Services
Summary
Microsoft AutoUpdate for Mac will switch to a new CDN endpoint by June 1, 2026, improving update reliability and security. Organizations must ensure network access to res.public.onecdn.static.microsoft and update MAU settings if needed. The legacy endpoint will be decommissioned by August 1, 2026.
Details
Introduction
We’re updating the content delivery network (CDN) endpoint used by Microsoft AutoUpdate (MAU) to download updates for Microsoft apps on macOS. This change is part of an infrastructure upgrade to improve the reliability, performance, and security of update delivery by standardizing downloads on Microsoft’s latest CDN endpoint.
When this will happen:
- September 2025: MAU version 4.80 is released. MAU defaults to downloading updates from the new CDN endpoint unless configured to use a custom update location.
- Through May 31, 2026: Updates are published to both the legacy and new CDN endpoints.
- June 1, 2026: Updates are published only to the new CDN endpoint.
- August 1, 2026: The legacy CDN endpoint is fully decommissioned.
How this affects your organization:
Who is affected:
- Organizations with macOS devices that use Microsoft AutoUpdate (MAU) to receive updates for Microsoft apps.
- Administrators who restrict outbound internet access (for example, firewall rules, proxy rules, or domain allowlists).
- Administrators who override the MAU update location using custom configuration (for example, Custom update channel, ManifestServer, or UpdateCache preferences).
What will happen:
- Starting June 1, 2026, MAU will download updates only from the new CDN endpoint:
res.public.onecdn.static.microsoft
- The legacy endpoint
officecdnmac.microsoft.com- will no longer host newly released update packages after June 1, 2026.
- If access to the new endpoint is blocked, MAU may fail to download updates, which could result in devices remaining on older versions or missing security updates.
- There are no changes to MAU app behavior, update channels, update schedules, or how updates are installed or managed.
What you can do to prepare:
- If your organization restricts outbound network access, review firewall, proxy, or allowlist rules to ensure managed Mac devices can access
res.public.onecdn.static.microsoft
- Review MAU preferences to confirm they do not reference
officecdnmac.microsoft.com
- No action is required if your organization allows outbound internet access and does not configure a custom MAU update location.
- For more information, review MAU preferences documentation: Microsoft AutoUpdate preferences for macOS.
Compliance considerations:
No compliance considerations identified, review as appropriate for your organization.