Can't execute Software Update:Enforcement:Specific on ADE Macbook

I have enrolled a macbook through ADE to Apple School Manager and register it to the MDM service. Upon sending the initial DeclarativeManagement payload, the device return the client capabilities as below:

        "supported-versions": [
          "1.0.0"
        ],
        "supported-payloads": {
          "declarations": {
            "activations": [
              "com.apple.activation.simple"
            ],
            "assets": [
              "com.apple.asset.credential.acme",
              "com.apple.asset.credential.certificate",
              "com.apple.asset.credential.identity",
              "com.apple.asset.credential.scep",
              "com.apple.asset.credential.userpassword",
              "com.apple.asset.data",
              "com.apple.asset.useridentity"
            ],
            "configurations": [
              "com.apple.configuration.account.caldav",
              "com.apple.configuration.account.carddav",
              "com.apple.configuration.account.exchange",
              "com.apple.configuration.account.google",
              "com.apple.configuration.account.ldap",
              "com.apple.configuration.account.mail",
              "com.apple.configuration.account.subscribed-calendar",
              "com.apple.configuration.legacy",
              "com.apple.configuration.legacy.interactive",
              "com.apple.configuration.management.status-subscriptions",
              "com.apple.configuration.management.test",
              "com.apple.configuration.math.settings",
              "com.apple.configuration.passcode.settings",
              "com.apple.configuration.safari.extensions.settings",
              "com.apple.configuration.screensharing.connection",
              "com.apple.configuration.screensharing.connection.group",
              "com.apple.configuration.security.certificate",
              "com.apple.configuration.security.identity",
              "com.apple.configuration.security.passkey.attestation"
            ],
            "management": [
              "com.apple.management.organization-info",
              "com.apple.management.properties",
              "com.apple.management.server-capabilities"
            ]
          },
          "status-items": [
            "account.list.caldav",
            "account.list.carddav",
            "account.list.exchange",
            "account.list.google",
            "account.list.ldap",
            "account.list.mail.incoming",
            "account.list.mail.outgoing",
            "account.list.subscribed-calendar",
            "device.identifier.serial-number",
            "device.identifier.udid",
            "device.model.family",
            "device.model.identifier",
            "device.model.marketing-name",
            "device.model.number",
            "device.operating-system.build-version",
            "device.operating-system.family",
            "device.operating-system.marketing-name",
            "device.operating-system.supplemental.build-version",
            "device.operating-system.supplemental.extra-version",
            "device.operating-system.version",
            "management.client-capabilities",
            "management.declarations",
            "screensharing.connection.group.unresolved-connection",
            "security.certificate.list",
            "test.array-value",
            "test.boolean-value",
            "test.dictionary-value",
            "test.error-value",
            "test.integer-value",
            "test.real-value",
            "test.string-value"
          ]
        },
        "supported-features": {
        }
      }
    },

com.apple.configuration.softwareupdate.enforcement.specific couldn't be found. The macbook current OS version is 15.5 and it's supervised so looking at this, I assume it should include the Software Update:Enforcement:Specific capability?

https://github.com/apple/device-management/blob/release/declarative/declarations/configurations/softwareupdate.enforcement.specific.yaml

When I tried sending the payload to the device anyway the valid status is unknown

Hi, I also encountered and resolved the issue.

It seems the client-capability response is made by user-channel MDM daemon. We can inspect it by checking if the push token is notified by the system-channel mdmdaemon.

Can't execute Software Update:Enforcement:Specific on ADE Macbook
 
 
Q