Endpoint Services, Munki, Using Munki to Upgrade macOS
This article provides guidance on using Munki to perform in-place macOS upgrades on Intel hardware without disturbing user data.
Looking to instead perform a clean macOS install? Here's how.
Systems
Munki Mac Endpoint Management
Affected Customers
University of Illinois IT Pros leveraging Technology Services Endpoint Service Munki Mac Endpoint Management
Actions
- General Information
- Hardware Support Considerations
- Vital Software Compatibility
- Optional vs. Managed Installs
- Restart Required
General Information
Multi-Tenant Munki can be used to perform in-place macOS upgrades (e.g. from macOS 11 to macOS 12) on Intel hardware without disturbing user data. These upgrades use Apple's own 'startosinstall' upgrade mechanism built into macOS installer packages, ensuring that any required firmware updates are applied during the upgrade.
Due to volume ownership requirements, Munki may not be used to upgrade Apple Silicon hardware.
Intel-only upgrade packages for macOS 12 (Monterey) and macOS 11 (Big Sur) are available for MTM stakeholder use. The upgrade installer name keys are install_macos_[monterey/big_sur].
Hardware Support Considerations
Before planning an OS upgrade, check Apple's system requirements to confirm hardware compatibility. Munki can't natively know if the device in question is capable of running the new operating system, so it will try in all cases but fail on unsupported hardware.
Vital Software Compatibility
Next, check vendor resources to confirm that all vital software on the device is compatible with the new OS.
Optional vs. Managed Installs
When ready, make the upgrade available by adding it to the Mac's serial number manifest as either an optional install or a managed install. (See our article on Munki manifests for guidance on editing manifests.)
- For an optional install, the upgrade will appear in Managed Software Center in multiple locations, but most notably on the 'Updates' tab in the 'Other available updates' section, where it can be selected at a time convenient to the end user. The installer won't be downloaded until the upgrade is selected.
Selecting the optional install will present a pre-upgrade alert in Managed Software Center, along with an option to cancel the selection and return the upgrade to its former optional status:
- For a managed install, the installer will be downloaded and then offered on the 'Updates' tab in Managed Software Center the next time Munki runs, usually within an hour or two as long as the device is awake and online. It will not present the pre-upgrade alert; and, as with any other managed install, it will block all other pending and future software updates until it is run. For this reason, optional installs may be a better choice than managed installs in situations when the end user will be performing the upgrade.
Restart Required
As indicated in Managed Software Center, OS upgrades (whether optional or managed) do require a restart and a wired connection (as most wifi connections do not persist after logout), and may take up to several hours to complete, depending on the age of the hardware and the type of hard drive. Upgrades on SSDs will take considerably less time to complete. As with any macOS upgrade, there is always a possibility that the upgrade process may hang, become caught in a restart loop, or otherwise fail to succeed. For this reason, it's best to schedule upgrades when the Mac is on campus, or when it can be brought to campus if post-upgrade support is required.