macOS security updates available Monday, Feb. 21

Dear Mac users,

WHAT ARE WE DOING?

Computing will be enabling security updates for Mac computers running Big Sur v11 and Catalina v10.15.

For additional information about macOS updates, see https://fermi.servicenowservices.com/kb_view.do?sysparm_article=KB0011722

 

WHEN WILL THIS OCCUR?

Monday, Feb. 21

WHAT IS THE IMPACT TO YOU?

Alerts announcing the availability of the security updates for manual installation will appear on your screen.

WHAT DO YOU NEED TO DO?

  • Proceed with the installation when the alert appears on your screen.
  • If an alert does not appear, you can check for updates manually by clicking “Software Update” in “System Preferences.”
  • If you do not receive the alerts and the security updates do not appear after the software update check, please contact the Service Desk for assistance.
  • If you use a Fermilab-owned centrally managed Mac running Big Sur, macOS updates notification software Nudge will alert you an update is available. You can start the security update by clicking the “Update Device” button in Nudge notification window, which will launch “Software Update” in “System Preferences.” Deferrals are allowed until March 21, at which point Nudge notification window will appear in front of all your open applications and you will not be able to close it to defer the update any further.
  • Automatic installation on macOS Catalina will begin on March 21.

 

If you have customized the configuration of your Mac to allow incoming SSH:

  • Some updates from Apple may overwrite existing macOS system configuration files. This may cause a Mac with certain custom configurations to violate OS Baseline and be blocked from the network. macOS Catalina updates initiated through Jamf Self-Service will back up the existing SSHD configuration file and turn off remote login (inbound ssh). You will need to review the SSHD configuration file to ensure compliance before turning on remote login (inbound ssh).

 

If you use Apple’s built-in macOS software update to install Apple updates and have configured your Mac to allow incoming SSH:

  • We recommend you back up your SSHD configuration file and disable incoming SSH before installing the update.

 

For additional information about configuring Kerberos, SSH and SSHD, see https://fermi.servicenowservices.com/kb_view.do?sysparm_article=KB0011294