Home

S.U.P.E.R.M.A.N. v5.0.0

Software Update Policy Enforcement (with) Recursive Messaging And Notification

S.U.P.E.R.M.A.N. optimizes the macOS update experience.

by Kevin M. White

Introduction

S.U.P.E.R.M.A.N. (or just super) is an open source script that provides administrators with a comprehensive solution to encourage and enforce macOS minor updates, macOS major upgrades, Jamf Pro Policies, or enforced system restarts. Deployed using a single script and optional configuration profiles, super creates a background agent (aka LaunchDaemon) that ensures updates are applied with the least user interference possible. Further, super offers a broad range of options for customizable dialogs, notifications, schedules, deferrals, and deadlines. In other words, super makes the macOS update experience better for both users and administrators.

Main Features

Fully automated (when properly configured no user authentication is needed) macOS minor update or macOS major upgrade workflows for both Intel and Apple silicon Mac computers.
Customizable user interface dialogs and notifications using IBM Notifier 3.x.
Minimizes user downtime by automatically downloading and preparing macOS updates or upgrades before interrupting the user to restart.
Full support for the latest macOS update workflows including faster "over-the-air" macOS major upgrades and macOS Rapid Security Release (RSR) updates.
Minimizes user downtime by automatically installing non-system Apple software updates (Safari, Xcode, etc.) immediately after a macOS update or upgrade.
Automatic deferral options for user Focus, Do Not Disturb, and screen sleep assertions (presentations, meetings, etc).
A variety of workflow enforcement options including maximum deferral counts, maximum deferral days, and date deadlines.
Support for "maintenance window" workflow options that allows administrators to set exactly when super should be active.
Scheduled installation workflow options allow administrators or the end user to specify a date and time to automatically initiate a super workflow.
Support for "self service" workflow options that allow the end user to immediately initiate a super workflow.
Workflow option to enforce a system restart even when not installing a macOS update or upgrade.
Background agent (LaunchDaemon) allows super to work independently of a mobile device management (MDM) service. (In other words, you can take advantage of super with or without an MDM service.)
Automatic installation of all required items and dependencies.
Configurable using interactive command line super or managed configuration profiles.
Substantial validation and logging including both testing and verbose modes.
Robust failover mechanisms for handling workflow failures.
For computers managed by Jamf Pro:
- Automatic inventory and policy check-in as soon as possible after a macOS update or upgrade completes.
- A variety of optional Extension Attribute scripts that can collect super's operating status.
- Option to run Jamf Pro policies prior to installing a macOS update or upgrade.
- Option to run Jamf Pro policies without Apple software updates and still take advantage of custom dialogs, notifications, schedules, deferrals, and deadlines.