Apple is expected to release macOS 27 Golden Gate in September 2026. Before upgrading your managed endpoints, there are a few things to check and prepare on your side. This post covers what you need to do before upgrading your managed endpoints to Golden Gate.

Note: macOS 27 Golden Gate upgrade is not supported for Intel Based processors and supports only for Apple Silicon (ARM) based processors.

1. Check if your server supports macOS 27 

If your Device Control Plus server is on build 11.5.2606.01 or above, you're already covered — no server-side changes are needed.

If you're on an older build, upgrade your server before allowing any endpoints to move to Golden Gate. Older Intel-based agents (build 11.5.2605.01 and below) will stop communicating after a Golden Gate upgrade due to Rosetta being automatically uninstalled by macOS 27.

Recommended: Upgrade to build 11.5.2606.01 or above. This ships the Universal agent, which runs natively on Apple Silicon — no Rosetta dependency.

If you cannot upgrade the server right now:

As a temporary workaround, deploy the script below to affected Macs before upgrading them to macOS 27. This script installs as a service, monitors Rosetta status, and automatically reinstalls Rosetta if it gets removed during the OS upgrade — keeping the existing agent operational.

• Download Rosetta watchdog script (Zoho WorkDrive).

• Deploy the script above and run it manually on the endpoint.

Note: This is a stopgap measure. We strongly recommend upgrading to build 2606.01 at the earliest opportunity to move to the native Universal agent.

2. Validate your server's network and security requirements

Note: DCP supports TLS 1.2 out of the box. However, if your server is running on Windows Server 2012 or earlier, TLS 1.2 may not be enabled at the OS level. Verify this before upgrading your endpoints to Golden Gate.