topic Re: Device deployment app credential issue in Endpoint Security

Device deployment app credential issue

cm380151 — Wed, 13 Nov 2019 21:09:01 GMT

I am looking to deploy some iPhones on a Meraki Management System we are using but am having problems. We have two Meraki accounts, so two networks. When I use one network, let’s call it A, I can deploy devices fine through Apple Configurator 2 or with the web browser and code methods alright, but I am having trouble with our less configured network, network B.

Network B did not have a DEP server attached, nor did it have a VPP account. I created a DEP server for it with the ASM account that is attached to A, which is also the same Apple login used for the VPP account for A. I attached the VPP account that is attached to A to B as well, as I needed licenses.

When I enroll the device via web browser and code, the profile installs fine and it prompts an install of the Meraki iOS management app, to which I am not required to use a password for, which is what I want. Using network B I have to put in a password to deploy any apps. The profile installs fine, but it prompts for passwords to install apps, so I know that it is trying to install them, but I am not sure how to assign credentials so that I don’t need to provide that device with an Apple ID.

When I install with Network A (the well-established network) via the web browser, the profile first says:

mobile device management

device identity certificate

and after install it says:

mdm

1 managed app

device identity cert

unknown payload

At no point did I have to input credentials for an account to install the app, which is the Meraki mobile app.

From Network B (the less established network), the profile first says:

device enrollment challenge

and post install it says:

mdm

device identity certificate

Can anyone please provide me with some guidance? This issue is quite an annoying one and I’m not sure what else to do to try and solve it.

Another question, why am I able to remove the profiles that I load via the browser so easily? It doesn’t force me to factory reset the device or anything, it just lets me remove it.

Thanks in advance!

Re: Device deployment app credential issue

BlakeRichardson — Wed, 13 Nov 2019 21:21:18 GMT

@cm380151 The problem is you are trying to use the same VPP account with multiple MDM's. This will not work, you need a seperate VPP account for each MDM you use.

Even though A and B are both using Meraki they are still classed as two MDM instances.

Re: Device deployment app credential issue

cm380151 — Fri, 15 Nov 2019 00:20:53 GMT

Hey @BlakeRichardson, thanks for that one. I was wondering if that could have been the case. How can I create a new VPP for network B via ASM? I have looked in there, and tried to google it to see if I can find how to create a second VPP account for my needs but am coming up short.

Re: Device deployment app credential issue

BlakeRichardson — Sun, 17 Nov 2019 19:44:52 GMT

@cm380151 I am not sure how you do this anymore given Apple have fully rolled out ASM and ABM now. Apple does have a contact centre for VPP users so it might pay to call Apple support and asked to be transferred to that team.

Re: Device deployment app credential issue

cm380151 — Mon, 18 Nov 2019 02:18:57 GMT

@BlakeRichardson Awesome, thanks for the guidance on this!