Endpoint Services, Munki, Using Munki to Upgrade macOS

This article provides guidance on using Munki to perform in-place macOS upgrades on Intel hardware without disturbing user data.

Looking to instead perform a clean macOS install? Here's how.


Munki Mac Endpoint Management

Affected Customers

University of Illinois IT Pros leveraging Technology Services Endpoint Service Munki Mac Endpoint Management


General Information

Multi-Tenant Munki can be used to perform in-place macOS upgrades (e.g. from macOS 12 to macOS 13) on Intel hardware without disturbing user data. These upgrades use Apple's own 'startosinstall' upgrade mechanism built into macOS installer packages, ensuring that any required firmware updates are applied during the upgrade.

Due to volume ownership requirements, Munki may not be used to upgrade Apple Silicon hardware.

Intel-only upgrade packages for macOS 13 (Ventura), macOS 12 (Monterey), and macOS 11 (Big Sur) are available; the Munki name keys are install_macos_[ventura/monterey/big_sur].

Hardware Support Considerations

Before planning an OS upgrade, check Apple's system requirements to confirm hardware compatibility. Munki can't natively know if the device in question is capable of running the new operating system, so it will try in all cases but fail on unsupported hardware.

Vital Software Compatibility

Next, check vendor resources to confirm that all vital software on the device is compatible with the new OS.

Optional vs. Managed Installs

When ready, make the upgrade available by adding it to the Mac's serial number manifest as either an optional install or a managed install. (See our article on Munki manifests for guidance on editing manifests.)

  • For an optional install, the upgrade will appear in Managed Software Center in multiple locations, but most notably on the 'Updates' tab in the 'Other available updates' section, where it can be selected at a time convenient to the end user. The installer won't be downloaded until the upgrade is selected.

    Selecting the optional install will present a pre-upgrade alert in Managed Software Center, along with an option to cancel the selection and return the upgrade to its former optional status:


  • For a managed install, the installer will be downloaded and then offered on the 'Updates' tab in Managed Software Center the next time Munki runs, usually within an hour or two as long as the device is awake and online. It will not present the pre-upgrade alert; and, as with any other managed install, it will block all other pending and future software updates until it is run. For this reason, optional installs may be a better choice than managed installs in situations when the end user will be performing the upgrade.

    Managed OS Upgrade

Restart Required

As indicated in Managed Software Center, OS upgrades (whether optional or managed) do require a restart and a wired connection (as most wifi connections do not persist after logout), and may take up to several hours to complete, depending on the age of the hardware and the type of hard drive. Upgrades on SSDs will take considerably less time to complete. As with any macOS upgrade, there is always a possibility that the upgrade process may hang, become caught in a restart loop, or otherwise fail to succeed. For this reason, it's best to schedule upgrades when the Mac is on campus, or when it can be brought to campus if post-upgrade support is required.

Contact the EPS team

Keywordseps munki mtm "multi tenant" multi-tenant mac macos endpoint techs-eps-mtm upgrade in-place "in place"   Doc ID90102
OwnerEPS Distribution ListGroupUniversity of Illinois Technology Services
Created2019-03-01 14:08:46Updated2023-08-21 10:06:49
SitesUniversity of Illinois Technology Services
Feedback  1   0