We are early in our Sophos Mobile rollout over the last 2 months with around 20 iPhones currently enrolled in supervised mode through Apple DEP + Apple Business Manager.
It seems whenever new app updates are released, our helpdesk is unable to install those specific apps on newly enrolled iPhones until I go to Settings > Setup > Apple setup > Apple VPP > Clear VPP cache
This issue also affects app updates initiated through Sophos Central or the SMC on existing phones, which work after clearing the VPP cache.Things I've checked:- Plenty of licenses in ABM- Devices are supervisedIs there a way to schedule the VPP cache to be cleared?
Thanks for reaching out.
Do you know if the option "Automatically update iOS VPP apps assigned to devices" is already selected in the Apple VPP menu? I suggest ensuring your applications are assigned as "device-based" instead of "user-based" as well, as this may help.
If you’re required to clear the VPP Cache each time you need to update applications, I'd suggest opening a case with our support team, so this can be investigated further.
If this isn’t done, does the task fail immediately? What results are returned?
Yes the apps are assigned as "device-based" and also to update automatic updates is set.I'll go ahead and open a support case, just like to check here in case it's something simple.
There's two errors I've seen just for reference:
InstallApplication Error [MDMErrorDomain]Could not retrieve license for the app with iTunes Store ID [redacted]. [DeviceManagement.error]null
InstallApplication Error [DeviceManagement.error]null [ASDServerErrorDomain]null
Thanks for sharing these log entries. I was able to find one case in which re-creating the user entry, then assigning the device to the newly created user entry, allowed this process to work as expected.
Let me know if this works for you.
We have case #05600773 open for this issue as it regularly affects iOS devices across multiple users.