The return of the universal panacea: install the Combo updater (updated)

The release of macOS Sierra 10.12.4 brings with it a universal panacea for problems with Sierra: install the latest Combo updater. Time Machine not backing up hourly? Troubled by repeated prompts to enter your user password? iCloud Drive playing up? Install the latest Combo updater.

As I have explained before, there are good reasons why doing this can fix various problems. When you install an incremental or Delta update, e.g. from 10.12.3 to 10.12.4, only those system components which have changed in that update get replaced. If older components of macOS have become damaged somehow, those damaged files remain.

A Combo update replaces all the components which have changed since the initial major release, which is inevitably greater. A Combo update is therefore more likely to fix problems which have arisen because of damage to macOS components. It can also rectify incomplete updates: although these should never happen, they sometimes do, leaving subsystems in a mess.

The macOS Sierra 10.12.4 Combo update is available for download now as an offline installer. It is easy to use: once downloaded, open the disk image to mount it, and run the Installer package.

But the job is not quite complete: there are a couple more tasks which you need to do before this refresh update is done. First, you need to open the App Store app and check for updates, in case applying the Combo update has reverted any regular components that came with it.

There is also the interesting issue of Apple’s XProtect and other security configuration files, which are normally updated silently. Look at the list of updates installed by opening About This Mac, clicking on the System Report… button to open System Information, then selecting the Installations item in the Software list at the left. List the items by Install Date by clicking in that header, and order them from most recent at the top (you may need to click a second time in the Install Date header for that). Until you see a list with those normally silent updates, your Mac may be vulnerable.

This is because the Combo update reverts XProtect and other configuration files to those which came with that update, not the most recent. To bring that protection up to date, you will now need to force those to be updated, rather than leave your Mac to catch up in its own good time, which may be during the next night.

There are two methods which should force those to be updated: you can open the App Store pane, uncheck the Install system data files and security updates item, switch to another pane, then back to the App Store pane. Turn that item back on, then click on the Check Now button below.

That may not always work. If it does not, open Terminal and enter the following command from an admin user account:
sudo softwareupdate --background-critical
press Return, then at the prompt, enter your admin account password. Terminal will then report
softwareupdate[1587]: Triggering background check with forced scan (critical and config-data updates only) ...
and in the next couple of minutes, the updates should be downloaded and installed. Check by opening System Information and looking for those updates, which will be more recent than your macOS Combo update.

Soon after a macOS update, there may not be any ‘silent’ updates to install, though. You can check this by browsing my list of those silent updates here.

The macOS Sierra 10.12.3 Combo update is available here.
The macOS Sierra 10.12.2 Combo update is available here.

(Updated 3 April 2017 for macOS 10.12.4.)