Add New Ring
Administrators can create custom deployment rings to control how and when iOS updates are rolled out across devices. In addition to the four system-defined default rings, administrators can create up to 15 custom rings, resulting in a maximum of 19 rings (default + custom).
Accessing the Add New Ring Flow
- Navigate to SureMDM Console > OS Updates > iOS/iPadOS > Automated Software Updates > Configuration.
- Click Add New Ring.
- The Add New Ring configuration screen opens.
Add New Ring – Configuration Sections
The Add New Ring screen is organized into multiple sections. Each section must be reviewed and configured before saving the ring.
1. Ring Details
This section defines the identity and purpose of the ring.
| Field | Description |
|---|---|
| Ring Name | Enter a unique name for the ring. This name is used across the Configuration table, Overview charts, and reports. |
| Description | Optional. Provide a brief description explaining the intent or target audience of the ring (for example, pilot users or specific departments). |
2. Configuration Details
Update Settings
This section determines which iOS updates are eligible for deployment through the ring.
| Option | Description |
|---|---|
| Automatic Software Update Action Management | |
| Automatic Download of Available Updates | Allows administrators to enable or disable automatic downloading of available updates on the device. Select from the following options: - Allowed (Default) - Always On - Always Off |
| Automatic Installation of OS Updates | Allows administrators to enable or disable automatic installation of OS updates on the device. Select from the following options: - Allowed - Always On - Always Off Note: If Automatic Download of Available Updates is set to Always Off, this option will be disabled. If Automatic Installation of OS Updates is set to Always On, both Automatic Download of Available Updates and Automatic Installation of Security Updates are disabled. |
| Automatic Installation of Security Updates | Allows administrators to enable or disable automatic installation of security updates on the device. Select from the following options: - Allowed - Always On - Always Off |
| Rapid Security Response Settings | |
| Enable Rapid Security Response | If unchecked, Rapid Security Responses aren’t offered for user installation. Supported on iOS 18.4 and later. |
| Enable Rollback | If unchecked, the system doesn’t offer Rapid Security Response rollbacks to the user. Supported on iOS 18.4 and later. |
| Other Configurations | |
| OS Update Cadence | Determines how software updates are displayed to users when multiple updates are available. Select from the following options: - Not Configured - Display All - Display only Oldest version - Display only Newest version |
Deferral Settings
Deferral settings control when updates are offered to devices after Apple releases them.
| Setting | Description |
|---|---|
| OS Update Deferral Period | Specifies the number of days to defer OS software updates on the device. When configured, software updates appear only after the specified delay following their release. Enter a value between 1 and 90 days. |
Behavioral Notes:
- Do not configure the same iOS/iPadOS Software Update settings in both Automated Software Updates and Profiles, as these methods control overlapping update behaviors and may conflict. It is recommended to manage each setting exclusively through one method to ensure consistent and predictable update behavior. If a conflict does occur, the most recently deployed configuration will take precedence and override previous settings.
- Canary rings have zero deferral.
- Rings with longer deferral periods may not show installation activity immediately after software update release.
.
Update Enforcement
This section defines how updates are installed on devices.
| Setting | Description |
|---|---|
| Enable Update Enforcement | Enables automatic enforcement of iOS updates based on the configured update settings. |
| Target Version Strategy | Defines how the target iOS version is determined for enforcement. This field is mandatory. Select from the following options: - Latest Available Update: Automatically targets the latest iOS update released by Apple. Devices must install the latest available version according to the enforcement schedule. - Specific Update Version: Allows administrators to select the exact iOS version devices must install to remain compliant. - N-Version Approach: Defines how many Apple releases behind the latest version a device can remain before an update is enforced. Applicable only to custom rings |
| Update Scope | Displayed when Latest Available Update is selected. Defines whether enforcement applies only to updates within the current iOS major version or includes new major iOS releases. Select from: - Minor Updates Only - Major + Minor Updates |
| Target Version | Displayed when Specific Update Version is selected. This field is mandatory and dynamically lists available iOS versions. Select the exact version devices must install to remain compliant. Devices running an older version are marked non-compliant and scheduled for an update. |
| Allowed Version Lag | Displayed when N-Version Approach is selected and applicable only to custom rings. Select from: - N-1 (Default) - N-2 Defines how many Apple releases behind the latest version a device can remain before minor update enforcement is triggered. This setting applies only to minor updates and is ignored for major updates |
| Installation Deadline | Specifies the number of days within which devices must install the required iOS update before automatic enforcement. Enter a value between 1 and 30 using the increase or decrease controls. |
| Device Local Time | Specifies the time at which the update installation deadline takes effect, based on the device's local time. Select a time between 00:00 and 23:59. |
3. Assign Devices
This section defines the device scope for the update ring.
Use this step to associate devices with the newly created ring so that updates are deployed according to the ring’s configuration.
- The left pane displays the device group hierarchy, enabling administrators to navigate and filter devices based on organizational structure.
- The right pane lists the available devices within the selected group in a tabular view, displaying:
- Device Name
- Device Model
Assignment Controls
- Search: Locate specific devices by name.
- Refresh: Reload the device list to reflect the latest device inventory.
- Selection Checkbox: Select one or more devices to assign them to the ring.
Assignment Behavior
- Each device can be associated with only one update ring at any given time.
- Assigning a device to this ring automatically removes it from any previously assigned ring.
- Once reassigned, the device is governed exclusively by the configuration of the newly assigned ring.
Save Action
- Click Save to finalize the ring creation and apply device assignments.
- The ring becomes active immediately after saving, and assigned devices begin following the configured update policy.
- Click Previous to return to earlier steps and revise ring details or configuration settings before saving.