This section is applicable for VPP purchasers who have already upgraded or are planning to upgrade to Apple Business Manager from the Apple Deployment Programs account. This section details the best practices to migrate to a location-based token in ZENworks.
If you want to migrate an existing VPP subscription (that uses a legacy token) to a location-based token (provided by Apple Business Manager) and associate all the existing bundle assignments to this new location-based token, then as a best practice it is recommended that you renew the subscription to the location-based token. This ensures that all existing bundle assignments work seamlessly with the new location-based token. However, you can renew the subscription only if the VPP account (associated with the subscription) is mapped to a unique location. As recommended by Apple, it is advisable to migrate one VPP purchaser to one location in Apple Business Manager, which makes a location unique. This ensures that all the licenses (assigned or unassigned) are automatically migrated to the Apps and Books section of Apple Business Manager.
For example: if you have an existing subscription XYZ in your ZENworks zone, then in Apple Business Manager, you can migrate the account of this subscription to location XYZ.
If in ZENworks, instead of renewing the subscription, you create a new subscription using the location-based token while retaining the existing subscription, then it might lead to duplication and VPP licenses might be reset.
Before migrating to a location-based token in ZENworks, ensure that you have migrated the existing VPP account to the unique location. For more information, see the Apple Support documentation.
Login to Apple Business Manager using your VPP account credentials.
Navigate to Settings > Apps and Books.
Download the token of a specific unique location (example: location XYZ).
Navigate back to ZCC.
Click the existing subscription (example: subscription XYZ).
Clickand select the location-based token that you had just downloaded.
IMPORTANT:After migrating all the VPP accounts to Apple Business Manager, ensure that you use only location-based tokens to manage VPP licenses in ZENworks and not a combination of both account-based and location-based tokens. If both account-based and location-based tokens are used to create subscriptions in the zone, then you might face license-related issues, such as resetting of assigned licenses and it can also result in duplicate subscriptions in the zone that might lead to confusion.
If the location in Apple Business Manager is not a unique location, then only the unassigned licenses are transferred to this location. A location is considered as non-unique if:
A location already has licenses in it before the VPP purchaser migrates to that location.
The location’s token is downloaded before the first VPP purchaser migrates to that location.
A new content manager is created in the location after another user opts into Apps and Books.
Multiple VPP purchasers migrate to the same location.
For example: in Apple Business Manager, you have migrated subscription XYZ to a location that is non- unique, then only the unassigned licenses (available licenses) will migrate to the new location-based account. The assigned licenses (consumed) will still be associated with the legacy account. In this case, in ZENworks, all bundle assignments related to the existing subscription (that uses the legacy account) should be unassigned and transferred to the non-unique location. Thereafter, you need to create a new subscription in ZENworks to distribute the transferred licenses.
In ZENworks, unassign all the bundles assignments associated with the subscription to which the legacy token is associated. Thereafter, refresh all devices and verify that all licenses are revoked and thecount for all apps is 0.
Delete the associated subscription and ensure that you select thecheckbox. Re-create the subscription in ZENworks using the same legacy token, which will reset all licenses.
Delete the subscription (existing or the new subscription created by linking the same legacy token) and ensure that you select thecheckbox.
In Apple Business Manager, navigate to Settings > Apps and Books. Transfer the unassigned licenses to the specific location.
Download the token for that specific location.
In ZENworks, create a new Apple VPP subscription and upload the newly downloaded location-based token.
When the new subscription is created, ZENworks syncs with Apple and all licenses transferred to this location will be identified and populated as available licenses in ZENworks. You can now create bundles and assign these licenses to specific devices or users.
If there are multiple subscriptions in the zone, then based on the scenario, you can refer to the relevant procedure to migrate to location-based tokens:
Each associated subscription account is migrated to non-unique locations, then for each account follow the steps documented in Procedure to migrate to location-based token in ZENworks if the location is non-unique.
All associated subscription accounts are migrated to a single non-unique location, then for each account follow the steps documented in Procedure to migrate to location-based token in ZENworks if the location is non-unique. However, instead of creating multiple subscriptions for each account, create only one subscription and map the location token with this subscription.
If the first account is migrated to a unique location and all other accounts are migrated to non-unique locations, then for the first account follow the steps documented in Procedure to migrate to location-based token in ZENworks and for the remaining accounts follow the steps documented in Procedure to migrate to location-based token in ZENworks if the location is non-unique.
If the first account is migrated to a unique location and subsequently the second account is migrated to the same location, then for the first account follow the steps documented Procedure to migrate to location-based token in ZENworks and for the second account follow the steps documented in Procedure to migrate to location-based token in ZENworks if the location is non-unique. However, you do not need to create a new subscription with the second account. The renewed subscription can be utilized to distribute licenses.
The behavior of "Reset Device" of Active Sync enrolled device depends on Active Sync client app used. It is seen that some Active Sync client app only removes the account and does not fully wipe the device data.
When the Allow manual reconciliation by user option is enabled and on Android 12, a user attempts to enroll a device to work managed which was previously enrolled in a work profile mode, auto reconciliation fails and ZCC does not prompt the user to manually reconcile the device.
Workaround: This is a known issue, and it will be resolved in the upcoming ZENworks 2020 Update 3 release. It is recommended that you reset and re-enroll the device to resolve this issue.