Release_iOS-15-4_macOS-12-3

README.md

@@ -8,10 +8,10 @@ This release corresponds to the following OS versions
 
 | OS      | Version |
 |---------|---------|
-| iOS     | 15.2    |
-| macOS   | 12.1    |
-| tvOS    | 15.2    |
-| watchOS |  8.3    |
+| iOS     | 15.4    |
+| macOS   | 12.3    |
+| tvOS    | 15.4    |
+| watchOS |  8.5    |
 
 ## What's Available
 

declarative/declarations/configurations/management.test.yaml

@@ -18,7 +18,7 @@ payloadkeys:
   rangelist:
   - Installed
   - Failed
-  - PendingClient
+  - Unlocked
   default: Installed
   content: The status the system reports back when the device implements the configuration.
     Use this to override the normal 'success' result.

mdm/commands/certificate.list.yaml

@@ -1,7 +1,11 @@
 title: Certificate List Command
 description: This command allows the server to retrieve the list of installed certificates
   on the device. The command requires that the server has the Inspect Profile Manifest
-  privilege.
+  privilege. For userenrollment, this request will limit to certificates pushed via
+  MDM. Starting with iOS 15.4, the CertificateList command will return a Not Now response
+  prior to the first time a passcode-protected device is unlocked after boot. Between
+  iOS 15.0 and iOS 15.4, devices in that state did not respond with Not Now, but some
+  identity certificates may not have been reported in the response.
 payload:
   requesttype: CertificateList
   supportedOS:
@@ -30,7 +34,7 @@ payload:
       supervised: false
   content: |-
     This command allows the server to retrieve the list of installed certificates on the device. The command requires that the server has the Inspect Profile Manifest privilege.
-    For userenrollment, this request will limit to certificates pushed via MDM
+    For userenrollment, this request will limit to certificates pushed via MDM.
 payloadkeys:
 - key: ManagedOnly
   supportedOS:

mdm/commands/system.update.schedule.yaml

@@ -91,6 +91,23 @@ payloadkeys:
       content: |-
         The maximum number of times the system allows the user to postpone an update before it's installed. The system prompts the user once a day.
         This key is only supported when 'InstallAction' is 'InstallLater' and only supported for minor OS updates (for example, macOS 12.x to 12.y).
+    - key: Priority
+      supportedOS:
+        iOS:
+          introduced: n/a
+        macOS:
+          introduced: '12.3'
+        tvOS:
+          introduced: n/a
+      type: <string>
+      presence: optional
+      rangelist:
+      - Low
+      - High
+      default: Low
+      content: |-
+        The scheduling priority for downloading and preparing the requested update. This is only supported for minor OS updates (macOS 12.x to 12.y).
+        Available in macOS 12.3 and later. Prior versions of macOS used a priority of 'Low'.
 responsekeys:
 - key: UpdateResults
   type: <array>

mdm/commands/system.update.status.yaml

@@ -61,3 +61,59 @@ responsekeys:
         * 'Idle': The update is idle.
         * 'Downloading': The software update is downloading.
         * 'Installing': The software update is installing.
+    - key: MaxDeferrals
+      supportedOS:
+        iOS:
+          introduced: n/a
+        macOS:
+          introduced: '12.3'
+        tvOS:
+          introduced: n/a
+      type: <integer>
+      presence: optional
+      content: |-
+        The number of times a user can defer this OS update.
+        Available in macOS 12.3 and later.
+    - key: DeferralsRemaining
+      supportedOS:
+        iOS:
+          introduced: n/a
+        macOS:
+          introduced: '12.3'
+        tvOS:
+          introduced: n/a
+      type: <integer>
+      presence: optional
+      content: |-
+        The number of remaining user deferrals for this OS update.
+        Available in macOS 12.3 and later.
+    - key: NextScheduledInstall
+      supportedOS:
+        iOS:
+          introduced: n/a
+        macOS:
+          introduced: '12.3'
+        tvOS:
+          introduced: n/a
+      type: <date>
+      presence: optional
+      content: |-
+        The date of the next attempt at installing this OS update.
+        Available in macOS 12.3 and later.
+    - key: PastNotifications
+      supportedOS:
+        iOS:
+          introduced: n/a
+        macOS:
+          introduced: '12.3'
+        tvOS:
+          introduced: n/a
+      type: <array>
+      presence: optional
+      content: |-
+        The dates/times when the OS notified the user about installing this OS update.
+        Available in macOS 12.3 and later.
+      subkeys:
+      - key: PastNotificationDate
+        title: Past Notification Date
+        type: <date>

mdm/profiles/com.apple.applicationaccess.yaml

@@ -104,7 +104,9 @@ payloadkeys:
     iOS:
       introduced: n/a
     macOS:
-      introduced: n/a
+      introduced: '12.3'
+      userenrollment:
+        mode: forbidden
     tvOS:
       introduced: '10.2'
       supervised: true
@@ -333,6 +335,20 @@ payloadkeys:
   content: If 'false', prevents automatic downloading of apps purchased on other devices.
     This setting doesn't affect updates to existing apps. Requires a supervised device.
     Available in iOS 9 and later.
+- key: allowAutomaticScreenSaver
+  supportedOS:
+    iOS:
+      introduced: n/a
+    macOS:
+      introduced: n/a
+    tvOS:
+      introduced: '15.4'
+      supervised: true
+  type: <boolean>
+  presence: optional
+  default: true
+  content: If 'false', disables Apple TV's automatic screen saver. Available in tvOS
+    15.4 and later.
 - key: allowAutoUnlock
   supportedOS:
     iOS:

mdm/profiles/com.apple.security.firewall.yaml

@@ -72,3 +72,21 @@ payloadkeys:
   content: |-
     This string specifies the type of logging.
     Available in macOS 12 and later.
+- key: AllowSigned
+  supportedOS:
+    macOS:
+      introduced: '12.3'
+  type: <boolean>
+  presence: optional
+  content: |-
+    If 'true', allows built-in software to receive incoming connections.
+    Available in macOS 12.3 and later.
+- key: AllowSignedApp
+  supportedOS:
+    macOS:
+      introduced: '12.3'
+  type: <boolean>
+  presence: optional
+  content: |-
+    If 'true', allows downloaded signed software to receive incoming connections.
+    Available in macOS 12.3 and later.

mdm/profiles/com.apple.systemuiserver.yaml

@@ -5,7 +5,6 @@ payload:
   supportedOS:
     macOS:
       introduced: '10.7'
-      deprecated: '11.0'
       devicechannel: true
       userchannel: true
       requiresdep: false