PayloadKit

Software Update

com.apple.SoftwareUpdate

The payload that configures the software update policy.

macOS
macOS 10.7+combined

Configuration Keys (12)

KeyTypeTitle
CatalogURL

The URL of the software update catalog. This property is not supported in macOS 11 and later.

stringCatalog URL
SUDisableEVCheck

This option was needed during Mojave betas which required https.

booleanDisable Extended Validation check of TLS certificate.
AutomaticCheckEnabled

If 'false', deselects the "Check for updates" option and prevents the user from changing the option.

Default: true

booleanAutomatically check for updates
AutomaticDownload

If 'false', deselects the "Download new updates when available from the App Store" option and prevents the user from changing the option.

Default: true

booleanDownload newly available updates in the background
AutomaticallyInstallMacOSUpdates

If 'false', restricts the "Install macOS Updates" option and prevents the user from changing the option.

Default: true

booleanAutomatically install macOS updates
AutomaticallyInstallAppUpdates

If 'false', deselects the "Install app updates from the App Store" option and prevents the user from changing the option.

Default: true

booleanAutomatically install App Store app updates
ConfigDataInstall

If 'false', restricts the automatic installation of configuration data.

Default: true

booleanInstall XProtect, MRT, & Gatekeeper updates automatically
CriticalUpdateInstall

If 'false', disables the automatic installation of critical updates and prevents the user from changing the "Install system data files and security updates" option.

Default: true

booleanInstall security updates automatically
AllowPreReleaseInstallation

If 'true', prerelease software can be installed on this computer.

Default: true

booleanAllow Pre-Release Update Installation
forceDelayedSoftwareUpdates

Software updates will be delayed by the duration defined by ManagedDeferredInstallDelay.

booleanForce Update Delay
restrict-software-update-require-admin-to-install

If 'true', restrict app installations to admin users. This key has the same function as the 'restrict-store-require-admin-to-install' key in the 'com.apple.appstore' payload.

Default: false

booleanRestrict app installations to admin users
ManagedDeferredInstallDelay

The duration that software updates will be delayed.

Depends on: forceDelayedSoftwareUpdates ∈ [true]

Default: 30

integerUpdate Delay