System Update Policy

The System Update Policy configuration lets administrators control when devices receive system updates, including security patches and operating system updates. This configuration provides flexibility to:
  • Apply updates immediately.
  • Schedule updates within a specific time window.
  • Postpone updates for up to 30 days.
  • Implement freeze periods to block updates during designated times.

Devices running Android 9.0 or later support this configuration. Administrators can apply it when:

Note: This profile configuration functions the same as running the set_system_update_policy script command.

Installation Policy

Choose an installation policy that suits your organization's update needs:

Automatic Devices install system updates as soon as they become available.
Windowed Devices install updates only within a specific time window. Set the Starting and Ending time to define the window.
Postponed Devices delay updates for up to 30 days. After the delay, the device prompts users to install the update.
Note: A new update resets the 30-day timer if the administrator postpones the earlier update.

Annual OTA Update Freeze Periods

Administrators can create annual freeze periods to block over-the-air (OTA) updates during important times, such as holidays or critical operational periods. These freeze periods override the Installation Policy settings. You do this by specifying a freeze period in the Update Schedule section. Add more than one freeze period as necessary, following these rules:
  • Freeze periods cannot exceed 90 days.
  • Freeze periods cannot overlap.
  • Administrators must leave at least 60 days between two freeze periods.

Example: If you create a freeze period from January 1 to January 31, the next freeze period can start no earlier than April 2.