Apple VPP and Meraki MDM

Three Distinct Parts – Three different accounts VPP Store This is where you buy the apps School.vpp@lskysd.ca Currently 1 per school MDM This is where you manage the apps Also where you manage the devices Your.Email@lskysd.ca Currently 1 per managing person iPad This is where you use the apps Appstore.accnt@lskysd.ca Completely depends on deployment. We will discuss at the end!

VPP Store – Where you purchase the apps https://volume.itunes.apple.com/ca/store Login with the school.vpp@lskysd.ca account Search like iTunes How to pay? VPP credit – can be requested by PO via helpdesk.lskysd.ca Credit card – can be entered under account settings Can distribute apps by tokens or managed distribution Managed distribution is preferred Free apps should be purchased here as well

MDM (Meraki) – Where you manage the apps https://n54.meraki.com/ Login with your firstname.lastname@lskysd.ca Apps purchased from the VPP store are synced to Meraki MDM > VPP > Licensed Application Assign the app licenses to the desired users MDM > VPP > User Management Users must have accepted Apple’s Terms of Service This user will be logged into the App Store (covered in part 3) Multiuser accounts versus Dedicated Accounts depends on deployment

MDM (Meraki) – Managing the devices Naming the device is possible, tagging the device is the key To sort and group device, Meraki uses a tagging system Tagging making app deployment to different groups and devices much easier Monitor > Clients Select the device(s) and create tags to group them

MDM (Meraki) – Where you deploy the apps App management and deployment is separate from VPP App purchase MDM > Apps Add a new App (the same as you just purchased) To Deploy an App Select the App Choose the scope Confirm purchase method (VPP App assignment) Check off Remove with MDM

iPad – Receiving the App The user assigned in the MDM > User Management section in Meraki must be logged in to the App store Settings > iTunes and App Store > Apple ID Makes no difference if generic or personal account If a different account has been logged in, this may or may not work When Apps are pushed from the MDM, the iPad will prompt to install This is by design

More advanced topics VPP Store PO process vs credit card and the implications Managed Distribution vs Tokens Technical issues with no credit card MDM New device setup Setting up email address Inviting a user Other settings management Additional features App Store The miserable process of creating an account with no credit card The changing Apple deployment structure Device Enrollment Program

Notes about creating and managing accounts Apple REALLY wants everyone to have a credit card attached to their account. Getting away from this is tricky right now. Apple also requires everyone accept the Terms of Service. This can also be tricky. Meraki’s VPP user management component requires that users accept Apple’s Terms of Service as well A VPP account cannot be an App store account. Best practice for app store accounts and how they are deployed and managed does depend on the implementation of the devices at the schools. No one-size-fits-all approach is recommended.

Apple VPP and Meraki MDM