This section is applicable for VPP purchasers who have already upgraded or are planning to upgrade to Apple Business Manager from the Apple Deployment Programs account. This section details the best practices to migrate to a location-based token in ZENworks.
If you want to migrate an existing VPP subscription (that uses a legacy token) to a location-based token (provided by Apple Business Manager) and associate all the existing bundle assignments to this new location-based token, then as a best practice it is recommended that you renew the subscription to the location-based token. This ensures that all existing bundle assignments work seamlessly with the new location-based token. However, you can renew the subscription only if the VPP account (associated with the subscription) is mapped to a unique location. As recommended by Apple, it is advisable to migrate one VPP purchaser to one location in Apple Business Manager, which makes a location unique. This ensures that all the licenses (assigned or unassigned) are automatically migrated to the Apps and Books section of Apple Business Manager.
For example: if you have an existing subscription XYZ in your ZENworks zone, then in Apple Business Manager, you can migrate the account of this subscription to location XYZ.
If in ZENworks, instead of renewing the subscription, you create a new subscription using the location-based token while retaining the existing subscription, then it might lead to duplication and VPP licenses might be reset.
Before migrating to a location-based token in ZENworks, ensure that you have migrated the existing VPP account to the unique location. For more information, see the Apple Support documentation.
Login to Apple Business Manager using your VPP account credentials.
Navigate to Settings > Apps and Books.
Download the token of a specific unique location (example: location XYZ).
Navigate back to ZCC.
Click the existing subscription (example: subscription XYZ).
Click Renew Token and select the location-based token that you had just downloaded.
IMPORTANT:After migrating all the VPP accounts to Apple Business Manager, ensure that you use only location-based tokens to manage VPP licenses in ZENworks and not a combination of both account-based and location-based tokens. If both account-based and location-based tokens are used to create subscriptions in the zone, then you might face license-related issues, such as resetting of assigned licenses and it can also result in duplicate subscriptions in the zone that might lead to confusion.
If the location in Apple Business Manager is not a unique location, then only the unassigned licenses are transferred to this location. A location is considered as non-unique if:
A location already has licenses in it before the VPP purchaser migrates to that location.
The location’s token is downloaded before the first VPP purchaser migrates to that location.
A new content manager is created in the location after another user opts into Apps and Books.
Multiple VPP purchasers migrate to the same location.
For example: in Apple Business Manager, you have migrated subscription XYZ to a location that is non- unique, then only the unassigned licenses (available licenses) will migrate to the new location-based account. The assigned licenses (consumed) will still be associated with the legacy account. In this case, in ZENworks, all bundle assignments related to the existing subscription (that uses the legacy account) should be unassigned and transferred to the non-unique location. Thereafter, you need to create a new subscription in ZENworks to distribute the transferred licenses.
In ZENworks, unassign all the bundles assignments associated with the subscription to which the legacy token is associated. Thereafter, refresh all devices and verify that all licenses are revoked and the Consumed License count for all apps is 0.
or
Delete the associated subscription and ensure that you select the Delete the replicated objects created by the subscription(s) checkbox. Re-create the subscription in ZENworks using the same legacy token, which will reset all licenses.
Delete the subscription (existing or the new subscription created by linking the same legacy token) and ensure that you select the Delete the replicated objects created by the subscription(s) checkbox.
In Apple Business Manager, navigate to Settings > Apps and Books. Transfer the unassigned licenses to the specific location.
Download the token for that specific location.
In ZENworks, create a new Apple VPP subscription and upload the newly downloaded location-based token.
When the new subscription is created, ZENworks syncs with Apple and all licenses transferred to this location will be identified and populated as available licenses in ZENworks. You can now create bundles and assign these licenses to specific devices or users.
If there are multiple subscriptions in the zone, then based on the scenario, you can refer to the relevant procedure to migrate to location-based tokens:
Each associated subscription account is migrated to non-unique locations, then for each account follow the steps documented in Procedure to migrate to location-based token in ZENworks if the location is non-unique.
All associated subscription accounts are migrated to a single non-unique location, then for each account follow the steps documented in Procedure to migrate to location-based token in ZENworks if the location is non-unique. However, instead of creating multiple subscriptions for each account, create only one subscription and map the location token with this subscription.
If the first account is migrated to a unique location and all other accounts are migrated to non-unique locations, then for the first account follow the steps documented in Procedure to migrate to location-based token in ZENworks and for the remaining accounts follow the steps documented in Procedure to migrate to location-based token in ZENworks if the location is non-unique.
If the first account is migrated to a unique location and subsequently the second account is migrated to the same location, then for the first account follow the steps documented Procedure to migrate to location-based token in ZENworks and for the second account follow the steps documented in Procedure to migrate to location-based token in ZENworks if the location is non-unique. However, you do not need to create a new subscription with the second account. The renewed subscription can be utilized to distribute licenses.
The behavior of "Reset Device" of Active Sync enrolled device depends on Active Sync client app used. It is seen that some Active Sync client app only removes the account and does not fully wipe the device data.
Workaround: None
The ‘Account Deactivated’ notification is displayed when your work account is disabled. To resolve this issue, you need to manually remove the work account from the Account Settings page of your Android device and then re-enroll the device.
During profile creation, the first step is to grant the required permissions in the backend but the READ_PHONE_STATE permission, which is used to get the serial number, is required to proceed with the next step of the registration process.
On some devices, it takes more than 200 milliseconds to grant the READ_PHONE_STATE permission. In these scenarios, the app not responding (ANR) occurs.
Workaround: Go to the app settings, grant the permissions to the profile app, and then relaunch the app.