Off Internet Software Update Server

[Sandman1969]

Are there procedures somewhere that discuss the process of having an OSX Server providing updates to MACs (probably multiple versions) and iPads that aren't connected to the Internet?

Will have one connected to the Internet to pull down and test, but looking for the process of archiving the updates to DVD/media from that box and transferring over to a private network.

I have been tasked with coming up a process to support our few hundred MACs and iPads that are on our isolated network and do not have internet connectivity.

 

[Altemose]

Are there procedures somewhere that discuss the process of having an OSX Server providing updates to MACs (probably multiple versions) and iPads that aren't connected to the Internet?

There is some information here.

 

[Sandman1969]

So basically for my situation. I would standup an OSX Server connected to the Internet and pull all updates to it. Then copy the /Library/Server/Software Update/Data directory to media and then transfer all to the Server on the isolated network and point all clients to it for updates.

Seems pretty straight forward enough. Now to figure what the best HA Server setup would be on the isolated network.

 

[blacka4]

Or you could use the isolated server as a firewall, make it have internet access, then use the other ethernet port to connect to that private network and turn off internet connection sharing and have all the devices connect to that OSX update server that you have isloated on one side but not on the other

 

[Sandman1969]

These are physically separated networks so there is no connectivity between them.

 

[kladda]

is it the same server that you move or do you transfer the specific files to another machine?
Have a look at the Software Update function in OS X Server. If all the clients in the isolated network can access your machine there, i think that would be the easiest way. Especially if it's the same machine you move between networks.

 

[Sandman1969]

No due to policy the server itself can't be moved. But I am planning on copying the software update directory and move it to a separate server that will provide the updates to the isolated clients.

 

[kladda]

No due to policy the server itself can't be moved. But I am planning on copying the software update directory and move it to a separate server that will provide the updates to the isolated clients.

I see. Let us know if it worked as you hoped, for future references