32 C
Ahmedabad
Friday, July 4, 2025

Application patch management

Introduction

This document explains the step by step process to patch/update the applications using jamf

Available Options

Jamf supports different options to patch third party installed applications. You can use one of these methods to manage third-party macOS software updates depending on the needs of your organization.

  • Installomator
  • Package Model
  • Jamf App Catalog (Limited for a few applications)
  • App store

Installomator

Getting third-party software installed and updated on Mac clients is a major task for Jamf Pro administrators. To simplify the administrator’s work, we can use installomator that automates software download, verification, installation and updates. Installomator is designed to be easy to deploy, manage, configure.

  • Download the latest installomator from github

https://github.com/Installomator/Installomator/

  • Upload it to scripts

Patch Management

This section helps us to understand the different versions which are installed in your environment

  • Create a “Patch Management” group – This group is required for monitoring purpose and used in creating “Smart Computer Groups”
  1. Go to “Patch Management”
  2. Click on “New”
  3. Search with the required “application” and select it (Do not select Legacy Definition)

Smart Computer Groups

Create 2 smart computer groups as below

Group 1

  • Go to “Smart Computer Groups”
  • Click on New
  • Computer Group Display Name : Application Name (Follow your naming standards). I have given the name as “Patch Reporting: Google Chrome”
  • Criteria –> Add –> Show Advanced Criteria –> select the option “Patch Reporting Software Title”
  • Select the group created in “Patch Management” section and select the query as showed in the picture below

Group 2

  • Go to “Smart Computer Groups”
  • Click on New
  • Computer Group Display Name : Application Name (Follow your naming standards). I have given the name as “Installomator Update: Patch Reporting: Google Chrome”
  • Criteria –> Add –> Select the option “Computer Group”
  • Select the group created in previous step i.e group 1

Policy

Create a new policy and target the deployment to “Group 2’

  1. Go to Policies –> New
  2. Display Name : Update Google Chrome (follow the naming standards you have set)
  3. Under “Triggers”, select the option which fits for you
  4. Go to Scripts section and add “Installomator” script, add the required Parameter for the application
  5. Under Scope, target it to “Group 2”

Package Model

  • Download the installer from vendor web site
  • Create a package and upload it to “Packages”
  • Create a new policy
  • Under packages payload, browse to the required version
  • Configure the “Scope”

Jamf App Catalog

Jamf has The Jamf App Catalog contains a list of third-party macOS software titles that you can use with the Patch Management workflow or App Installers to manage third-party macOS software updates in your environment.

  • Go to Computers
  • Select “Mac Apps”
  • Click on “New” and select “Jamf App Catalog”
  • Select the required application and target the deployment (All/specific smart computer group)

App Store

This approach is limited to the applications which are installed via “App Store”

  • Create a Configuration Profile
  • Under “Software Update” payload, select the option “Automatically install app updates from the App Store”

  • Target the profile

 

Happy Learning

Regards,
Ramesh Makkapati
LinkedIn : https://www.linkedin.com/in/ramesh-makkapati-8485852a/

Author

  • Ramesh has 10+ years of experience in workplace services domain majorly in windows and macOS operations. His main area of interest is to design & implementation of simplified and stable digital workplaces to end users. He is proficient in working on MECM (Intune and SCCM), jamf, Microsoft Azure, Application life cycle management, Application Packaging, and Citrix

- Advertisement -spot_img

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Latest posts