Omnissa Workspace ONE has just expanded its macOS management capabilities with the release of declarative device management (DDM) support. First introduced for iOS and iPadOS in Workspace ONE version 2406, support for DDM has now been extended to macOS, enhancing device management by enabling faster and more efficient updates with minimal server interaction. This release introduces software update enforcement and Passcode configurations as the first set of DDM features available for macOS. 

What is declarative device management? 

DDM offers a modern, proactive approach to managing Apple devices, reducing the dependency on constant communication between devices and the management server. With DDM, devices are empowered to make more decisions locally, only communicating with the server when necessary. This improves overall performance, network efficiency, and the user experience. 

Workspace ONE DDM configurations for macOS

There are two new additions: 

Software update enforcement 

Keeping macOS devices up to date is a critical part of ensuring security, performance, and compliance. With DDM, software update enforcement allows administrators to automatically install software updates to devices and enforce them based on configurations set in Workspace ONE. The capability allows admins to select the desired OS version and select the date and time to enforce the update. Then it automatically alerts Mac users of the impending updates weeks in advance with an escalating series of notifications that provide an opportunity to complete the update when it is most convenient for them. Overall, software update enforcement should result in faster, more reliable updates, enabling device compliance without waiting for frequent server check-ins. 

For more details, you can refer to Apple’s documentation, Installing and Enforcing Software Updates. 

Passcode configurations 

Enforcing strong passcode policies is critical for maintaining security on managed devices. With DDM, Passcode configurations are now available for macOS devices, allowing admins to set passcode requirements more efficiently. The device is empowered to handle these enforcement configurations locally, providing a more streamlined experience. 

You can find further information on how DDM handles passcode enforcement on macOS by visiting Apple’s official guide on Passcode declarative configuration. 

Looking ahead: Future DDM expansions for macOS 

While the current release brings software update enforcement and Passcode configurations to macOS, Workspace ONE will continue expanding its DDM functionality for macOS, as well as iOS and iPadOS, in upcoming releases. Future updates will include additional configurations, further enhancing software update enforcement management capabilities and delivering even more efficient and scalable macOS management. 

Note that DDM functionality requires modern SaaS architecture of Workspace ONE. To learn more about modern architecture, please see this Tech Zone article: Workspace ONE UEM Modernization Wave 1.  

Stay tuned for more updates as Workspace ONE continues to innovate in the macOS management space!