Skip to content

Why You Should Keep Your Apple Operating Systems Up to Date

Steven Vogt Steven Vogt
Why You Should Keep Your Apple Operating Systems Up to Date

As an Apple admin, one of your responsibilities is to secure company data on your users’ Apple devices. Luckily, those devices are inherently secure, which makes your job easier. But as with any operating system or other software, vulnerabilities are occasionally discovered.

Apple is excellent about releasing operating system updates. While these updates can bring new and exciting features, they also bring fixes for those newly discovered vulnerabilities. So installing the latest version of the operating system is a good security practice.

Apple's Operating System Support

Fortunately, upgrading the OS on a managed device is typically simple: You can use the built-in software update mechanism or use your MDM solution to trigger it.

But occasionally you’ll run into issues that prevent you from keeping the operating systems on all the devices in your fleet updated. For example, you might have old Mac hardware that the latest OS doesn’t support. Or maybe you have a mission-critical application that isn’t compatible with the new OS.

If you’re unsure whether or not the latest OS will run on your hardware, the best reference is on Apple’s website. There you’ll find compatibility information for iOS, iPadOS, and macOS.

On those pages, for example, you can learn that macOS Big Sur is compatible with Mac computers all the way back to the 2013 MacBook Pro. iOS 14 is compatible with iPhone devices going back to the 6S, which was released in 2014. In other words, Apple’s latest operating systems are compatible with Mac computers that are eight years old and iPhone devices that are seven—pretty impressive when you consider how quickly and extensively Apple hardware evolves.

Security Updates for Older Devices

If you’re coming from a Windows admin world, you might be familiar with Microsoft’s lifecycle FAQ, which provides specifics on how long Microsoft will support its operating systems. While Apple doesn’t spell out how long it will officially support a given OS that explicitly, you can draw some conclusions based on history.

That history is easily seen on Apple’s security updates webpage. For example, scroll back to July 21, 2021 and you’ll see that Apple updated both macOS 11.5 and 11.5.1. On the same day, you will see that the company released security updates for macOS Mojave and macOS Catalina. But there were no updates for prior operating systems listed.

Now scroll down to September 20, 2020—before Big Sur was released, when Catalina was still the latest and greatest OS for Mac. You will see that Apple released macOS Catalina 10.15.7 that day, along with security updates for Mojave and High Sierra.

If you do the math, you can see Apple typically supports the latest OS version and two releases before that—in other words, N minus 2. That could always change, but that’s been the historical trend.

Apple likely has a variety of reasons for not supporting operating systems indefinitely. But the most obvious one is that maintaining software takes time and resources. Maintaining old software becomes burdensome because of changes in technology, codebase, and more. The payoff for doing so diminishes as users upgrade from those older versions. Those same resources can be better utilized building new features and implementing bug fixes for current and future product versions.

Is It Time to Upgrade?

At Iru, we are following Apple’s lead in keeping customers safe with the latest software and operating systems.

 If you have Apple devices running older operating systems, we recommend upgrading them to reduce the risk of security vulnerabilities on your fleet and to ensure they continue to work with Iru. 

Kandji is now Iru. This article was originally published under the Kandji brand.

Recent Articles

Featured image: Teams running Vulnerability Response patch critical CVEs in half the time
Matt Day 2 min read

Teams running Vulnerability Response patch critical CVEs in half the time

We recently measured remediation behavior across anonymized customer fleets. Customer accounts running Vulnerability Response closed more of their critical vulnerabilities, and closed them faster. The pattern held across every customer cohort.

Educational
Featured image: Introducing Policy Management: Create, publish and track compliance policies in Iru
Pedro Ventura 5 min read

Introducing Policy Management: Create, publish and track compliance policies in Iru

It's Thursday afternoon. The audit is in 45 days.

Product News
Featured image: Compliance Automation momentum: new frameworks and industry recognition
Iru Team 4 min read

Compliance Automation momentum: new frameworks and industry recognition

As of this week, Iru Compliance Automation supports three new frameworks: CMMC, NIST SP 800-171, and ISO 27701. These frameworks join the others within Iru Compliance Automation today (SOC 2, ISO 27001, ISO 42001, GDPR, HIPAA, NIST 800-53, and NIST CSF 2.0), bringing the total to ten.

Product News

See Iru in action

Discover why thousands of teams choose Iru

By submitting this form I agree to Iru’s Privacy Policy and consent to be contacted by Iru about its products and services.

Stay up to date

Iru's bi-weekly collection of articles, videos, and research to keep IT & Security teams ahead of the curve.