This article details how the Operating System status is checked in Okta Verify Device Health. Device Health can be referenced in Okta Verify by clicking the shield with the check mark icon:

Device Health will show information about the device it is installed on, one of which is the Operating System status, shown below as "Up to Date".
 

• Okta Identity Engine (OIE)
• Okta Verify 
• Device Health 
• Desktop Operating systems
• Mobile Operating Systems

Okta Verify Device Health status for Operating Systems is checked by polling the operating system to identify which version number is currently in use. The version is then checked against the public endpoint "osVersion":

• https://{OktaSubDomainName}.okta.com/.well-known/ov-configurations

Formatting the result from https://{OktaSubDomainName}.okta.com/.well-known/ov-configurations as JSON allows for easier cross-referencing of the OS Versions used in Okta Verify. For example, checking a Windows operating system: 

            {
                "osVersion": "10.0.22621.4249",
                "displayName": "Windows 11 (22H2)",
                "isLatest": true,
                "createdDate": "2023-03-24T22:04:22.000Z",
                "lastUpdate": "2024-10-21T21:51:04.000Z",
                "distanceFromLatestMajor": 1,
                "supportedMajor": true
            },

The Current Build (3rd decimal space), and the Update Build Revision (UBR - 4th decimal space) is included in the Device Health Check. The highest UBR (4249 in the above example) of the Current Build (22621 in the above example) would be seen as the Latest OS version. If the UBR of the OS' Current Build is equal to or higher than the JSON's highest UBR and Current Build, then the OS is seen as Up to Date.

Check OS Version for Windows

PowerShell command:

• Windows 11:

  • Get-ItemProperty -Path "HKLM:\Software\Microsoft\Windows NT\CurrentVersion" | Select-Object LCUVer

• Windows 10 (or 11):
  

  • Get-ItemProperty -Path "HKLM:\Software\Microsoft\Windows NT\CurrentVersion" | Select-Object CurrentBuild, UBR

    •  NOTE: This shows just the current build and UBR. Optionally, remove the filter from the command "| Select-Object <obj name>" to show all the Current Version details from the registry entry.
  • Sample output (Win 11):

GUI options:

1. Open File Explorer.
2. Right-click This PC > Select Properties.

or

1. Navigate to Start > Settings. 
2. Select System.
3. Select About.

Under Windows specifications, see the edition and version of Windows. 

Check OS Version for macOS

Terminal Command:

• sw_vers

GUI:

1.  Open System Settings
2.  General

The version is found under the macOS section