Deploy and enforce macOS updates via DDM | Endpoint Central

Deploy and enforce macOS updates via DDM | Endpoint Central

Endpoint Central now supports Apple's Declarative Device Management (DDM) for macOS OS updates, on MDM-enrolled devices running macOS 14 (Sonoma) and later, from build 11.5.2632.03.

About DDM

DDM is Apple’s newer way of managing Macs. Instead of the server sending a stream of commands and polling for status, the Mac is told the end state you want (for example, to be running macOS 26.x by a set deadline) and gets there on its own.

What's new? 

Endpoint Central now uses DDM to deliver macOS OS updates. Instead of pushing a command that depends on the Mac being awake and online at that moment, Endpoint Central sends the update and its enforcement deadline to the device as a declaration. The Mac then downloads, prepares, and enforces the update locally, and reports the status back to the console. If it is offline or asleep at the deadline, it picks up on its own once it becomes eligible, so updates are no longer missed because a machine was unavailable during a push.

What you get:

  • A single managed update notification from macOS instead of repeated separate prompts. Users can choose when to restart before the deadline.
  • Control over enforcement timing: set a grace period in days in the deployment policy, or specify an exact enforcement date and time in a Manual Deployment.
  • Enforcement that continues across offline and sleep states, with device-reported status (Waiting, Downloading, Prepared, Installing, Success, Failure) visible in the deployment view.
Regards,
The ManageEngine team.