Ensure Download New Updates When Available Is Enabled

MediumLevel 1Automatedmacos

Description

In the GUI, both "Install macOS updates" and "Install app updates from the App Store" are dependent on whether "Download new updates when available" is selected.

How it is checked

Audit method: Shell command

shell

/usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.SoftwareUpdate').objectForKey('AutomaticDownload').js
EOS

Expected output: true

How it is fixed

Fix method: Guidance or infrastructure patch

Profile (preferred): com.apple.SoftwareUpdate AutomaticDownload = <true/>. Terminal: sudo /usr/bin/defaults write /Library/Preferences/com.apple.SoftwareUpdate AutomaticDownload -bool true. GUI: System Settings > General > Software Update > i > Set Download new updates when available to enabled > Done.

Properties

Operating systems: macos-15
Tags: macossoftware-update
Reference: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 1.2 Ensure Download New Updates When Available Is Enabled

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell

tmaegis scan --target macos