Physical efforts in virtualization and mobility

Suppressing iOS updates

So you’ve got a whole bunch of iPads out in the field hosting various applications and iOS9 comes out; one of the application vendors tells you his application isn’t quite ready for the latest OS and that you should hold off on updating your fleet. Problem – If you look for an option to disable iOS updates in your MDM suite you won’t find it, this is not a limitation of your MDM provider but more a control that Apple hasn’t provided to them. So if you ask your MDM vendor they will probably say it’s not possible, and as far as I can tell this is indeed the case. I’m going to keep looking but for now the best we can do is suppress the notifications that pop up advertising to all and sundry that a new version is available, but even this is not an out-of-the-box setting so I’m going to explain how it’s handled in AirWatch.

  1. Create a new iOS profile and in the General section endure that the Assignment Type is Auto using your All Corporate Devices (or similar) Smart group.
  2. Select the Content Filter payload
  3. Select Built-in: Deny Websites
  4. In Blacklisted URLs enter (Don’t be tempted to use any * here as is common with proxy exceptions as AirWatch doesn’t seem to recognise them and it breaks the string)
    1. Note that the requirement is iOS 7+Supervised for this to work, so have a read about DEP if your aren’t sure if you are able to meet this requirement.
  5. Click Save & Publish

Now there’s nothing to stop users navigating through the menus to check to see if there is an iOS update, finding one and proceeding to download and update it themselves, so this is about as good as it gets for now. According to the comments this short article it is possible to use via a proxy server (although I think it should be – note no ‘e’ on apple) to disable access to the download location but I didn’t have any joy with this. If I ever get any further with this issue I’ll post an update with the final solution.


3 responses to “Suppressing iOS updates

  1. Eric Woodland September 9, 2016 at 2:54 am

    Have you implemented this with any of the subsequent iOS 9 updates? I imagine it will hold up against iOS10, but would like to hear some feedback if you have any. PS: I’m testing now against 9.3.5. Thanks!


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: