Apple released Server update 5.3.
System requirement is OS X 10.12.4 or later
Apple security content of macOS Server 5.3 – Apple support link
App store link
What’s new in this release
Caching Server
• Enhanced control over cache size
Profile Manager
Support for new device management capabilities introduced in tvOS 10.2:
• Configure Device Enrollment Program settings including auto-advance through Setup Assistant
• Install enterprise apps
• Create new Conference Room Display and Single App Mode (enterprise apps only) profile payloads
• Configure restrictions to disable AirPlay, disable pairing with Remote app, and require a passcode on first AirPlay pairing
• Set name, restart, and eraseSupport for new Configuration Profile payload changes and commands introduced in iOS 10.3:
• Restrict WiFi network connections to managed networks only
• Configure restrictions for Dictation and modification of AirPlay and View Screen permission settings
• Specify separate S/MIME Sign and Encrypt certificates in the Mail and Exchange payloads
• Restart, shut down, and play Lost Mode sound on a device
• Location accuracy information provided for devices in Lost Mode
• VPN on demand support for IKEv2 in the VPN payload
• Set the supported IP versions for the default APN in the Cellular payloadConfigure new restrictions introduced in macOS Sierra 10.12.4:
• Allow Touch ID to unlock a supported Mac
• Allow iCloud Drive
• Allow iCloud Desktop & Documents
• Allow iCloud Keychain, Mail, Contacts, Calendars, Reminders, and BookmarksOther new features include:
• Ability to set device name at enrollment time
• A new Classroom configuration option to allow modifying the AirPlay and View Screen permission on student devices
• Ability to configure Class name format with a combination of Course Name and Class Number for classes synced from Apple School Manager
• Automatic syncing of passcode type for Managed Apple IDs from Apple School Manager
• Ability to assign ownership of a Mac enrolled without authentication
• A new option to skip the Home Setup Assistant pane in the Device Enrollment Program settings