpdateInstall
CriticalUpdateInstall
Deprecated (macOS 26.0)
If `false`, disables the automatic installation of critical updates and prevents the user from changing the "Install system data files and security updates" option.
booleanoptionaltrue
✓Yes
macOS (10.15 - 26.0)
ConfigDataInstall
ConfigDataInstall
Deprecated (macOS 26.0)
If `false`, restricts the automatic installation of configuration data.
booleanoptionaltrue
✓Yes
macOS (10.15 - 26.0)

Apple MDM & DDM Policy Explorer

Explore the full catalogue of Apple Mobile Device Management (MDM) and Declarative Device Management (DDM) policies for macOS and iOS. Search, filter, and reference policy keys for use with Microsoft Intune, Jamf, or any standards-compliant MDM solution.

Reference: policy categories & common keys

Policy categories

  • Configuration Profile
  • Declarative Configuration
  • Declarative Activation
  • Declarative Asset
  • Declarative Management

Common policy keys

  • com.apple.wifi.managed – Wi-Fi network configuration
  • com.apple.vpn.managed – VPN configuration
  • com.apple.applicationaccess – App and feature restrictions
  • com.apple.security.pkcs1 – Certificate (PKCS#1) payload
  • com.apple.security.pkcs12 – Identity certificate (PKCS#12) payload
  • com.apple.security.scep – SCEP certificate enrolment
  • com.apple.mail.managed – Mail account configuration
  • com.apple.eas.account – Exchange ActiveSync account
  • com.apple.MCX – Managed Client (macOS) preferences
  • com.apple.MCX.FileVault2 – FileVault 2 disk encryption
  • com.apple.dock – macOS Dock configuration
  • com.apple.screensaver – Screensaver configuration
  • com.apple.loginwindow – macOS login window configuration
  • com.apple.systempolicy.managed – Gatekeeper / system policy
  • com.apple.systempreferences – System Preferences pane restrictions
  • com.apple.SoftwareUpdate – Software update behaviour
  • com.apple.TCC.configuration-profile-policy – Privacy Preferences Policy Control (PPPC)
  • com.apple.notificationsettings – Per-app notification settings
  • com.apple.webcontent-filter – Web content filter
  • com.apple.dnsSettings.managed – DNS settings (DoH / DoT)
  • com.apple.relay.managed – Network relay configuration
  • com.apple.extensiblesso – Extensible Single Sign-On
  • com.apple.configuration.passcode.settings – DDM: passcode policy
  • com.apple.configuration.softwareupdate.enforcement.specific – DDM: enforced software update
  • com.apple.configuration.services.configuration-files – DDM: service configuration files
  • com.apple.configuration.management.status-subscriptions – DDM: status subscriptions
  • com.apple.activation.simple – DDM: simple activation predicate
  • com.apple.management.organization-info – DDM: organization information