See below for more information on this provisioning profile, and impact.
Some digging has revealed that this password prompt is shown when the softwareupdate binary is called, and only on Apple Silicon devices.
Calling the softwareupdate binary is something which we Mac Admins have done for years, and it’s likely folks have workflows in place calling the softwareupdate binary which is then triggering this prompt.
So, what’s the fix? Short term, don’t call the softwareupdate binary on Apple Silicon devices and raise this issue with Apple.
Longer term? Unsure. There is still documentation around Apple Silicon devices to be posted by Apple, and until we have documentation we can but guess.
In starting to write a blog post on how to block and delay the latest macOS release, I realised that the subject of delaying updates via Managed Software Updates was probably worthy of its own post.
This its that post, see below the break for details.
The fix from Jamf forces TLS1.2 for connections to Apple for DEP/Automated Device Enrollment.
So, if you made a change to your TLS settings as I mentioned in my previous blog post, you can remove those changes.
At the recent London Apple Admins, I mentioned that with macOS Catalina setting a custom Software Update catalog URL is now noted as deprecated.
This took some folks by surprise, despite setting a custom Software Update catalog URL.
Below is more details on this deprecation.
A few years ago FossHub’s Terms of Service (read: TOS) did not allow for automated downloads.
This has changed recently, with details on how to now download from FossHub via AutoPkg below.