Sync Failed: Server Token Has Expired. Please Upload a New Token.

Apple Volume Purchase Program (VPP)

1. Final updated

2. Save every bit PDF

 The Volume Purchase Program (VPP) is an Apple portal for businesses and schools to buy and license apps and books in volume. Systems Manager fully integrates with VPP to easily distribute, revoke, and centrally manage your licenses, supporting both of Apple's methods of managed distribution and licensing via redemption code. This article will explicate how to link your VPP account to Dashboard, and what the licensing distribution options are. VPP facilitates silent deployments of App Shop and Mac App Shop applications to iOS and macOS devices, while assuasive your company/establishment to maintain ownership of the applications yous buy.

In social club to understand how Apple tree'southward managed distribution model is designed, it is strongly recommended to review Apple's Business concern and Education whitepapers on VPP app distribution before using this tool in Systems Manager.

Enrolling into VPP is gratuitous:

• Businesses can enroll in VPP here.
• Educational institutions can enroll in VPP here.
• Educational institutions with Apple School Director access can enroll in VPP hither

Note: Apple Schoolhouse Manager VPP accounts back up location based VPP licenses where a unmarried VPP account/token tin can be connected to Meraki Systems Manager with licenses purchased from many different VPP accounts. This makes purchasing licenses and syncing to Meraki Systems Managing director a more than simplified experience. For more than data on location based VPP tokens and all of its features go here. Existing VPP accounts can be invited into the new Apple School Manager location based VPP accounts past post-obit this.

Adding Apple VPP Account(due south) to Systems Manager

Annotation: It is recommended that your Apple VPP token does not reside in multiple MDM solutions

1. In Dashboard, navigate to the Organization > MDM page.
2. Curlicue down to Apple VPP Accounts.
3. Select Add new.
   
4. In the Add together VPP business relationship window input the required information:
   

Name:Name of the VPP administrator's account. This volition exist shown on the email sent to invited users, and should indicate your organization.

Email:Email accost on record for the VPP account.

Service token: For Apple School Managing director, sign in to your account at school.apple.com. At the bottom left of the folio, click "settings" then navigate to "Apps and Books" then click download next to the server token.

For Apple business organisation manager, sign in to your account at business.apple tree.com. At the bottom left of the page, click your account, and then "preferences" and select "payments and billing". Download the token by clicking the proper noun of the server you'd like to download.

VPP Location server tokens can be downloaded on Apple School Manager accounts in Settings > Apps and Books > My Server Tokens:

VPP Location server tokens can exist downloaded on Apple Business Managing director accounts past clicking your account > Payments and Billing > Server Tokensand so clicking on the server token you'd like to download:

Immune admins:Which Dashboard administrators should exist allowed to manage users and app licenses for this VPP in Dashboard.

Assignable networks: Which Systems Manager networks within an Organization are able to use VPP device assignment.

5. Click Update.

Note: If a "VPP service token can't be blank" error appears when attempting to save, brand certain at that place are no special characters or trailing numbers such as '(1)' in the filename of the vpp service token. This can too indicate that your VPP token is already spring to another MDM solution. If this is the case, you lot volition demand to remove the token from the existing solution or generate a new VPP token to upload into Dashboard.

six. Once your account is synced, you should run across your licenses populated in Systems Manager > Manage >  VPP

Renewing a VPP Token

Renewing a VPP Token is every bit simple as repeating the steps for adding a VPP token to your Dashboard Organisation, merely instead of selecting Add together New in step iii in a higher place, you select the existing VPP Token entry and clickUpdate Token.  From there, you can download the new copy of your VPP Token from the ABM/ASM portal, upload information technology to your Dashboard Organization, and save your changes to complete the VPP Token renewal.

VPP Deployment Methods

At that place are 3 options for VPP license distribution. Please run into Apple'due south documentation for a full listing of requirements and feature differences.

• Device Assignment

Assign licenses to specific iOS, iPadOS, macOS, or tvOS devices, based on serial numbers. This allows for pushing applications without requiring the device to be signed in with an Apple tree ID, as well as silently installing apps without any end user input when used with supervised devices.

• User Consignment

Assign licenses to a specific users, based on an Apple IDs. This is useful in cases like 1:1 deployments for schools, where students accept their own iPads and unique Apple tree IDs to sign-in with. User consignment can also exist used to license iOS App Store applications.

• Redemption Codes

Distribute licenses as redeemable codes, which can be given to end users to merits. This method is deprecated by Apple, and not recommended over the two managed distribution methods.

Note: It is recommended to license apps either by device or user, not both.

Any unused VPP Redemption Codes tin can exist migrated to the more robust Device Consignment or User Assignment licenses by following this.

Device Assignment

VPP Device Assignment grants app licenses directly to a device, identifying information technology past serial number. This makes VPP Device Assignment the all-time pick to use when you practice not want to associate your apps to end user's Apple tree ID(s). Furthermore, on Supervised iOS devices and macOS 10.xi+, apps install completely silently with VPP Device Assignment. For detailed steps on how to grant and revoke VPP Device Assignment licenses, please watch the video below:

The post-obit requirements must be met in club to employ VPP Device Consignment:

• iOS 9+, macOS 10.xi+, or tvOS 12+
• Systems Manager Enterprise
• VPP enabled in Dashboard
• Available licenses on the VPP portal

In addition to the above requirements, the app itself must support device consignment. This can be checked by navigating to Systems Manager > Manage > VPP, and checking theDevice-assignable cavalcade (shown below). An app with aY supports device licensing:

To enable VPP device licensing for an app:

1. In Dashboard, make sure the app has been added under Systems Director > Manage > Apps.

2. Select the app to view more than details.

3. Enable VPP device licensing:

   • Gratis apps: Enable the checkbox for Use VPP device license.

     

   • Paid apps:Set thePurchase Method toVPP Device Assignment:
     
     

4. ClickSave Changes.

On app install, a license for the app will exist associated with the serial number of the device that downloaded it, allowing anyone to use the app on that device.

VPP Apple ID User Assignment

VPP User Assignment grants apps to terminate user's Apple ID(due south). This is a great choice for 1-to-1 deployments where end users are already using their own Apple tree IDs. For detailed steps on how to grant and revoke VPP Apple ID licenses, please watch the video below:

The following requirements must exist met in order to assign licenses on a per-user basis:

• iOS 7+, or macOS 10.ix+
• VPP enabled in Dashboard
• Available licenses on the VPP portal
• Each user must have a personal Apple ID to receive managed distribution apps. This licensed Apple ID must and so be signed in on the iOS/macOS device in order to receive VPP apps.

Note: Apple limits each Apple ID to x devices, so information technology is non recommended to utilise a shared Apple ID across all of your organization's devices.

Configuring user assignment consists of the following steps:

1. Invite user to receive licenses.
2. Grant license for the desired app to the user.
3. Deploy the app with Systems Manager.

A license can also exist reclaimed by revoking a user's app license.

Invite User to Receive Licenses

Y'all tin can bulk import and invite VPP users via CSV, as well as individually.

1. Navigate to the Systems Manager > Manage > VPP page.
2. Click on the User management tab.
3. Select + Add user on the correct of page.
4. Input the account data of the user to grant VPP access.
5. Notice and cheque the desired user(southward) in the list, and select Transport invitation(s).
6. Confirm thatUser status for the selected user(s) changes from New to Invited.

7. Invited users will receive an electronic mail from Cisco Meraki. Accepting the invitation will require the user to sign in to iTunes or the App Store with their Apple ID, and accept Apple'due south VPP terms and weather.

   Note: Invitation links are unique and can only be accepted one time. The Apple tree ID which is used to accept the invitation is non received or reported by Systems Managing director.

The following image shows a list of users with various statuses. Just 'Associated' users accept accepted the invite.

Grant License for Desired App to User

To automatically assign licenses to users in scope, and avoid manually granting licenses to users, see this commodity.

1. Navigate to the Systems Manager > Manage > VPP page.
2. Click on the Licensed applications tab.
3. Select the app to grant license for (if multiple VPP accounts accept been added on the Org > Settings page, ensure the proper account is selected from the VPP account' drop-downwardly menu).
4. Check the box side by side to the user and click on + Grant license to user(south).
5. Ostend license access to selected number of users.

At this point, 'licensed' users have been granted a VPP license for the selected app. Licensed users will be able to download this app onto their device by signing in with the licensed Apple ID, and navigating to the 'Purchased' tab in Apple's App Store.

In order for the licensed app to be managed by Systems Manager the app must however exist deployed via Systems Manager.

Deploying Apps with Systems Managing director

1. Navigate to the Systems Managing director > Manage > Apps page.
2. Select + Add together new>iOS App Store app or macOS App Store app.
3. Search for and choose the desired app already licensed.
4. Define the scope of the app. This should cover the user/devices that were licensed through VPP.
5. (Paid apps just) Ready the Purchase method to VPP app assignment.
6. Confirm clients in scope at bottom of page.
7. Click Relieve Changes.

Revoking a User'due south App License

To automatically revoke licenses from users who are no longer scoped for an app, and avoid manually revoking licenses from users, see this commodity.

In social club to re-claim a license, the user'due south app license must be revoked. A license can be revoked for a specific app, or a user's access to all licensed apps can exist revoked. As per Apple's policies, a revoked user will be granted a 30-day grace catamenia earlier any re-claimed apps are removed from the user'due south purchase history. Once a license has been revoked for one user, it can be reassigned to another user after a brief time (typically nearly two minutes).

To revoke admission to a specific app:

1. Navigate to the Systems Manager > Manage > VPP page.
2. On the Licensed applications tab, click on the name of the desired app.
3. Check the box for the user to revoke admission.
4. Select Revoke license from user(south).

To revoke licenses for all distributed apps by retiring user:

1. Navigate to the Systems Managing director > Manage > VPP page.
2. Select the User management tab.
3. Check the box next to the user to revoke access.
4. Select Retire user(south).

 a User'due south App License

Apple Books (iBooks) App License

• Apple Books are assigned per user and not per device. Please take note when assigning an Apple book via VPP:
• VPP Apple book licenses must be granted to an Apple ID (user) and requires an Apple tree ID to sign in.
• VPP Apple book licenses are non device assignable.
• Apple Book licenses are permanent and cannot be revoked or reassigned.

Irrevocable next to an App verifies the license is permanent and cannot be revoked from the Apple tree ID it is assigned to.

Location Based VPP in Apple School Managing director & Apple Business Manager

On Apple tree School Manager and Apple Business Manager, Apple tree has added a new concept chosen "Locations". Locations gives the Apple portal administrator the ability to transfer VPP licenses betwixt unlike Locations (which will transfer the VPP licenses between unlike VPP tokens). Be certain to add the VPP tokens to Org > MDM for all/whatsoever of the Apple Schoolhouse Manager or Apple Business concern Manager Locations that y'all desire to sync licenses from. Utilise the post-obit screenshots to help confirm that the VPP licenses are in the desired VPP Location/token.

Troubleshooting VPP Installs

If y'all've followed the above steps and have issues installing apps onto your device, see the troubleshooting guide hither.

maurolowead.blogspot.com

Source: https://documentation.meraki.com/SM/Apps_and_Software/Apple_Volume_Purchase_Program_(VPP)

Share this post