Thread Info
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Problems with SMC VPP set-up and deployment

RL

I still can't distribute apps due to various errors, and I need some further clafification and help please:

ENVIRONMENT FACTORS:

•On-premise

•SMC 3.6.0.5

•Active Directory Integrated

VPP SET-UP:

1. Enrolled in Apple VPP

2. Purchased an application ensuring that we select the Excel option (download codes) and NOT the MDM (managed) option!

3.Downloaded the sToken text file from the Apple VPP website

4.Entered the VPP Apple ID and token into System setup > iOS Volume Purchase Program

5.Manually invited a VPP user from SMC

6.Confirmed the user  successfully joined to our VPP program

7.Used Apple Link Maker to get the link to the app created in step 2

8.Created a package within Applications in SMC. Ensuring we enter:
•Name
•Version

•Left Recommendation Status as blank (not mandatory)

•Select iOS 7 and above

•Assign a customer

•Use the link created by the Apple Link Maker

•Upload the VPP file (Excel spreadsheet) friom step 2 above

•Save and save again


9.  Edit VPP user and associate the VPP license

10. Deploy the application to the user.

QUESTIONS:

Q1. Why have Sophos selected to not go with what Apple would call an MDM solution when purchasing applications and instead gone down the Excel spreadsheet route?


Q2. When manually import and invite the VPP users, am I to use their Activesync (corporate) e-mail address or their iTunes account e-mail address or does this not mater?


Q3. Every-time I purchase a new application do I need to download and re-import the sToken?


Q4. Following Sophos KB 120033 re access to vpp.itunes.apple.com to their 17.*.*.* network... What TCP / UDP port numbers need to be opened?


ISSUES:

i1. When I deploy the application I get error code: -3 Wrong parameter but not further indication of what the problem is


i2. I can't seem to find the "SHOW" button next to the application to add the user (as per the following from SDU:

QUOTE:

1. Via the application package itself.

Edit the VPP application package in the SMC console and press the "Show" button next to VPP licenses.

You can now select all the VPP users which you have invited and who already confirmed the inviation.

END Quote"

i3. When removing, re-adding, and re-associating a VPP app with a user I get the following error:

  

Message:
Could not store vpp user , user="Id: 3CustomerId: 15, GUID: ********-*****-*****-******, Last name: Bloggs, First name: Joe, Vpp status: Invited, Email: joe.bloggs@exampledomain.com"

 


REQUESTS:

Please change Sophos KB 118600 to include the need to download the Excel spreadsheet when purchasing from the Apple VPP program....

Thanks,

John

:49012


This thread was automatically locked due to age.
  • 0

    Issues resolved but questions outstanding:

    -3 error:

    I looked in the server logs and noticed this: 2014-04-11 14:46:27,724 WARN  [JMS SessionPool Worker-0 data.bo.TransitionWizard] could not create URL object from link

    So I looked at the hyperlink I had with the application in SMC - which I took from the Apple Link Maker and realised that we had to copy the 'DIRECT LINK' from the iTunes Link Maker and not the hyperlink from the text field. Details details!

    As for the other error, I just removed and re-added the user.

    So on to the questions please... :)

    :49016
    • 0

      Hi John,

      please let me try to answer your questions:

      Q1. Why have Sophos selected to not go with what Apple would call an MDM solution when purchasing applications and instead gone down the Excel spreadsheet route?

      Answer:  With Sophos Mobile Control 3.6. we support both possibilities and you do not require the spreadsheet anymore if you use the "sToken". The SMC server will do a "lookup" of your purchased VPP apps using this token.
      The "Spreadsheet" method was the old way of distributing applications to iOS devices Apple offered.


      Q2. When manually import and invite the VPP users, am I to use their Activesync (corporate) e-mail address or their iTunes account e-mail address or does this not mater?
      Answer: The email address you send the invitation to does not matter. After the users click on the link they have to authenticate with their Apple ID to sign up for your companys VPP program. Please note, that iTunes has to be installed if they click on the link on a PC.


      Q3. Every-time I purchase a new application do I need to download and re-import the sToken?

      Answer: No, this is not necessary. You only have to upload the sToken once and it does not change after purchasing another application. It is valid for one year, therefore, you have to update it in the future.


      Q4. Following Sophos KB 120033 re access to vpp.itunes.apple.com to their 17.*.*.* network... What TCP / UDP port numbers need to be opened?

      Answer: The communication is done via port 80 in SMC 3.6.0.0. With the patch 3.6.1 avaiable on sophos.com this was changed to 443.

      Please note that I have updated our KBA 118600 as it reflected only the "old" way regarding the Excel sheet.

      Furthermore, I recommend to install the patch 3.6.1 mentioned above on your system.

      I hope this helps.


      Best regards

      Stefan

      :49060
      • 0

        Thanks Stefan, 

        That's cleared up some confusion and helped close a support case :)

        Thanks again, 

        John

        :49070
        Unfiltered HTML