Patching macOS (M1/M2/M3 Chip Processors) Using SanerNow

Overview:

To successfully remediate macOS devices powered by M1, M2, or M3 chip processors, a local user account with specific permissions must be created on the device. This is a recent prerequisite introduced by Apple to apply operating system updates seamlessly.

Affected Devices:

Mac devices with M1, M2, or M3 chip processors.

Solution:

Follow these steps to patch macOS devices using the SanerNow platform:

1. Log in to SanerNow
   • Access the SanerNow platform with your credentials.
2. Navigate to the Patching Module
   • Go to Patch Management (PM) > Missing Patches.
3. Select and Apply Patches
   • Identify the macOS patch required for the target device.
   • Select the patch and click Apply Selected Patches.

4. Configure the Task
   • Provide a Task Name and set the Remediation Schedule as needed.

5. Upload the Pre-Script
   • Under Task Controls, click Remediation Scripts.
   • Select Pre-Script and upload the provided macOS-Silicon-User-Creation.sh file.

6. Edit the Pre-Script
   • Before uploading, edit the script to include the credentials of a local user account on the target macOS device. Ensure the account has local volume permissions.
   • Refer to the attached screenshot for guidance.

7. Apply the Patches
   • After uploading and configuring the pre-script, click Apply Selected Patches to initiate the remediation process.

Additional Notes:

• The macOS-Silicon-User-Creation.sh script is included in the attached ZIP file.
• Ensure the script is configured accurately to avoid patching failures.