Apple has launched its first Rapid Security Response update. These updates can be fully managed and deployed from Addigy. This article expands on how to manage these updates, deploy them, and remove them if they cause breaking changes.
Managing Rapid Security Response Settings on macOS
Addigy allows you to deploy a Restrictions MDM Profile to manage the ability for Users to revert the Rapid Security Response or Install it. You can find this MDM profile in Catalog > MDM Profile > Restrictions > General.
These keys will allow the Rapid Security Response to be installed:
"Allow Rapid Security Response Installation" - If false, prohibits installation of rapid security responses.
Default: true
"Allow Rapid Security Response Removal": If false, prohibits removal of rapid security responses.
Removing Rapid Security Response Updates
By default, Rapid Security Response updates can be removed by the end-user on macOS.
Users will find this feature by clicking the `i` button in System Settings > General > macOS > `i` Icon.
If a Restrictions Profile is sent to the device to prevent Installation, the user will not see the RSRUpdate.
If a Restrictions Profile is sent to the device to prevent removal, the user will not see the ability to `Remove & Restart` page, as the `i` button will not be available:
Deploying Rapid Security Responses
Addigy can deploy the RSR update several ways. We expand below on how to deploy these updates individually or at scale to all your devices.
Deploying to Individual Devices:
You can use GoLive > Updates to force a specific device to update, like shown below, in this case you can Press `Download and/or Install`, which should download the update.
When finished, you can press `Download and/or Install` again, to send the update to the device if it was already downloaded:
Deploy to Groups of Devices
In a Policy, you can use the settings shown below to enforce the latest update, which would encompass the RSR update.
We recommend using the `Default` mechanism, as its the best balance between most aggressive and least aggressive. We would not recommend using `InstallLater`.
Tracking Rapid Security Response Updates
You can use the System Version fact to determine if the device(s) are on the latest update, with the RSR Update:
Additionally, we will be making changes to the macOS X Version and OS Version facts to show this information. This change will be live on Monday May 8th, 2023. Which will also reflect this information in your System Dashboard.
Reporting Rapid Security Response Updates
You can press "Send Report" to get a CSV report of the updates performed for each Policy:
Note: This only reports on updates done using Policies.