This Software Needs To Be Updated Mac

| 17-08-2021
[RAND-1-100] Comments

Oh the dreaded Mac error message that singlehandedly made me despise Apple: A Critical Software Update Is Required for Your Mac, but an Error Was Encountered While Installing This Update. It took me years to switch over from Windows to Apple, but that was all crushed when I got this error message on my 7 month old MacBook Pro when traveling abroad in Peru.

A Critical Software Update is Required for Your Mac

Here’s the situation: when you turn on your MacBook, even before it gets to your desktop, you’ll get the following message.

A critical software update is required for your Mac. To install this update you need to connect to a network. Select a Wi-Fi network below, or click Other Network Options to connect to the Internet using other network devices.

This Software Needs To Be Updated Mac

No big deal, you think. Let’s just hop onto a Wi-Fi network and install the update. But after doing so, you get another puzzling error message.

Updated

A critical software update is required for your Mac, but an error was encountered while installing this update.

'ControlCenter needs to be updated.' - macOS 10.15 Catalina Apple has announced a transition from 32-bit technology to 64-bit technology for macOS. You may receive this message about the Brother ControlCenter, which is a 32-bit application. Here’s how: From the menu bar on your Mac, select the Apple icon on the top left. Select “Software Update”. Select “Advanced”. Make sure all boxes are checked. Note: for a Mac to automatically update, it must be connected to power. Keep in mind you have a bit of control here, too. A critical software update is required for your Mac, but an error was encountered while installing this update.Your Mac can’t be used until this update is in.

At this point, there are only two options:

  1. Shut Down
  2. Try Again

Well, we don’t want to Shut Down, so I guess let’s Try Again. A minute or so later, the same error message pops up. Try Again again? Same thing. It’s official, your MacBook Pro is stuck in an infinite update loop.

Steps to Try and Fix It

My research tells me that sometimes this issue can be resolved by reinstalling macOS in recovery mode, but that was unfortunately not the case for me. Ultimately, I had to take my MacBook Pro to an Apple store and have the Logic Board replaced, but we’ll get into that later.

Here are some troubleshooting steps I took to try and fix the critical software update issue. Although none of these worked for me, they might work for you if your issue is slightly different than mine.

  1. Connect to another Wi-Fi network and try again
  2. Connect to the internet via ethernet in Other Network Options and try again
  3. Boot into Safe Mode and check for updates: reboot and hold Shift
  4. Reset NVRAM on your Mac
  5. Reinstall macOS via Recovery Mode: reboot and hold Command + R
  6. Reinstall macOS via Internet Recover Mode: reboot and hold Command + Option + R
  7. Last resort: wipe disk with Disk Utility and reinstall macOS

Like I said, none of these solutions worked for me, but your mileage may vary.

Macbook This Software Needs To Be Updated. Contact The Developer For More Information

The Only Solution That Worked for Me

Unfortunately, I got the “critical software update is required for your mac” when I was traveling outside of the US in South America where there are no Apple Stores. I spent a good five hours on the phone with Apple in the US trying to find a solution, but was unsuccessful. I had to lug around my useless MacBook Pro for three more weeks before I could take it to an Apple store in the United States.

At the Apple Store in the US, they ran some basic diagnostic tests. After an hour, I was told they needed to keep my laptop for further extensive diagnostics that would take three days alone. My frustration must’ve been evident, because the guy helping me at the Genius Bar went back to the “lead genius” for advice. Ultimately, they decided to skip the extensive diagnostics, figuring it was a hardware issue, and sent my MacBook Pro directly to an Apple service center to be repaired. They estimated 11 days before I’d have my MacBook Pro fixed and shipped to my home address.

To my delight, my fixed MacBook Pro arrived to my house via FedEx just three days later. As you can see by the AppleCare Service Product Service Summary above, they had to replace the Logic Board. Thank goodness that my MacBook was still under warranty because otherwise I would have had to pay hundreds of dollars to have it fixed.

This Software Needs To Be Updated Mac

Misleading Error Message

Talk about a misleading error message. Was there really a critical software update? Perhaps there was. In any case, there was a major hardware issue. Major enough that the entire motherboard needed to be replaced.

Replacing a motherboard, which is essentially the brains, heart, and nervous system of the computer, is a major surgery. In my opinion, I got a brand new computer, just in the same shell as before. However, the AppleCare repair summary did say that the logic board might be refurbished.

In any case, I hope that you never run into the Critical Software Update issue on you MacBook Pro. The fact that you’re here tells me that you may be having this issue. Assuming you’re in the US, my recommendation is to make an appointment with your nearest Apple store to have it fixed.

If you do in fact have this issue, please share your experience in the comments below. I’d love to know if you were able to fix it without going to the Apple store.

Date: Thu, Dec 17, 2020
Reading Time: 7 minutes

If you work with Apple in some capacity, you know that they’re not very likely to admit mistakes. I’m not aware of Apple publishing postmortems after outages or providing details about known issues. So it’s up to the developer and admin communities at large to help each other learn about outages and potential causes. With the release of macOS 11.1 this week I’ve been debugging a new issue with the Mac software update process, one which will affect most enterprise users. I decided I should write about it and let everyone know what the issue is, workarounds, and how to avoid it. I’ve also been paying close attention to some recent changes to the software update mechanism, so I’ll try to mention them below as well.

A macOS 11 bug prevents upgrades to the next version

After macOS 11.1 was released earlier this week, many users started reporting that they were not able to see the software update. Others reported that they saw it, but were not able to download it. I personally experienced this issue when 11.1 was in beta and filed a case with Apple about it, but then moved on to other problems. When the final release came out this week, there were widespread reports of it on the MacAdmins Slack. Reading through system logs, I as well as other admins were able to find what appears to be the root cause. Under certain conditions, macOS 11.0.1 and macOS 11.1 hosts are requesting the update server send the 11.0.1 update, instead of requesting the next available one. The server rejects this update as it’s already either installed or older. This somehow corrupts the state of the software update process, and the update is no longer visible as an option in System Preferences.

Workarounds

  • The update is visible again immediately after the restart. But it’s unclear if the update can always be installed after it’s visible since the condition that made it fail to download the first time can be triggered again.
  • Removing the MDM enrollment profile causes the update to be seen again. I and several others tested this extensively, and it’s definitely the enrollment profile, not some other policy managed by MDM. This is obviously a terrible workaround and I’d hesitate to mention it to users as it could cause security agents to stop working, and countless approval dialogs we’re so familiar with. Not to mention some of you have the MDM enrollment profile as non-removable or users who are not administrators, so they don’t have permission to unenroll. Getting them back enrolled in the MDM might prove to be a challenge too.
  • Distributing the full 11.1, and eventually the 11.2 installers.

Can Apple fix this bug without manual intervention?

This Software Needs To Be Updated Macbook Pro

Apple is well aware this is a problem now, so I am confident the issue will be addressed in 11.2. Unfortunately, it is a client-side issue affecting both 11.0.1 and 11.1 clients. So there’s not much Apple can do to provide a fix. One potential solution I see is for Apple to detect the wrong request and instead of rejecting the download, offer the right file archive instead. But this is a complex system and it’s unclear if the server-side changes alone are enough.

Mac Os This Software Needs To Be Updated

Something else Apple could try is to side load a patch through another software update. There’s background configuration and malware removal tools that are likely capable of fixing the issue on the system. But it’s an ugly hack and one I’d personally stay clear of even if the option was available.

In my opinion, the most likely outcome is that the bug will be fixed in 11.2, but clients that have already upgraded to Big Sur (or any M1 macs you might’ve bought) will have to work around the problem themselves. If we’re lucky Apple will publish a support article and that will be that.

What else you need to know

Big Sur has changed the software update mechanism entirely, especially on Apple Silicon macs. It’s a long time coming and Apple spoke about some of this at WWDC in the MDM and IT sessions, so it shouldn’t be entirely surprising. But a lot was left unsaid for us to discover on our own.

This Software Needs To Be Updated Mac Operating System

  • Combo update packages are no longer published on the Apple website. This might surprise many of you who rely on distributing them. The main reason is that the entire format of the updates has changed, and it’s also no longer possible to install updates without the Mac having access to the internet. The updates must come from Apple, and they must be managed by softwareupdate and related processes on the system.
  • On Apple Silicon, third party processes are no longer able to script the softwareupdate command. Running the software update command as a root process now prompts for the administrator password, who also needs to be a secure token user. There are only two possible options for OS updates to be applied; either the human user of the device itself or the MDM process which has special permission. It might also be possible for the Mac to update itself with the auto-update mechanism, but there are too many bugs right now to observe how well that works. My personal experience is that it doesn’t and I’m greeted with a password prompt to enter the next day…
  • Specifying a custom URL for the softwareupdate process to pull updates from is no longer possible. Apple advertised this deprecation for all of last year, so it should surprise no one but it hurts. Reposado was one of several great tools that made it possible to have unstable/beta/stable tracks within an organization.
  • —ignore is gone as a flag. It was gone in 10.15.5 briefly too, so you likely know about this one. This time it’s gone for good and never coming back. An MDM server can delay the client from seeing OS updates for up to 90 days only, but that is the absolute maximum going forward. Even for a future major release like macOS 12. If this is important to you, file feedback for Apple to provide a second deferral option, specific to major version numbers.

I work with the MDM protocol a lot day-to-day and have been testing software updates for a while. I was even optimistic about what it would look like in Big Sur back in June. Apple had promised it’s an entirely new implementation, closer to what is available on iOS and that everything would work better than before. But we’re not off to a good start, and all the concerns I had for several years now are back. The design of OS updates in MDM is brittle, requiring multiple remote procedure calls to accomplish something that was previously done by a few lines of shell scripting. And that would be bad on its own, but the bad design is coupled with a buggy implementation; there are many known issues, besides the one I described above. Unless something drastically changes, we’re likely to see many months, if not years of software update bugs that are entirely out of our control.

This Software Needs To Be Updated Macbook

Apple was never particularly great at building systems for the enterprise. But, until recently, the Unix components were available for software developers and system administrators to work with. The end result ended up being that if you made an investment within your organization, macOS was a great experience for end-users. It took a lot of work, but it was all achievable. Today, Apple is no better at developing systems that are required in the enterprise. But the ball is entirely in their court. Apple still makes great tools for consumers, and there will be a demand from employees to provide them with Apple gear. But, if Apple can’t start acting on our collective feedback, the experience of using a Mac in the workplace will quickly become unbearable to most.