From 605e649598871564c95ad62a3aa8fe289ea29c02 Mon Sep 17 00:00:00 2001 From: Cyrus Daboo Date: Fri, 3 Jun 2022 16:28:07 -0400 Subject: [PATCH] Release_iOS-15-4_macOS-12-3 --- README.md | 8 +-- .../configurations/management.test.yaml | 2 +- mdm/commands/certificate.list.yaml | 8 ++- mdm/commands/system.update.schedule.yaml | 17 ++++++ mdm/commands/system.update.status.yaml | 56 +++++++++++++++++++ mdm/profiles/com.apple.applicationaccess.yaml | 18 +++++- mdm/profiles/com.apple.security.firewall.yaml | 18 ++++++ mdm/profiles/com.apple.systemuiserver.yaml | 1 - 8 files changed, 119 insertions(+), 9 deletions(-) diff --git a/README.md b/README.md index 23412a3..963bb38 100644 --- a/README.md +++ b/README.md @@ -8,10 +8,10 @@ This release corresponds to the following OS versions | OS | Version | |---------|---------| -| iOS | 15.2 | -| macOS | 12.1 | -| tvOS | 15.2 | -| watchOS | 8.3 | +| iOS | 15.4 | +| macOS | 12.3 | +| tvOS | 15.4 | +| watchOS | 8.5 | ## What's Available diff --git a/declarative/declarations/configurations/management.test.yaml b/declarative/declarations/configurations/management.test.yaml index a12e695..2801190 100644 --- a/declarative/declarations/configurations/management.test.yaml +++ b/declarative/declarations/configurations/management.test.yaml @@ -18,7 +18,7 @@ payloadkeys: rangelist: - Installed - Failed - - PendingClient + - Unlocked default: Installed content: The status the system reports back when the device implements the configuration. Use this to override the normal 'success' result. diff --git a/mdm/commands/certificate.list.yaml b/mdm/commands/certificate.list.yaml index 645e2c3..0de6e44 100644 --- a/mdm/commands/certificate.list.yaml +++ b/mdm/commands/certificate.list.yaml @@ -1,7 +1,11 @@ title: Certificate List Command description: This command allows the server to retrieve the list of installed certificates on the device. The command requires that the server has the Inspect Profile Manifest - privilege. + privilege. For userenrollment, this request will limit to certificates pushed via + MDM. Starting with iOS 15.4, the CertificateList command will return a Not Now response + prior to the first time a passcode-protected device is unlocked after boot. Between + iOS 15.0 and iOS 15.4, devices in that state did not respond with Not Now, but some + identity certificates may not have been reported in the response. payload: requesttype: CertificateList supportedOS: @@ -30,7 +34,7 @@ payload: supervised: false content: |- This command allows the server to retrieve the list of installed certificates on the device. The command requires that the server has the Inspect Profile Manifest privilege. - For userenrollment, this request will limit to certificates pushed via MDM + For userenrollment, this request will limit to certificates pushed via MDM. payloadkeys: - key: ManagedOnly supportedOS: diff --git a/mdm/commands/system.update.schedule.yaml b/mdm/commands/system.update.schedule.yaml index 9f0dfca..df04abb 100644 --- a/mdm/commands/system.update.schedule.yaml +++ b/mdm/commands/system.update.schedule.yaml @@ -91,6 +91,23 @@ payloadkeys: content: |- The maximum number of times the system allows the user to postpone an update before it's installed. The system prompts the user once a day. This key is only supported when 'InstallAction' is 'InstallLater' and only supported for minor OS updates (for example, macOS 12.x to 12.y). + - key: Priority + supportedOS: + iOS: + introduced: n/a + macOS: + introduced: '12.3' + tvOS: + introduced: n/a + type: + presence: optional + rangelist: + - Low + - High + default: Low + content: |- + The scheduling priority for downloading and preparing the requested update. This is only supported for minor OS updates (macOS 12.x to 12.y). + Available in macOS 12.3 and later. Prior versions of macOS used a priority of 'Low'. responsekeys: - key: UpdateResults type: diff --git a/mdm/commands/system.update.status.yaml b/mdm/commands/system.update.status.yaml index 0073ef7..bb9af79 100644 --- a/mdm/commands/system.update.status.yaml +++ b/mdm/commands/system.update.status.yaml @@ -61,3 +61,59 @@ responsekeys: * 'Idle': The update is idle. * 'Downloading': The software update is downloading. * 'Installing': The software update is installing. + - key: MaxDeferrals + supportedOS: + iOS: + introduced: n/a + macOS: + introduced: '12.3' + tvOS: + introduced: n/a + type: + presence: optional + content: |- + The number of times a user can defer this OS update. + Available in macOS 12.3 and later. + - key: DeferralsRemaining + supportedOS: + iOS: + introduced: n/a + macOS: + introduced: '12.3' + tvOS: + introduced: n/a + type: + presence: optional + content: |- + The number of remaining user deferrals for this OS update. + Available in macOS 12.3 and later. + - key: NextScheduledInstall + supportedOS: + iOS: + introduced: n/a + macOS: + introduced: '12.3' + tvOS: + introduced: n/a + type: + presence: optional + content: |- + The date of the next attempt at installing this OS update. + Available in macOS 12.3 and later. + - key: PastNotifications + supportedOS: + iOS: + introduced: n/a + macOS: + introduced: '12.3' + tvOS: + introduced: n/a + type: + presence: optional + content: |- + The dates/times when the OS notified the user about installing this OS update. + Available in macOS 12.3 and later. + subkeys: + - key: PastNotificationDate + title: Past Notification Date + type: diff --git a/mdm/profiles/com.apple.applicationaccess.yaml b/mdm/profiles/com.apple.applicationaccess.yaml index 1953561..ff30c3a 100644 --- a/mdm/profiles/com.apple.applicationaccess.yaml +++ b/mdm/profiles/com.apple.applicationaccess.yaml @@ -104,7 +104,9 @@ payloadkeys: iOS: introduced: n/a macOS: - introduced: n/a + introduced: '12.3' + userenrollment: + mode: forbidden tvOS: introduced: '10.2' supervised: true @@ -333,6 +335,20 @@ payloadkeys: content: If 'false', prevents automatic downloading of apps purchased on other devices. This setting doesn't affect updates to existing apps. Requires a supervised device. Available in iOS 9 and later. +- key: allowAutomaticScreenSaver + supportedOS: + iOS: + introduced: n/a + macOS: + introduced: n/a + tvOS: + introduced: '15.4' + supervised: true + type: + presence: optional + default: true + content: If 'false', disables Apple TV's automatic screen saver. Available in tvOS + 15.4 and later. - key: allowAutoUnlock supportedOS: iOS: diff --git a/mdm/profiles/com.apple.security.firewall.yaml b/mdm/profiles/com.apple.security.firewall.yaml index 74d1cf1..c5f1245 100644 --- a/mdm/profiles/com.apple.security.firewall.yaml +++ b/mdm/profiles/com.apple.security.firewall.yaml @@ -72,3 +72,21 @@ payloadkeys: content: |- This string specifies the type of logging. Available in macOS 12 and later. +- key: AllowSigned + supportedOS: + macOS: + introduced: '12.3' + type: + presence: optional + content: |- + If 'true', allows built-in software to receive incoming connections. + Available in macOS 12.3 and later. +- key: AllowSignedApp + supportedOS: + macOS: + introduced: '12.3' + type: + presence: optional + content: |- + If 'true', allows downloaded signed software to receive incoming connections. + Available in macOS 12.3 and later. diff --git a/mdm/profiles/com.apple.systemuiserver.yaml b/mdm/profiles/com.apple.systemuiserver.yaml index 08443c1..b0b6c28 100644 --- a/mdm/profiles/com.apple.systemuiserver.yaml +++ b/mdm/profiles/com.apple.systemuiserver.yaml @@ -5,7 +5,6 @@ payload: supportedOS: macOS: introduced: '10.7' - deprecated: '11.0' devicechannel: true userchannel: true requiresdep: false