Endpoint Services, Munki, Using Munki to Upgrade macOS

This article provides guidance on using Munki to perform in-place macOS upgrades without disturbing user data.

Looking to instead perform a clean macOS install? Here's how.

Systems

Munki Mac Endpoint Management

Affected Customers

University of Illinois IT Pros leveraging Technology Services Endpoint Service Munki Mac Endpoint Management

Actions

General Information

Multi-Tenant Munki can be used to perform in-place macOS upgrades (e.g. from macOS 10.13.x to macOS 10.14.x) without disturbing user data. These upgrades use Apple's own 'startosinstall' upgrade mechanism built into macOS installer packages, ensuring that any required firmware updates are applied during the upgrade.

Upgrade packages for macOS 10.13 (High Sierra) and macOS 10.14 (Mojave) are available for MTM stakeholder use. The macOS 10.13 (High Sierra) upgrade installer's name key is Install_macOS_High_Sierra; for the macOS 10.14 (Mojave) upgrade installer, it's install_macos_mojave.

Hardware Support Considerations

Before planning an OS upgrade, check Apple's system requirements to confirm hardware compatibility. Munki can't natively know if the device in question is capable of running the new operating system, so it will try in all cases but fail on unsupported hardware.

Vital Software Compatibility

Next, check vendor resources to confirm that all vital software on the device is compatible with the new OS.

Optional vs. Managed Installs

When ready, make the upgrade available by adding it to the Mac's serial number manifest as either an optional install or a managed install. (See our article on Munki manifests for guidance on editing manifests.)

  • For an optional install, the upgrade will appear in Managed Software Center in multiple locations, but most notably on the 'Updates' tab in the 'Other available updates' section, where it can be selected at a time convenient to the end user. The ~5 GB installer won't be downloaded until the upgrade is selected.

    Optional_OS_Upgrade
    Selecting the optional install will present a pre-upgrade alert in Managed Software Center, along with an option to cancel the selection and return the upgrade to its former optional status:

    ManagedSoftwareCenterPreUpgradeAlert

  • For a managed install, the ~5GB installer will be downloaded and then offered on the 'Updates' tab in Managed Software Center the next time Munki runs after the manifest is modified, usually within an hour or two as long as the device has a network connection. It will not present the pre-upgrade alert; and as with any other managed install, it will block all other pending and future software updates until it is run. For this reason, optional installs may be a better choice than managed installs in situations when the end user will be performing the upgrade.

    Managed OS Upgrade

Restart Required

As indicated in Managed Software Center, OS upgrades (whether optional or managed) do require a restart and a wired connection (as most wifi connections do not persist after logout), and may take up to several hours to complete, depending on the age of the hardware and the type of hard drive. Upgrades on newer Macs with SSDs will take considerably less time to complete. As with any macOS upgrade, there is always a possibility that the upgrade process may hang, become caught in a restart loop, or otherwise fail to succeed. For this reason, it's best to schedule upgrades when the Mac is on campus, or when it can be brought to campus if post-upgrade support is required.


Contact the EPS team




Keywords:eps munki mtm "multi tenant" multi-tenant mac macos endpoint techs-eps-mtm upgrade in-place "in place"   Doc ID:90102
Owner:EPS Distribution List .Group:University of Illinois Technology Services
Created:2019-03-01 14:08 CDTUpdated:2019-03-15 14:25 CDT
Sites:University of Illinois Technology Services
Feedback:  0   0