Add New Ring

Administrators can create custom deployment rings to control how and when macOS updates are rolled out across devices. In addition to the four system-defined default rings, administrators can create up to 15 custom rings, resulting in a maximum of 19 rings (default + custom).

Accessing the Add New Ring Flow

1. Navigate to SureMDM Console > OS Updates > macOS > Automated Software Updates > Configuration.
2. Click Add New Ring.
3. The Add New Ring configuration screen opens.

Add New Ring – Configuration Sections

The Add New Ring screen is organized into multiple sections. Each section must be reviewed and configured before saving the ring.

1. Ring Details

This section defines the identity and purpose of the ring.

Field	Description
Ring Name	Enter a unique name for the ring. This name is used across the Configuration table, Overview charts, and reports.
Description	Optional. Provide a brief description explaining the intent or target audience of the ring (for example, pilot users or specific departments).

2. Configuration Details

Update Settings

This section determines which macOS updates are eligible for deployment through the ring.

Option	Description
Automatic Software Update Action Management
Automatic Download of Available Updates	Allows administrators to enable or disable automatic downloading of available updates on the device. Select from the following options: Allowed Always On Always Off
Automatic Installation of OS Updates	Allows administrators to enable or disable automatic installation of OS updates on the device. Select from the following options: Allowed Always On Always Off Note: If Automatic Download of Available Updates is set to Always Off, this option will be disabled. If Automatic Installation of OS Updates is set to Always On, both Automatic Download of Available Updates and Automatic Installation of Security Updates are disabled.
Automatic Installation of Security Updates	Allows administrators to enable or disable automatic installation of security updates on the device. Select from the following options: Allowed Always On Always Off
Rapid Security Response Settings
Enable Rapid Security Response	If enabled, Rapid Security Responses can be offered for user installation. If unchecked, Rapid Security Responses are not offered for user installation. Note: Supported on macOS 15 and later.
Enable Rollback	If enabled, users can be offered the option to roll back Rapid Security Responses. If unchecked, the system does not offer Rapid Security Response rollbacks to users. Note: Supported on macOS 15 and later.
Other Configurations
Allow OS Updates for Standard Users	If unchecked, only administrators can perform major and minor software updates.

Deferral Settings

Deferral settings control when updates are offered to devices after Apple releases them.

Setting	Description
Defer Major OS Update	Prevents devices from automatically installing major OS updates for up to 90 days after release. When enabled, the Number of days to defer Major OS updates field is displayed. Specify the number of days to defer major OS updates. The field is mandatory and accepts values from 0 to 90.
Number of days to defer Major OS updates	Specify the number of days to defer a major OS software update on the device. When set, major OS updates only appear after the specified delay, following the release of the software update.
Defer Minor OS Update	Prevents devices from automatically installing minor OS updates for up to 90 days after release.
Number of days to defer Minor OS updates	Specify the number of days to defer a minor OS software update on the device. When set, minor OS updates only appear after the specified delay, following the release of the software update.
Defer Non-OS System Update	Prevents devices from automatically installing Apple system updates for up to 90 days after release.

[Important Considerations]

• Do not configure the same macOS Software Update settings in both Automated Software Updates and Profiles, as these methods control overlapping update behaviors and may conflict. It is recommended to manage each setting exclusively through one method to ensure consistent and predictable update behavior. If a conflict does occur, the most recently deployed configuration will take precedence and override previous settings.
• Canary rings have zero deferral.
• Rings with longer deferral periods may not show installation activity immediately after software update release.

Update Enforcement

This section defines how updates are installed on devices.

Setting	Description
Enable Update Enforcement	Enables automatic enforcement of macOS updates based on the configured update settings.
Target Version Strategy	Defines how the target macOS version is determined for enforcement. This field is mandatory. Select from the following options: Latest Available Update: Automatically targets the latest macOS update released by Apple. Devices must install the latest available version according to the enforcement schedule. Specific Update Version: Allows administrators to select the exact macOS version devices must install to remain compliant. N-Version Approach: Defines how many Apple releases behind the latest version a device can remain before an update is enforced. Applicable only to custom rings.
Update Scope	Displayed when Latest Available Update is selected. Defines whether enforcement applies only to updates within the current macOS major version or includes new major macOS releases. Select from: Minor Updates Only Major + Minor Updates
Target Version	Displayed when Specific Update Version is selected. This field is mandatory and dynamically lists available macOS versions. Select the exact version devices must install to remain compliant. Devices running an older version are marked non-compliant and scheduled for an update.
Allowed Version Lag	Displayed when N-Version Approach is selected and applicable only to custom rings. Select from: N-1 N-2 Defines how many Apple releases behind the latest version a device can remain before minor update enforcement is triggered. This setting applies only to minor updates and is ignored for major updates
Installation Deadline	Specifies the number of days within which devices must install the required macOS update before automatic enforcement. Enter a value between 1 and 30 using the increase or decrease controls.
Device Local Time	Specifies the time at which the update installation deadline takes effect, based on the device's local time. Select a time between 00:00 and 23:59.

3. Assign Devices

This section defines the device scope for the update ring.

Use this step to associate devices with the newly created ring so that updates are deployed according to the ring’s configuration.

• The left pane displays the device group hierarchy, enabling administrators to navigate and filter devices based on organizational structure.
• The right pane lists the available devices within the selected group in a tabular view, displaying:
  • Device Name
  • Device Model

Assignment Controls

• Search: Locate specific devices by name.
• Refresh: Reload the device list to reflect the latest device inventory.
• Selection Checkbox: Select one or more devices to assign them to the ring.

Assignment Behavior

• Each device can be associated with only one update ring at any given time.
• Assigning a device to this ring automatically removes it from any previously assigned ring.
• Once reassigned, the device is governed exclusively by the configuration of the newly assigned ring.

Save Action

• Click Save to finalize the ring creation and apply device assignments.
• The ring becomes active immediately after saving, and assigned devices begin following the configured update policy.
• Click Previous to return to earlier steps and revise ring details or configuration settings before saving.