PayloadKit

Software Update

com.apple.SoftwareUpdate

The payload that configures the software update policy. Removed: use the declarative management 'com.apple.configuration.softwareupdate.settings' configuration.

macOS 10.7+ · removed 27.0
Apple schemacombined

Not available with User Enrollment · Only one instance per profile · macOS: device channel only

Configuration Keys (12)

KeyTypeTitle
CatalogURLdeprecated

macOS 10.7+ · deprecated 11.0

The URL of the software update catalog. This property isn't supported in macOS 11 and later.

stringCatalog URL
SUDisableEVCheck

This option was needed during Mojave betas which required https.

booleanDisable Extended Validation check of TLS certificate.
AutomaticCheckEnabled

macOS 10.15+

If 'false', deselects the "Check for updates" option and prevents the user from changing the option.

Default: true

booleanAutomatically check for updates
AutomaticDownload

macOS 10.15+

If 'false', deselects the "Download new updates when available from the App Store" option and prevents the user from changing the option.

Default: true

booleanDownload newly available updates in the background
AutomaticallyInstallMacOSUpdates

macOS 10.15+

If 'false', restricts the "Install macOS Updates" option and prevents the user from changing the option.

Default: true

booleanAutomatically install macOS updates
AutomaticallyInstallAppUpdates

macOS 10.15+

If 'false', deselects the "Install app updates from the App Store" option and prevents the user from changing the option.

Default: true

booleanAutomatically install App Store app updates
ConfigDataInstall

macOS 10.15+

If 'false', restricts the automatic installation of configuration data.

Default: true

booleanInstall XProtect, MRT, & Gatekeeper updates automatically
CriticalUpdateInstall

macOS 10.15+

If 'false', disables the automatic installation of critical updates and prevents the user from changing the "Install system data files and security updates" option.

Default: true

booleanInstall security updates automatically
AllowPreReleaseInstallation

macOS 10.9+

If 'true', prerelease software can be installed on this computer.

Default: true

booleanAllow pre-release update installation
forceDelayedSoftwareUpdates

Software updates will be delayed by the duration defined by ManagedDeferredInstallDelay.

booleanForce Update Delay
restrict-software-update-require-admin-to-install

macOS 10.14+

If 'true', restrict app installations to admin users. This key has the same function as the 'restrict-store-require-admin-to-install' key in the 'com.apple.appstore' payload.

Default: false

booleanRestrict app installations to admin users
ManagedDeferredInstallDelay

The duration that software updates will be delayed.

Depends on: forceDelayedSoftwareUpdates ∈ [true]

Default: 30

integerUpdate Delay