Overview

The Android Software Update Policy controls when managed Android devices install system updates and app updates. You can:

choose how system updates install: automatically, during a nightly maintenance window, or postponed for 30 days
block system updates during freeze periods, such as a holiday sales season
choose when apps update automatically

Important: Freeze periods block security patches too. While a device is in a freeze period, Android blocks all system updates, including monthly security patches. Keep freeze periods as short as you can.

Supported platforms and requirements

Item	Details
Platform	Android 9 or later
Device ownership	Company-owned devices
Android Enterprise	Must be set up and connected to Swif

Settings reference

App Auto Update Policy

When apps update automatically from the managed Google Play Store.

Option	What it does
`CHOICE_TO_THE_USER` (default)	Users choose how apps update in Play Store settings.
`ALWAYS`	Apps update automatically whenever an update is available, on any network.
`WIFI_ONLY`	Apps update automatically only on Wi-Fi.
`NEVER`	Apps never update automatically.

NEVER leaves apps on old versions, which can miss security fixes. Use it only for devices where app changes must be tested first, and update apps on a schedule.

System Update

Update Type

Option	What it does
`AUTOMATIC` (default)	Installs system updates as soon as they're available.
`WINDOWED`	Installs system updates automatically, but only during a daily maintenance window you set.
`POSTPONE`	Postpones system updates for 30 days. Monthly security patches aren't postponed.

With POSTPONE, device manufacturers or carriers may exempt important security updates, and users are notified when those updates are available.

Maintenance window (WINDOWED only)

Shown only when Update Type is WINDOWED. Both fields are required.

Field	What to enter
Start Minutes	When the window starts, in minutes after midnight in the device's local time (0–1439).
End Minutes	When the window ends, in minutes after midnight in the device's local time (0–1439).

To convert a time, multiply the hour by 60 and add the minutes:

Time	Minutes
12:00 AM (midnight)	0
1:00 AM	60
2:00 AM	120
4:00 AM	240
6:00 AM	360
10:00 PM	1320
11:00 PM	1380

Windows across midnight: if End Minutes is less than Start Minutes, the window spans midnight. For example, start 1320 and end 240 is 10:00 PM to 4:00 AM.
Short windows: if the window is shorter than 30 minutes, Android extends it to 30 minutes after the start time.

Freeze Periods

Dates when system updates are blocked, for example during peak business periods. Each freeze period has a Start Date and an End Date, each with a Year, Month, and Day.

Freeze periods repeat every year. Android uses only the month and day, and ignores the year. A freeze period from December 15 to January 5 blocks updates during those dates every year. Swif requires a year, but you can enter the current year.

Rules for freeze periods:

A freeze period can't be longer than 90 days.
There must be at least 60 days between freeze periods.
Freeze periods can't overlap, and there can't be duplicates.
If the end date is earlier than the start date, the freeze period wraps over the new year.
February 29 is treated as February 28.

Freeze periods need an Update Type. They apply on top of the update type you choose. Outside a freeze period, the update type applies as usual.

Google Play system updates

Some Android components update through Google Play system updates, also called Mainline updates. They download automatically but need a restart to install. This policy doesn't change that.

Before you start

Decide how quickly devices should get system updates. AUTOMATIC keeps devices most secure. WINDOWED avoids interrupting users during the workday.
Choose a maintenance window when devices are usually on, charged, and not in use, such as overnight.
List any freeze periods your business needs, and keep each one short.
Decide how apps should update. WIFI_ONLY saves mobile data on devices with cellular plans.

Create the policy

In Swif, go to Policies > New Policy > Start from Scratch > Android > Software Update Policy.
Enter a clear name, such as Android Updates – Overnight.
Set App Auto Update Policy.
Under System Update, choose an Update Type.
If you chose WINDOWED, enter Start Minutes and End Minutes.
Add any Freeze Periods.
Save the policy.
Assign it to a device group of Android devices.

Example configurations

Example 1: Company phones, updates overnight

Setting	Value
App Auto Update Policy	`WIFI_ONLY`
Update Type	`WINDOWED`
Start Minutes	`120` (2:00 AM)
End Minutes	`300` (5:00 AM)

System updates install between 2:00 and 5:00 AM. Apps update only on Wi-Fi.

Example 2: Retail devices with a holiday freeze

Setting	Value
App Auto Update Policy	`ALWAYS`
Update Type	`WINDOWED`
Start Minutes	`1380` (11:00 PM)
End Minutes	`240` (4:00 AM)
Freeze Period	Start: November 20; End: January 5

System updates install between 11:00 PM and 4:00 AM, but no system updates install from November 20 to January 5 each year. That's 47 days, under the 90-day limit.

Example 3: Test devices that need time to validate updates

Setting	Value
App Auto Update Policy	`NEVER`
Update Type	`POSTPONE`

System updates are postponed for 30 days, giving you time to test them. Monthly security patches still install. Apps don't update automatically.

Verify the policy

In Swif, open the device and confirm that the policy shows as applied.
On the device, open Settings > System > System update. The path varies by manufacturer. Managed devices may show that updates are managed by your organization.
In the managed Play Store, open Settings > Network preferences > Auto-update apps and confirm that it matches the policy.

Troubleshooting

Updates didn't install during the maintenance window

Check that Start Minutes and End Minutes use the device's local time.
Check that the device is on, charged, and connected during the window.
If the window crosses midnight, check that End Minutes is less than Start Minutes.

A device installed a security patch while updates were postponed

This is expected. POSTPONE doesn't postpone monthly security patches.

The policy with freeze periods doesn't save or apply

Check the rules: each period is 90 days or shorter, there are at least 60 days between periods, and periods don't overlap.

Updates are blocked longer than expected

Freeze periods repeat every year, and they block all system updates, including security patches. Check the dates, and remove any freeze periods you no longer need.

Users can still change app auto-update settings

App Auto Update Policy is set to CHOICE_TO_THE_USER, the default. Choose another option to control it.

Related resources

Swif

Google