Connect
For years, IT admins have relied on the mobile device management (MDM) protocol to manage Apple devices. While effective, it often required a constant, back-and-forth communication between the device and the MDM server.
Enter declarative device management (DDM): Apple’s modern, event-driven management framework. DDM fundamentally changes the relationship between the device and the MDM server, making management faster, more autonomous, and far more responsive. In essence, DDM shifts logic from the MDM server to the device. While consumers eagerly anticipate Apple’s latest innovations each September, IT professionals know there’s more to the story. Beyond the user-facing delights, Apple consistently delivers powerful updates specifically designed to streamline enterprise IT and elevate security.
What Is Declarative Device Management (DDM)
Traditionally, the MDM server dictates policies by pushing a specific action or command to the device. Once the device complies, the server must continuously poll it for updates to verify that its state hasn’t changed. This is an imperative model, where the server manages every step through a persistent series of commands.
In the declarative model, the MDM server tells the device what its desired state should be and uploads all the necessary information, rules, and configurations (policies and apps) to the device upfront. The device then takes over. It becomes intelligent enough to manage its own journey to the declared state autonomously. The move to DDM aligns with the broader industry trend toward zero-touch and autonomous security architectures.
Note: Important Note: DDM Is NOT an MDM Replacement.
DDM is an addition to the existing Apple MDM protocol. DDM is a new capability that certified MDM vendors leverage to enhance device management. Traditional MDM commands like full device wipes, activation lock, and certain enrollments still rely on the imperative framework.
DDM works in parallel with these classic commands, handling the sophisticated, real-time configuration and monitoring tasks, while the MDM server maintains its critical role as the central policy manager and authority.
JumpCloud: The Platform for the Future of Apple Management
JumpCloud’s support for DDM reaffirms our commitment to providing our customers with the most modern, efficient, and secure management platform available for Apple devices. By fully leveraging DDM, we not only ensure the viability of our solutions but give our customers the controls they need to manage the autonomous, self-securing fleet of tomorrow.
Key Features
- Define and enforce a target OS version with a mandatory installation deadline
- Allow non-admin (i.e., standard) users to install both major and minor OS updates
- Configure automatic download, installation, and deferral options
- Extend OS update management to mobile (iOS and iPadOS) while supporting the latest standard on macOS
- Utilize Apple’s native update notifications for a seamless, consistent workflow
Key Benefits
- Ensure timely OS updates and eliminate patching gaps
- Encourages fewer manual interventions and reduced dependency on agent-based tools
- Smooth, intuitive update flow using native Apple UI
- Manage updates across all Apple device types with one unified approach
- Align with Apple’s latest DDM framework and stay ahead of legacy deprecations
Get Moving with Apple DDM
Preparing your organization for Apple’s DDM is easy. Simply leveraging JumpCloud’s Apple MDM solution and your IT teams can start spending less time on troubleshooting tasks more time focusing on strategic projects.
Also, don’t let the recent Apple releases catch you off guard. Watch our webinar: Apple’s macOS and iOS/iPadOS 26 Updates: What IT and Security Teams Need to Know to learn about the key changes and managing new Apple’s features with JumpCloud.
