macOS Patching – Public Preview for N-sight and N-central

We are pleased to announce the Public Preview of macOS Patching, bringing Apple macOS devices into our new unified, cross‑platform patching experience. This release will be rolling out over the next 24–48 hours.

This release extends the same modern patching platform and workflows already available for Linux, while introducing macOS‑specific capabilities required to meet Apple’s security and operating system requirements.


What’s Included in the Public Preview

macOS Patching uses the same core detection and execution workflows as our existing Linux OS patching, providing a consistent experience across operating systems.

Core Capabilities

  • Detection and installation of macOS operating system updates
  • Asset‑level and patch‑level views
  • Consistent patching workflows aligned with Linux patching
  • Centralised visibility within the new patching experience

Key macOS‑Specific Functionality

In addition to the shared capabilities, macOS Patching introduces workflows designed specifically for Apple Silicon and user‑centric macOS environments.


End User Interactive Reboot Pop‑ups

macOS updates are applied during a system restart. To support user‑driven environments, macOS Patching includes end user interactive reboot notifications.

What this provides

  • Clear communication to end users when a restart is required
  • On‑screen prompts that explain why the reboot is needed
  • The ability for end users to:
    • Restart immediately, or
    • Defer the restart to a more convenient time

Why this matters

This workflow balances security and usability by ensuring updates are completed while minimising user disruption. It supports environments where devices are actively used and restart timing must be communicated clearly.


Volume Ownership for OS Update Authorisation

Apple requires additional authorisation to install operating system updates on Apple Silicon–based Macs. This is enforced through volume ownership.

macOS Patching includes a secure workflow that allows technicians to provide the required credentials to authorise OS updates.

How it works

  • A one‑time setup command is run to provide volume owner credentials to the patching engine
  • Credentials are:
    • Fully encrypted
    • Stored securely
    • Used only to authorise macOS operating system updates

Once provided, the engine gains the necessary permissions to perform OS updates on the device.

If volume owner credentials are not supplied, macOS will reject the update and the patch will fail with an Invalid Credentials status and the error message within the failed patches view will contain a link to a knowledge article to help your technicians diagnose.

Step by step documentation is also available:

N-sight:https://documentation.n-able.com/remote-management/userguide/Content/patching/manage-apple-patches.htm
N-central: https://documentation.n-able.com/N-central/userguide/Content/patching/manage-apple-patches.htm

Important notes

  • This setup is typically required once per device
  • Credentials only need to be updated if the volume owner changes on the device
  • This workflow aligns with Apple’s platform security requirements
  • How to’s are available within our documentation and knowledge base

You can read more about volume ownership and authorisation in Apple’s documentation: https://support.apple.com/en-gb/guide/deployment/dep24dbdcf9e/web

Coming Soon

The following capabilities are in active development and will be introduced as the macOS and Linux patching experience continues to evolve:

Apple third‑party application patching
Support for detecting and deploying updates for commonly used third‑party applications on macOS devices.

Linux third‑party application patching
Extension of the existing Linux patching experience to include third‑party application updates alongside OS updates.

Linux and Apple Patch Policies
Unified, policy‑driven patch management for both Apple macOS and Linux, enabling greater automation, control, and consistency across platforms.

Windows OS and third‑party application patching
New support for Windows operating system and third‑party application updates as part of the unified, cross‑platform patching experience.


Summary

The macOS Patching Public Preview brings macOS devices into a single, modern patching experience, reducing operational complexity while respecting Apple’s unique security and user requirements. It enables teams to apply consistent patching practices across platforms while meeting macOS security constraints and keeping end users productive.

As a Public Preview, functionality and workflows may evolve based on customer feedback prior to general availability.

This entry was posted in N-central, N-sight. Bookmark the permalink.