Day Zero Support: Scalefusion is Ready for iOS 27, iPadOS 27, macOS 27 & tvOS 27

The annual Apple update cycle has arrived. With the rollout of iOS 27, iPadOS 27, macOS 27, and tvOS 27, Apple has introduced sweeping changes to device configuration, security protocols, authentication, and compliance. Crucially, this release cycle underscores Apple’s accelerating pivot toward Declarative Device Management (DDM), fundamentally altering how IT administrators oversee enterprise fleets.

At Scalefusion, we guarantee Day Zero readiness. We have proactively tested our applications against the latest operating systems and integrated new DDM-based configurations, profile settings, and Automated Device Enrollment (ADE) enhancements. This ensures your IT teams can seamlessly transition to the new OS versions without a hitch in your daily management workflows.

Accelerated Application Readiness
We have rigorously tested the entire Scalefusion app suite across iOS 27, iPadOS 27, macOS 27, and tvOS 27. Necessary underlying updates have been applied to guarantee that device and policy management functions operate flawlessly on day one.

Device Profile Modernization: The DDM Shift

Apple Intelligence Settings Migrate to DDM

Beginning with iOS 26.4 and macOS 26.4, Apple officially deprecated traditional MDM restriction keys for controlling Apple Intelligence, migrating these configurations directly into DDM declarations. Scalefusion now natively routes Apple Intelligence restrictions through the DDM channel for supported versions, while maintaining legacy MDM key support for older OS versions.

For iOS 26.4 and newer, the following are now DDM-controlled:

  • Allow Genmoji
  • Allow Image Playground
  • Allow Image Wand
  • Allow Writing Tools
  • Allow Personalized Handwriting Result
  • Allow Mail Summary
  • Force On-Device Only Dictation
  • Force On-Device Only Translation

Scalefusion has also introduced new DDM-exclusive controls:

  • Allow Apple Intelligence Report
  • Allow Visual Intelligence Summary
  • Allow Safari Summary
  • Allow Mail Smart Replies
  • Allow Notes Transcription (and Transcription Summary)
  • Allow Calendar Natural Language Editing (Exclusive to iOS 27.0+)

Note for macOS: The same DDM migration applies to macOS 26.4+, excluding mobile-specific features like Image Wand and Personalized Handwriting Result. Calendar Natural Language Editing requires macOS 27.0.

External Intelligence & Siri Settings

Controls for External Intelligence Integrations and External Intelligence Integrations Sign-in are now exclusively delivered via DDM on iOS 26.4+ and macOS 26.4+. Administrators can also configure the new Allowed External Intelligence Workspace ID on both platforms.

Similarly, core Siri restrictions—including Allow Siri, Force Siri Profanity Filter, and Allow Assistant while Locked—have migrated to DDM. A new restriction, Allow Siri User-Generated Web Content, is now available for supervised devices.

Fresh Granular Restrictions

New iOS 27 Controls

  • Default App Modification: Lock down the default calling and messaging apps to maintain corporate workflows.
  • Satellite Connection: Toggle satellite connectivity based on organizational compliance.
  • Proximity Setup: Prevent users from utilizing proximity-based configurations when setting up new hardware.

New macOS 27 Controls

  • Captive Portal on Lock Screen: Force users to authenticate via captive portals before bypassing the lock screen.
  • Wi-Fi on Lock Screen: Allow Wi-Fi configuration directly from the lock screen if pre-login network access is necessary.
  • Rosetta Usage Awareness: Toggle user notifications regarding apps utilizing Rosetta to maintain performance awareness.

Advanced OS Update Management (iOS)

The iOS OS Update module has been completely overhauled to offer superior, granular control over patching:

  • Enforce Policies & Deferrals: Strictly enforce update policies or defer them by 1 to 90 days.
  • Automated Configurations (iOS 18+): Control auto-installs, auto-downloads, and the silent deployment of system data files and security patches.
  • Recommended Cadence: Select between deploying All, Oldest, or Newest updates.
  • Rapid Security Responses (iOS 18+): Authorize the installation or rollback of critical Rapid Security Response patches.

Deprecations to Watch

AUE iOS Profiles: The Allow Siri and Allow Assistant while Locked settings now display deprecation warnings. No immediate action is required; existing configurations will continue to function normally.

macOS PPPC Deprecations: Apple has deprecated Privacy Preferences Policy Control (PPPC) for the Camera, Microphone, and Speech Recognition in macOS 27. Scalefusion will display a deprecation indicator; these permissions will no longer be pushed to devices running macOS 27+, regardless of your dashboard configuration.

Apple Configuration Enhancements

Platform SSO: OpenID & New Keys

macOS 27 introduces OpenID authentication for Platform SSO. Scalefusion will support OpenID alongside existing methods, allowing you to configure FileVault, Login, and Unlock policies (including grace periods and Apple Watch fallbacks). Furthermore, we are rolling out support for Sync Password from Web Login and Allowed Web Login URLs (mandatory when utilizing OpenID).

Automated Device Enrollment (ADE) Upgrades

Streamlined Setup Assistants

Administrators can now skip new setup screens. iOS skip options now include Liquid Glass, multitasking, and the OS showcase. macOS setup can bypass Apple Watch unlock, Accessibility, Liquid Glass, OS showcase, and software updates.

Auto Advance (macOS & tvOS)

Breeze through the Setup Assistant automatically on macOS and tvOS. On macOS, Scalefusion automatically triggers the Do not create Primary Account setting when Auto Advance is active, enabling a truly zero-touch deployment.

FileVault During Setup (macOS 14+)

Rolling out the week of September 15, a new Force Enable During Setup Assistant option will be available. When active, ADE pauses the Setup Assistant via the Await Device Configured command, installs the FileVault profile, and seamlessly resumes setup.

mSCP 2.0 Compliance Benchmarks

The macOS Security Compliance Project has launched version 2.0, featuring a redesigned schema. Scalefusion’s backend has been upgraded to support this new mSCP 2.0 architecture, delivering CIS Level 1 and Level 2 compliance benchmarks for iOS 27, iPadOS 27, and macOS 27.

Navigate the Future of Apple Management with Scalefusion

Apple’s 2026 OS updates represent a massive leap in configuration control, authentication, and the DDM framework. By leveraging Scalefusion’s Day Zero support, your enterprise can confidently deploy iOS 27, iPadOS 27, macOS 27, and tvOS 27 with cutting-edge management capabilities fully operational.

About Scalefusion

Scalefusion's company DNA is built on the foundation of providing world-class customer service and making endpoint management simple and effortless for businesses globally. We prioritize the needs and feedback of our customers, making sure that they are at the forefront of all decision-making processes. We are dedicated to providing comprehensive customer support services, and place emphasis on customer-centric thinking throughout the organization.

About Version 2

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.
Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.