6.4 Deploying Patches on Mac Devices

From ZENworks 23.3 onwards, the patch remediation on macOS devices is enhanced to support larger file patching without impacting the existing patching process.

After creating and deploying the remediation bundle, the newly introduced cURL feature kicks in to manage the larger file (only if the patch file size is more than 1 GB) patching. This feature provides a smoother remediation process for applying patches with large file sizes. The cURL provides resume-ability of patch downloading, which is required while downloading larger patch files. If the patch size is less than 1 GB, then the patch will be downloaded ondemand.

NOTE:Mac OS patching does not support Major OS Upgrade.

For example, using Mac OS patching, you cannot upgrade your macOS 12 device to macOS 13 or higher version.

Depending on the device platform (Intel or ARM), please refer to the following sections:

6.4.1 Applying Patches to Intel Devices

On Mac devices with Intel processors, perform the following steps to remediate patches:

  1. In ZENworks Control Center, go to Devices > Workstations.

  2. In the Workstations, select a macOS Intel device, and then click Patches.

    This page displays all the patches that are applicable to the device.

  3. Select the required patch and click Action > Deploy Remediation.

  4. In the subsequent screens, perform the required actions, and click Next.

  5. In the Summary page, review the information, and then click Finish.

    The device will be patched using the remediation bundle.

6.4.2 Applying Patches to ARM Devices

On Mac devices with ARM/M1/ Silicon processors, perform the following steps to remediate patches:

  1. On the macOS device, run zac cru (create-remediation-user).

    After running the command, enter the existing Volume User credentials. For more information, see Patch Management Commands in the ZENworks Command Line Utilities Reference.

  2. After successfully running the command, in ZENworks Control Center, go to Devices > Workstations.

  3. In the Workstations, select a macOS ARM/M1/ Silicon device, and then click Patches.

    This page displays all the patches that are applicable to the device.

  4. Select the required patch and click Action > Deploy Remediation.

  5. In the subsequent screens, perform the required actions, and click Next.

  6. In the Summary page, review the information, and then click Finish.

    The device will be patched using the remediation bundle.