SUPER for MacOS Updates

SUPER aka S.U.P.E.R.M.A.N. is a script for fully-automating macOS updates. It uses IBM Notifier 3.x (which it auto-installs) to provide customizable popup notices like Nudge, and automates the macOS update procedure similar to using Nudge with NudgeHelper.
 

 
 
SUPER has some advantages over Nudge+NudgeHelper - for instance, the user never sees the macOS Updates dialog, and by default it is configured so that once they've entered their password for updating one time, they won't have to enter it again.  It also downloads and prepares updates before prompting the user.
 
It has some disadvantages as well - for instance, it's not possible to have SUPER only prompt if macOS is not a specific minor version, unlike Nudge.  If a new minor version of macOS is released, SUPER will detect it and prompt for updates.

SUPER can be configured with different types of deadlines for installing updates:

• Date deferral - the user may defer updates until the date is reached

• Days deferral - the user may defer updates for N days

• Count deferral - the user may defer N times, no matter how long that takes 

It minimizes user downtime by downloading and preparing macOS updates before prompting the user to update.

When it first prompts it will look like this:
 

 
(If the deadline is close, the "Defer" time will be the time until the deadline, otherwise it will be the number of minutes configured in the "Default Deferral Timer" option)
 
 
If you click on Restart, on an Apple Silicon Mac you'll get the user auth dialog:
 

 
NOTE: the password will get saved in the user's keychain - next time the Mac needs updates, the user will not be prompted!
 
 
IF you enter the wrong password twice it will abort, and you'll get the error dialog:
 

 
 
Once you've entered your password (or immediately on an Intel Mac) you'll see the restart message:
 

 

Full details on using & configuring SUPER are in the SUPER wiki at https://github.com/Macjutsu/super/wiki

 

 

---

SETTING UP SUPER macOS Updates

NOTE: for all of the examples below, "ENGR - " versions exist in UT Jamf in the ENGR site.  There are also templates that EPM can clone into your site.

For testing SUPER you will need several configuration profiles in your site (where "SITE" below should be your sitename, e.g ENGR, MECH, COFA, etc).  
 

• Two Configuration Profiles for Apple Software Update settings and notifications:

• One Configuration Profile for the SUPER macos updates settings

 
You should create a smart group for your test systems:
 
SITE - SUPER macos update targets
 

Create two polices to add the 'accessory' files to be displayed, and to run SUPER itself:
 
SITE - Add SUPER Accessory Files

• This uses script GLOBAL - Add Accessory HTML for SUPER which takes 2 parameters for the HTML to use for the 'macosupdate' and 'macosuserauth' accessory displays used by SUPER

• Give it a custom trigger such as SITE-add-super-files