macOS Golden Gate 27.0.1
macOS 27.0.1 known issues with Jamf and Intune. Is it safe to deploy?
SupersededDeploy verdict: Superseded
Superseded by 27.2, which adds 263 security fixes and the Platform SSO fixes. Admins reported Platform SSO 'Authentication failed' login problems on 27.0.x. If you're pinning a 27 build with DDM, target 27.2 instead.
Sources
- settings.blog: On the Golden Gate / Platform SSO issue
- Apple: What's new for enterprise in macOS Golden Gate 27
Checked: Apple enterprise notes, settings.blog, Jamf Nation.
Last reviewed 2026-10-28.
Release facts
| Version | 27.0.1 |
|---|---|
| Build | 26A5434 |
| All builds | 26A5434, 26A434 |
| Release date | Sep 28, 2026 |
| Days since release | 30 |
| Security fixes (CVEs) | 0 |
| Actively exploited CVEs fixed | 0 |
Apple security releases (no CVE entries published for this update) · All Apple security releases · SOFA
Timing and deferral
- Superseded by macOS 27.2. Target the newer build unless you have a specific reason not to.
- SOFA expiration date: Jan 24, 2027 (in 88 days). This is the
ExpirationDateSOFA reports for this build, taken from Apple's update metadata. Treat it as the date Apple may stop offering this build. It isn't an Apple-announced signing deadline. - Deferral windows (calculated from the release date):
- 30-day deferral ends Oct 28, 2026 (passed)
- 60-day deferral ends Nov 27, 2026 (30 days left)
- 90-day deferral ends Dec 27, 2026 (60 days left)
- Shipped 14 days after the previous macOS 27 release.
Jamf Pro + Intune notes
Jamf Pro
- Apple removed legacy MDM software-update commands, the Software Update payload and the deferral keys in the Restrictions payload in macOS 27. Jamf says workflows that depend on them 'will fail silently or return stale data'. Move update management to the Software Updates and Software Update Settings blueprint components before you let Macs upgrade. (source)
- AFP file share distribution points can't be mounted on macOS 27. Switch to SMB or HTTPS. (source)
- Community report: local accounts created by Jamf Connect (without enrollment customization) aren't MDM-capable, so user-level declarations such as the new Accessibility app configuration can't be applied to them. (source)
- Der Flounder (Rich Trouton) reported that profile-based enrollment of macOS 27.0.0 virtual machines into Jamf Pro installs only the MDM profile. No further profiles or Jamf components arrive. This matters if you test in VMs. (source)
Microsoft Intune
- Apple removed legacy MDM software update settings and commands in OS 27. Message Center MC1470869 says Intune's October (2610) service release removes the legacy update UI, and devices without DDM software update policies 'may fail to update'. Use Settings catalog > Declarative Device Management > Software Update. (source)
- Platform SSO: admins reported 'Authentication failed' at login after moving to macOS 27.0.x, and Okta documented the issue. Apple's macOS 27.2 enterprise notes change when the new Platform SSO login UI is used by default and fix password sync for devices registered on macOS 26 or earlier. (source)