Troubleshoot: VPP Apps

Symptoms

The following error appears in the Admin Portal when making changes to VPP apps in Software Management:

Cause

This error usually occurs because of a synchronization problem with your VPP tokens, even if the VPP token has not yet expired.

Resolution

To resolve, renew your VPP tokens:

1. Go to DEVICE MANAGEMENT > MDM.
2. Select the VPP tab.
3. Select the VPP token for your location and click Actions.
4. To renew your token for one year, choose Renew Configuration.
5. In the Renew Apple’s VPP page, under Sign in to Apple, click sign in to Apple Business Manager to download a token for your MDM server. If you have an education account, click sign in to Apple School Manager.
6. In ABM or ASM, select your account at the bottom-left, then select Preferences from the pop-up menu, then select Payments and Billing from the main panel.
7. Under My Server Tokens, find the token for your location, then click on it to download the VPP token.
8. Click Save to save the token locally.
9. Click Replace if your token already exists in the same folder.
10. In the JumpCloud Admin Portal, under Upload the token to JumpCloud, click Browse or drag and drop the server token for your MDM server. You can only upload a token once.
11. Click complete. Your organization’s token appears in the VPP tab. The token is valid for one year.

Symptoms

The following error appears in the Admin Portal when integrating VPP in Software Management:

Considerations:

• When migrating from another MDM, we recommend creating a new VPP location and token pair for a clean transition.
• Application licenses from your existing MDM provider will need to be migrated to this new location for them to be visible within JumpCloud.
  • Migrating applications will also require them to be removed from their existing VPP location and devices before their licenses can be moved to the new VPP location.

Cause

This typically indicates that the VPP token (location token) you’re trying to use is already linked to another MDM solution. Apple only allows a single MDM provider per VPP token/location.

Apple VPP tokens are tied to locations in Apple Business Manager. Each token should be associated with one MDM provider at a time. This error occurs when:

• You’re attempting to reuse a token already connected to a different MDM.
• You’re migrating to JumpCloud from another MDM and haven't unlinked or regenerated the token.

Resolution

To resolve this, you’ll need to create a new VPP location in Apple Business Manager (ABM) and generate a new token for use in JumpCloud.

To create a new Location in ABM and download the new VPP token:

1. Log in to Apple Business Manager or Apple School Manager.
2. Navigate to Settings > Locations.
3. Click Add Location.
4. Provide a unique name (e.g., JumpCloud MDM Apps - US).
5. Click Save.
6. To download the new token, click your profile name in ABM or ASM.
   1. Select Preferences, then select Payments and Billing.
   2. Under Server Tokens, hover over the token for your site, then click Download token.
7. Save the .vpptoken file securely.

See Apple's Configure Locations to learn more.

To upload the token in JumpCloud:

1. Log in to the JumpCloud Admin Portal.
2. Go to MDM > Apple VPP.
3. Click + Add Token or Edit Token if one is already configured.
4. Upload the newly downloaded .vpptoken file.
5. Click Save.

See Set Up Apple’s VPP in JumpCloud to learn more.

After adding the token to JumpCloud, MDM will automatically sync with the new VPP location. You can then assign and migrate VPP-purchased apps to their new location and devices in JumpCloud.