Deploying macOS 10.7-10.12.6 as an upgrade involves the following steps:
-
Add the .app file for macOS
to Jamf Admin.
-
Cache the
InstallESD.dmg
file using a policy.
-
Create a smart computer group.
-
Create a Self Service policy for upgrading macOS.
Note:
The name of the
InstallESD.dmg
file in Jamf Admin will vary depending on the version of macOS that you plan to deploy. For example, the name of the
InstallESD.dmg
file for OS X 10.10 would be
Install OS X Yosemite.InstallESD.dmg
.
Requirements
-
Jamf Pro 9.21 or later
Note:
If you are using Jamf Pro 8.3-9.1, see the
Deploying macOS 10.7 or Later with Jamf Pro
Knowledge Base article for instructions on deploying a macOS upgrade.
-
Jamf Admin
-
The .app file for the version of macOS that you plan to deploy (For example,
Install OS X Mountain Lion.app
.)
You can obtain the latest .app file for macOS from the Mac App Store.
-
Managed computers with:
-
(For deployments of macOS 10.10 or later only) macOS 10.7 or later
Computers with macOS 10.5 or macOS 10.6 must be upgraded to macOS 10.7 or later before upgrading to macOS 10.10.
-
Self Service
-
The system requirements for the version of macOS that you plan to deploy
-
macOS 10.7:
http://support.apple.com/kb/HT4949
-
macOS 10.8:
http://support.apple.com/kb/HT5444
-
macOS 10.9:
http://support.apple.com/kb/HT5842
-
macOS 10.11:
https://support.apple.com/kb/SP728?locale=en_US
-
macOS 10.12:
https://support.apple.com/en-us/HT201475
Step 1: Add the .app File for macOS to Jamf Admin
Add the .app file for macOS to Jamf Admin. Jamf Admin extracts the
InstallESD.dmg
file from the .app file so you can cache and install it using policies.
-
Open Jamf Admin and authenticate to the Jamf Pro server.
-
Drag the .app file to the main repository in Jamf Admin.
Jamf Admin extracts the
InstallESD.dmg
file, analyzes its contents, and adds it to the master distribution point and Jamf Pro.
The
InstallESD.dmg
file is displayed in blue text until you add it to a category.
-
Double-click the package in the main repository.
-
Click the
General
tab and choose a category for the package.
-
Click
OK
.
Step 2: Cache the InstallESD.dmg File
After adding the .app file to Jamf Admin, you can cache the
InstallESD.dmg
file using a policy. Caching the file ahead of time speeds up the upgrade process.
-
Log in to Jamf Pro.
-
Click
Computers
at the top of the page.
-
Click
Policies
.
On a smartphone, this option is in the pop-up menu.
-
Click
New
-
In the General payload, enter a display name for the policy. For example, “Cache InstallESD.dmg”.
-
Select
Recurring Check-in
as the trigger.
-
Choose “Once per Computer” from the
Execution Frequency
pop-up menu.
-
Select the Packages payload and click
Configure
.
-
Click
Add
for the
InstallESD.dmg
file.
-
Choose “Cache” from the
Action
pop-up menu.
-
Specify a distribution point for computers to download the package from.
-
Select the Maintenance payload and click
Configure
.
-
Ensure that the
Update Inventory
checkbox is selected.
-
Click the
Scope
tab and configure the scope of the policy.
-
Click
Save
.
The
InstallESD.dmg
file is cached on computers in the scope the next time they check in with Jamf Pro and meet the criteria in the General payload.
Step 3: Create a Smart Computer Group
Create a smart group of computers with the
InstallESD.dmg
file cached. The smart group will be used as the scope of the Self Service policy for upgrading macOS.
-
Log in to Jamf Pro.
-
Click
Computers
at the top of the page.
-
Click
Smart Computer Groups
.
On a smartphone, this option is in the pop-up menu.
-
Click
New
-
On the Computer Group pane, enter a display name for the smart computer group. For example, “InstallESD.dmg Cached”.
-
Click the
Criteria
tab.
-
Click
Add
-
Click
Choose
for “All Criteria”.
-
Click
Choose
for “Cached Packages”.
-
Choose “has” from the
Operator
pop-up menu.
-
Click
Browse
-
Click
Choose
for the
InstallESD.dmg
file.
Note:
The
InstallESD.dmg
file is not available as a value until it has been cached on at least one computer.
-
Click
Save
.
Step 4: Create a Self Service Policy for Upgrading macOS
After caching the
InstallESD.dmg
file, you can create a Self Service policy that allows users to upgrade macOS.
-
Log in to Jamf Pro.
-
Click
Computers
at the top of the page.
-
Click
Policies
.
On a smartphone, this option is in the pop-up menu.
-
Click
New
-
In the General payload, enter a display name for the policy. For example, “Upgrade macOS”.
-
Choose “Once per Computer” from the
Execution Frequency
pop-up menu.
-
Select the Packages payload and click
Configure
.
-
Click
Add
for the
InstallESD.dmg
file.
-
Choose “Install Cached” from the
Action
pop-up menu.
-
Click the
Scope
tab.
-
Click
Add
-
Click the
Computer Groups
tab.
-
Click
Add
for the smart computer group you just created.
-
Click the
Self Service
tab.
-
Select
Make the policy available in Self Service
.
-
Configure how the policy is displayed in Self Service using the settings on the pane.
-
Click
Save
.
The policy is made available in Self Service on computers in the scope the next time they check in with Jamf Pro and meet the criteria in the General payload. macOS is upgraded when users run the policy from Self Service.
Upgrading FileVault 2-enabled drives from macOS 10.7 or 10.8 prompts users to enter their password after reboot. Upgrading FileVault 2-enabled drives from macOS 10.9 or later automatically bypasses authentication after reboot.
Note:
The Jamf Binary automatically enables Core Storage on the target computer before installing an macOS 10.11 upgrade using a policy. This
only
occurs for macOS 10.11 upgrades that are installed using a policy.