Intel macOS Monterey devices fail to update
Cause: Apple has changed the behavior of how Intel-based Macs handle an upgrade to Monterey that requires a secure token for the software update process to be successful. Apple applied the requirement of a secure token for software updates to Intel Mac devices much in the same way they require it for M1 Mac devices as documented here.
Resolution: We implemented a workaround that has been added to our core patching scripts for macOS. In the coming weeks, a new agent release will fully resolve this issue.
Mac devices reboot without notifications
Cause: The core script that downloads macOS updates, called the macOS software update tool with a flag that is supposed to download and install the update without a reboot but we found it to be inconsistent and cause reboots for some patches.
Resolution: To resolve this issue we updated the script to change the flag which will only download the update. This maintains the original intended behavior of the script.
Mac devices log out users and fail to reboot
Cause: Logic was added in the core reboot script to kill (pkill) all processes affiliated with the logged in user in order to prevent users from canceling the reboot triggered by an update. We found this included killing the SoftwareUpdateNotificationManager, which is the service that handles the reboot portion of the update install.
This created a scenario that would have intermittent results:
If the SoftwareUpdateNotificationManager successfully initiated the reboot prior to the pkill command, the machine would reboot and apply the update successfully.
If the pkill command successfully kills the SoftwareUpdateNotificationManager before it could successfully initiate the reboot, the user would be logged out and the update would not apply.
Resolution: The pkill command was removed from the core reboot script in order to ensure the Apple Software Update process is not interrupted.
Note: This will re-introduce the graceful handling of update reboots to normal functionality per Apple’s design which will allow the user to cancel the reboot if there is a hanging process.