System updates

System updates are a key component of device management in Android Enterprise. They enable the configuration of update policies for managed devices to ensure security and stability.

System Update Type #

In the Manage System Updates section, the System Update Type for managed devices can be defined. The available options are:

• Unspecified: Follows the device’s default system update behavior. This typically requires manual acceptance of system updates.
• Automatic: Automatically installs system updates as soon as they become available.
• Windowed: Automatically installs system updates within a defined daily maintenance window. This also ensures that Play apps are updated during the window. This option is recommended for kiosk devices to ensure that pinned foreground apps from Play remain updated.
• Postpone: Delays the automatic installation of system updates for up to 30 days.

When Windowed is selected, the required fields Start time and End time appear (preset to 00:00 and 00:30). The times refer to the device’s local time. If the end time is earlier than the start time, the maintenance window spans midnight. Start and end time must be at least 30 minutes apart; otherwise, the configuration cannot be saved.

Annual System Update Freeze Period #

The Annual system update freeze period defines periods during which no system updates are installed. Start and end date consist only of month and day; the period recurs every year.

Features of the Freeze Period #

• During the freeze period, all incoming system updates (including security patches) are blocked.
• Outside the freeze period, the normal update behavior applies.
• Freeze periods are created via Add. Multiple periods can be defined and removed individually.
• A period may cover at most 90 days. There must be at least 60 days between two periods.
• If the end date is earlier than the start date, the period spans the turn of the year.