Issue Description: Licenses Expiring - The licenses for [app_name] and 'x' other applications will expire in 'n' days. The given App Store Notification is displayed in many iPad devices. All the apps for which the notification is shown are purchased from ABM (VPP apps). The licenses are still assigned to devices and are not revoked which is made sure from VPP API. The VPP token is also not nearing expiration and it has more than 6 months time for expiry. Screenshot of the notification is attached below Kindly help us with the reason for this behavior

In a iPad device with OS Version 15.1, when deploying a app store app through MDM, the InstallApplication command receives "License Not Found" error in response. The app is not purchased through VPP and the "PurchaseMethod" key is not set in InstallApplication request command. I have attached a sample request and response of InstallApplication commands. InstallApplication command: <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>InstallApplication;Collection=xxxx</string> <key>Command</key> <dict> <key>RequestType</key> <string>InstallApplication</string> <key>iTunesStoreID</key> <integer>xxxx</integer> <key>ManagementFlags</key> <integer>5</integer> <key>Configuration</key> <dict> <key>ServerName</key> <string>xxxx</string> <key>ServerPort</key> <string>xxxx</string> <key>UDID</key> <string>xxxx</string> <key>ErID</key> <string>xxxx</string> <key>IsLanguagePackEnabled</key> <string>true</string> <key>authtoken</key> <string>********</string> <key>SCOPE</key> <string>MDMOnDemand/MDMCloudEnrollment</string> <key>Services</key> <dict> <key>urls</key> <dict> <key>IOSNativeAppServlet</key> <string>xxxx</string> <key>DeviceRegistrationServlet</key> <string>xxxx</string> <key>IOSCheckInServlet</key> <string>xxxx</string> <key>AppCatalogServlet</key> <string>xxxx</string> <key>MDMLogUploaderServlet</key> <string>xxxx</string> <key>mdmDocsServlet</key> <string>xxxx</string> <key>DFSDownloadURL</key> <string>xxxx</string> </dict> <key>token_name</key> <string>********</string> <key>token_value</key> <string>********</string> </dict> <key>IsSyncServerEnabled</key> <true/> <key>IsAnnouncementEnabled</key> <true/> </dict> <key>ChangeManagementState</key> <string>Managed</string> </dict> </dict> </plist> InstallApplication Response: <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>InstallApplication;Collection=xxxx</string> <key>ErrorChain</key> <array> <dict> <key>ErrorCode</key> <integer>1005</integer> <key>ErrorDomain</key> <string>DeviceManagement.error</string> <key>LocalizedDescription</key> <string>Could not install app.</string> </dict> <dict> <key>ErrorCode</key> <integer>9610</integer> <key>ErrorDomain</key> <string>ASDServerErrorDomain</string> <key>LocalizedDescription</key> <string>License not found</string> </dict> </array> <key>Status</key> <string>Error</string> <key>UDID</key> <string>xxxx</string> </dict> </plist>

We are facing issues in VPP Client Configuration API ( POST: https://vpp.itunes.apple.com/mdm/VPPClientConfigSrv ). For some VPP token, the "clientContext" key in the response says "token being used in v2" instead of giving a proper clientContext. These VPP tokens aren't actually added in any other MDM than ours. But it gives this as response. Also, we didn't use the new API for setting VPP Client Configuration too. We are seeing this issue for some VPP tokens in random. We would like to understand this behaviour in VPP tokens.

Hi, I need to enroll my company to Apple Developer Program. I got the DUNS number yesterday, but when I tap the Enroll button from my Apple account, it brings my to the Apple Developer Program form for individuals without asking me if I am a company. This form doesn't ask me the DUNS number, but only information about myself. I see that in every online guide they are asked if they are a company or individual but I can't get to that dropdown list. What can I do?

Hello, In our MDM, we would like to perform a nightly auto-update of all the installed apps in all the customer devices. We were wondering is there an API to query from ABM that if the particular app needs an update or not? What is the best practice to perform app auto-update? Instead of simply sending "InstallApplication" command to all the installed apps, we were wondering is there a way to check app update is available or not. Thanks, Satish

DESCRIPTION:  An iOS app - (WhatsApp Business) is not getting updated in device when update is deployed. The InstallApplication command is sent to device successfully and it is Acknowledged but the app is not updating. On analyzing the device logs in console we are getting the error- ["This installation was canceled by the user." UserInfo={NSLocalizedFailureReason=User canceled., NSLocalizedDescription=This installation was canceled by the user] for the app. This is a supervised device and app was not open in foreground too. So ideally the app should update silently without any user interruption but it says that user cancelled. There is no prompt in device too. We are unable to remove and re-install the app since app data will be lost.  HOW TO REPRODUCE:  Enroll a iOS device in MDM.  Deploy a VPP App Store App using MDM to the device.  Wait for an update in App Store and then deploy the update to device of the same VPP App Store app from MDM.  EXPECTED RESULT:  The app should be updated in device.  ACTUAL RESULT:  The app is not updated in device. (Error found in device - This installation was canceled by the user] for the app) InstallApplication Command From MDM: <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>InstallApplication;Collection=51084000003072065</string> <key>Command</key> <dict> <key>RequestType</key> <string>InstallApplication</string> <key>iTunesStoreID</key> <integer>1386412985</integer> <key>InstallAsManaged</key> <true/> <key>ManagementFlags</key> <integer>5</integer> <key>Options</key> <dict> <key>PurchaseMethod</key> <integer>1</integer> </dict> <key>ChangeManagementState</key> <string>Managed</string> </dict> </dict> </plist> InstallApplication Response From Device <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>InstallApplication;Collection=51084000003072065</string> <key>Identifier</key> <string>net.whatsapp.WhatsAppSMB</string> <key>State</key> <string>Managed</string> <key>Status</key> <string>Acknowledged</string> <key>UDID</key> <string>*****</string> </dict> </plist> Kindly help us with this case.

Can we distribute Version 1 to Organization ID A and Version 2 to Organization ID B under ABM? Is it possible? Or do I have to submit them as 2 different Bundle IDs under ABM?

When we use Migration Assistant to transfer data from one machine to another or when restoring a backup, it breaks the MDM enrollment. Upon checking, we found that as the Identity Certificate in the KeyChain isn't available, the MDM agent is unable to initiate the communication. Is there any way to avoid behavior like this? Thanks in Advance.

Issue Description : Incase, if the app version for the iOS and iPadOS differs like iOS and tvOS how can we get the iPadOS app details in ContentMetaDataLookUp API.  sample contentMetadataURL for iOS : https://uclient-api.itunes.apple.com/WebObjects/MZStorePlatform.woa/wa/lookup?version=2&id=544007664&p=mdm-lockup&caller=MDM&platform=enterprisestore&cc=us&l=en Kindly help us with this case.

Hello, I would like to know what options we have for premium-codes within the B2B area. How can we (under App-Store regulations) work together with companys to give out Corporate Logins for their employees? So if we work with a company together, the company can give their employees free access to the app. Is here a "standard way" of doing so? Thank you very much Hannah

Why the camera icon is not activated on the home screen after MDM camera profile reclaim Reproduce the issue Using Mobile Device Management (MDM), camera restriction payload Camera restriction progress Camera app should be activated on home screen, but camera app is not activated issues Probing Reboot iPhone MDM camera profile reclaim iPhone 11 Pro Build Version 16.0.2 (20A380) Occurs on unspecified devices after iOS16 release It is still happening on the device where the symptom is reproduced. Please let me know if there is a solution or if there is a way to take action in MDM Server to solve it. Or please let me know what could be the cause.

Hello everyone, I have been reading forums lately, and found out that Apple Developer Enterprise Program users are having problem in renewing their accounts. Our company is using the same program as well and we are thinking if what would be the best program to use when we were not able to renew the license for the Enterprise program. We currently have 100+ Employees we are only distributing one app which is being used by 280+ customers and the app is currently installed in more or less 3000 devices. Looking forward for everyone's recommendation and reply. Thanks!

We previously have an Enterprise account subscription which we use to provide an app for a private client. The app is custom to our internal business, and used by more than 1000 agents. Our subscription is rejected due to: "Our records show that your organization has less than 100 employees. Because this program is designed for organizations with 100 or more employees" With this we don't have any license to distribute the private app. We cant see that Business Manager can help because it is hard to distribute among this private users. This is very frustrating as we are in the midst of ongoing event that are solely dependant to the app.

Issue description: A custom app is purchased from ABM portal for a location token. The license for the custom app is assigned to device and the "InstallApplication" command is sent to device. But the device gives "Invalid Status Code" in its response. Sample InstallApplication Request: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>InstallApplication;Collection=1111</string> <key>Command</key> <dict> <key>RequestType</key> <string>InstallApplication</string> <key>iTunesStoreID</key> <integer>1639088235</integer> <key>InstallAsManaged</key> <true/> <key>ManagementFlags</key> <integer>5</integer> <key>Options</key> <dict> <key>PurchaseMethod</key> <integer>1</integer> </dict> <key>ChangeManagementState</key> <string>Managed</string> </dict> </dict> </plist> Sample InstallApplication Response: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>InstallApplication;Collection=1111</string> <key>ErrorChain</key> <array> <dict> <key>ErrorCode</key> <integer>301</integer> <key>ErrorDomain</key> <string>AMSErrorDomain</string> <key>LocalizedDescription</key> <string>Invalid Status Code</string> </dict> </array> <key>RejectionReason</key> <string>Other</string> <key>State</key> <string>Failed</string> <key>Status</key> <string>Error</string> <key>UDID</key> <string>0000-0000-XXXX-XXXX-000000XXXX</string> </dict> </plist> The App store region of the device and the custom app are same. But the app is installing the device. Kindly help us with this issue

Issue Description: When trying to install a VPP purchased or non VPP App Store App in a iOS device using "InstallApplication" command from MDM, the device gives "Purchase Batch Failed" error in its response. Sample InstallApplication Request: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>InstallApplication;Collection=11111</string> <key>Command</key> <dict> <key>RequestType</key> <string>InstallApplication</string> <key>iTunesStoreID</key> <integer>815193300</integer> <key>ManagementFlags</key> <integer>5</integer> <key>Options</key> <dict> <key>PurchaseMethod</key> <integer>1</integer> </dict> <key>ChangeManagementState</key> <string>Managed</string> <key>InstallAsManaged</key> <true/> </dict> </dict> </plist> Sample InstallApplication Response: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>InstallApplication;Collection=11111</string> <key>ErrorChain</key> <array> <dict> <key>ErrorCode</key> <integer>1005</integer> <key>ErrorDomain</key> <string>DeviceManagement.error</string> <key>LocalizedDescription</key> <string>Could not install app.</string> </dict> <dict> <key>ErrorCode</key> <integer>12</integer> <key>ErrorDomain</key> <string>AMSErrorDomain</string> <key>LocalizedDescription</key> <string>Purchase Batch Failed</string> </dict> </array> <key>Status</key> <string>Error</string> <key>UDID</key> <string>0000-xxxxx-000000000</string> </dict> </plist> Kindly help understand this case and provide a solution for this. Thanks in advance.

Issue Description An tvOS device is enrolled in MDM and an App Store App (VPP App) is deployed in Apple TV (4K) with AppLock policy. App has an update in App Store and the app update is pushed to device from MDM. The InstallApplication command is sent to the device for the app update and the command response gives "Managed" state for the app. But the app doesn't update in the device. Incase if, the AppLock policy is removed from the device and then the app update is pushed, the app updates to latest version in device. Normally in iOS devices, if an app update is pushed and if the app is open in device with AppLock policy, the app closes automatically and the update is installed and app reopens automatically in AppLock mode without any user intervention. Is it the same behavior in tvOS devices or does the AppLock policy app update behavior change here? Kindly help us understand this use case. Sample InstallApplication Command: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>InstallApplication;Collection=1234</string> <key>Command</key> <dict> <key>RequestType</key> <string>InstallApplication</string> <key>iTunesStoreID</key> <integer>383457673</integer> <key>ManagementFlags</key> <integer>5</integer> <key>Options</key> <dict> <key>PurchaseMethod</key> <integer>1</integer> </dict> <key>ChangeManagementState</key> <string>Managed</string> </dict> </dict> </plist> Sample InstallApplication Response: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>InstallApplication;Collection=1234</string> <key>Identifier</key> <string>com.plexapp.plex</string> <key>State</key> <string>Managed</string> <key>Status</key> <string>Acknowledged</string> <key>UDID</key> <string>00000000-0000XXXXX0000</string> </dict> </plist>

Hello everyone, We want to release of first version of our ios client app for our client/server application ecosystem, but we are facing to a serious issues and concerns with the way that apple offer to manage versioning and a really world of the B2B!! Our B2B market is only safety public agencies who need and use complex client/server ecosystem. Ours solutions is within those ecosystem. And our company as well as the client have to live with the legacy application. Also ours clients cannot all time keep upgrade to the last major version (ex : 9.10 , 9.11 . 9.12 etc..), or update the major version they using to the last fix/bug release (ex : 9.10.1234 to 9.10.1266, etc..) So this post it's to get information, discussion and advice regarding this issue and about the way to could pass over in the contect : how manage situation if apple doesn't want to offer enrollment to 'enterprise programs' ? Does are existing some way inside or outside apple program to manage those issue and the simplier way ? like tool to transfert or IPA to MDM of the B2B client for they release as they want the version! what could be the ways to avoid this issues regarding the development ? (in the way client/server) and what we could improve on a short and long term to be more 'apple B2B illusion wolrd! :D' Thanks you for your information and respond!

We have been waiting for 4 weeks to have our enterprise account "reviewed" for renewal. We have received no response. Calling Apple, they tell us that neither us nor they can contact the team that approves the renewal. This account renewal process is, and always has been, renewing it, agreeing to a license agreement, and putting in a card number to pay for it. I had a calendar reminder to renew the provisioning profiles for 2 very widely used apps within our org. This reminder was set a week prior to needing them updated. Since renewing a profile is usually a very quick thing, this has always been more than sufficient. Since Apple has decided to change whatever processes, we have now been down 2 business critical apps for about 3 weeks now. There are threads about this issue going back months. What in the world is going on? How can Apple expect enterprise, businesses, to go weeks or months without being able to renew and therefor continue use of internal business applications using their platforms?

Description: An app update of a app store app or a enterprise app is pushed from MDM using "InstallApplication" command to an iOS device. The app is opened in foreground when an update is pushed. The device is supervised and the app is VPP purchased. When the command is sent to device, the app doesn't update automatically and shows a prompt to update the app. Kindly help us understand this case. Sample InstallApplication Request: <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>InstallApplication;Sample=000000</string> <key>Command</key> <dict> <key>RequestType</key> <string>InstallApplication</string> <key>iTunesStoreID</key> <integer>1113153706</integer> <key>InstallAsManaged</key> <true/> <key>ManagementFlags</key> <integer>5</integer> <key>Options</key> <dict> <key>PurchaseMethod</key> <integer>1</integer> </dict> <key>ChangeManagementState</key> <string>Managed</string> </dict> </dict> </plist> Sample InstallApplication Response: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>InstallApplication;Sample=000000</string> <key>Identifier</key> <string>com.microsoft.skype.teams</string> <key>State</key> <string>PromptingForUpdate</string> <key>Status</key> <string>Acknowledged</string> <key>UDID</key> <string>0000-000000-0000</string> </dict> </plist>

Description: From MDM, the InstalledApplicationList command is sent to device for querying the list of Installed Apps. Some apps doesn't have version(both Version & ShortVersion) in the response. But the "Installing" key is false for them which should mean that the app is already Installed. But the app version is not available in the response. Also, for these apps without app version, the "IsValidated" key gives "false" value. But these apps are installed on the device. Kindly help us understand about this case. Sample Response of InstalledApplicationList: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>InstalledApplicationList</string> <key>InstalledApplicationList</key> <array> <dict> <key>AdHocCodeSigned</key> <false/> <key>AppStoreVendable</key> <false/> <key>BetaApp</key> <false/> <key>BundleSize</key> <integer>135618560</integer> <key>DeviceBasedVPP</key> <true/> <key>ExternalVersionIdentifier</key> <integer>850215498</integer> <key>HasUpdateAvailable</key> <false/> <key>Identifier</key> <string>net.whatsapp.WhatsApp</string> <key>Installing</key> <false/> <key>IsValidated</key> <false/> <key>Name</key> <string>‎WhatsApp</string> </dict> <dict> <key>AdHocCodeSigned</key> <false/> <key>AppStoreVendable</key> <false/> <key>BetaApp</key> <false/> <key>BundleSize</key> <integer>185229312</integer> <key>DeviceBasedVPP</key> <true/> <key>ExternalVersionIdentifier</key> <integer>849733664</integer> <key>HasUpdateAvailable</key> <false/> <key>Identifier</key> <string>com.microsoft.azureauthenticator</string> <key>Installing</key> <false/> <key>IsValidated</key> <true/> <key>Name</key> <string>Authenticator</string> <key>ShortVersion</key> <string>6.5.98</string> <key>Version</key> <string>20</string> </dict> <dict> <key>AdHocCodeSigned</key> <false/> <key>AppStoreVendable</key> <false/> <key>BetaApp</key> <false/> <key>BundleSize</key> <integer>287129600</integer> <key>DeviceBasedVPP</key> <true/> <key>ExternalVersionIdentifier</key> <integer>849978495</integer> <key>HasUpdateAvailable</key> <false/> <key>Identifier</key> <string>com.microsoft.skype.teams</string> <key>Installing</key> <false/> <key>IsValidated</key> <false/> <key>Name</key> <string>Teams</string> </dict> <dict> <key>AdHocCodeSigned</key> <false/> <key>AppStoreVendable</key> <false/> <key>BetaApp</key> <false/> <key>BundleSize</key> <integer>213839872</integer> <key>DeviceBasedVPP</key> <true/> <key>ExternalVersionIdentifier</key> <integer>850097782</integer> <key>HasUpdateAvailable</key> <false/> <key>Identifier</key> <string>com.google.Maps</string> <key>Installing</key> <true/> <key>IsValidated</key> <false/> <key>Name</key> <string>Google Maps</string> </dict> <dict> <key>AdHocCodeSigned</key> <false/> <key>AppStoreVendable</key> <false/> <key>BetaApp</key> <false/> <key>BundleSize</key> <integer>43339776</integer> <key>DeviceBasedVPP</key> <true/> <key>ExternalVersionIdentifier</key> <integer>848157118</integer> <key>HasUpdateAvailable</key> <false/> <key>Identifier</key> <string>com.manageengine.mdm.iosagent</string> <key>Installing</key> <false/> <key>IsValidated</key> <true/> <key>Name</key> <string>ME MDM</string> <key>ShortVersion</key> <string>22.04.01</string> <key>Version</key> <string>1558</string> </dict> <dict> <key>AdHocCodeSigned</key> <false/> <key>AppStoreVendable</key> <false/> <key>BetaApp</key> <false/> <key>BundleSize</key> <integer>209174528</integer> <key>DeviceBasedVPP</key> <true/> <key>ExternalVersionIdentifier</key> <integer>848848517</integer> <key>HasUpdateAvailable</key> <false/> <key>Identifier</key> <string>us.zoom.videomeetings</string> <key>Installing</key> <false/> <key>IsValidated</key> <false/> <key>Name</key> <string>Zoom</string> </dict> </array> <key>Status</key> <string>Acknowledged</string> <key>UDID</key> <string>00000-000000-000000</string> </dict> </plist> Some apps with the issue in the given response:- net.whatsapp.WhatsApp, com.microsoft.skype.teams, us.zoom.videomeetings, etc.