Configurator 2, Meraki, & VPP Token - Can I do it Manually?

I'm in a pickle. I have 30 iPads and not a robust wireless network. Slow, actually. Updating anything over-the-air is painfully slow on one iPad, let alone 30.


So we used to use Configurator 1. I could upload apps to the iPads relatively quickly over USB.


This time around the iPads shipped with iOS 9, so I have to use Configurator 2. Configurator 2 wants to work with an MDM. Our iPads are set up to work with Meraki, Cisco's MDM system.


So after playing with it for a couple weeks, erasing, restoring, installing & uninstalling profiles, I finally got it to the point where I can set up an iPad, restore to my Golden Image, then apply the profiles and they're all registered and set up on Meraki.


My VPP account is registered to Meraki, of course. That makes sense since it's the MDM and they use it for DEP. The problem I've run into is that when I attempt to upload an app to an iPad, it asks me for my VPP account for the token file. When I enter it, it gives me an ominous warning that if I use my VPP account with Configurator 2, it will stop working with whatever other server it's connected to (presumably the Meraki service.)


So I haven't clicked that OK button, I'm scared it'll mess up the Meraki service.


After some Lycosing, I found that I can manually download the VPP token file, which could then be used with OS X Server. But I'm not using Profile Manager, I want to use Configurator 2.


Is there a way to manually select the VPP token file for use with Configurator 2 so I can push apps locally instead of over wifi through Meraki's DEP? Or, perhaps, is there someplace where Configurator 2 looks for the token by default? A directory in which I can place the token file?


Without the VPP token, the apps won't launch on the iPad.


Thanks,

Doug

Posted on Jan 20, 2016 3:38 PM

Reply
7 replies

Jan 21, 2016 6:15 PM in response to olePigeon

Are you saying you broadband is slow or you wifi networks is slow. It's way cheap to get a decent wifi router.


About the Caching Service

The Caching service speeds up the download of software distributed by Apple through the Internet. It caches software updates for iOS and OS X, apps, books, and Internet Recovery images for OS X.

https://www.apple.com/support/osxserver/cachingservice/http://help.apple.com/serverapp/mac/4.0/#/apd74DDE89F-08D2-4E0A-A5CD-155E345EFB8 3

OS X server cost around $20. You can run it on any mac.


R

Jan 22, 2016 11:38 AM in response to rccharles

Appears to be some confusion. We're a school, not an individual. The wireless equipment is too slow, and it isn't cheap or easy to replace tens of thousands of dollars in equipment across the whole school campus.

We already have a Mac Mini server with OS X Server, but we use Meraki for MDM, not Profile Manger. Plus, as far as I know, caching service won't help in either case, as that is for Apple Software and not apps in general.

Jan 22, 2016 12:27 PM in response to olePigeon

1) I somehow figured that all your ipads were in one place like a cart. If so, you could get yourself one wifi router and attached it to some ethernet cable. Keep it off of your major network. Use it as a private network. Keep it powered off when not in use. You might need to have another profile you use at the end to switch to the student wifi network.


2) Sometimes finding an informative page on the caching server is no problem for me and other times like yesterday I have no luck finding a decent page. Today I was lucky.


my reading of this is that it does support apps.


"Content types supported by the Caching service

OS X Server includes built-in support for caching the following software.


iTunes and iBooks

  • iTunes 11.0.4 and later (OS X and Windows versions)
  • iOS app purchases and app updates*
  • iBooks Store content (iOS 6 and later, and OS X Mavericks and later)

*iOS updates downloaded using iTunes are not cached. iOS updates delivered "over the air" are cached instead."


Content types supported by the Caching service in OS X Server - Apple Support


---------------------


This is a public forum. Caveat emptor

Jan 22, 2016 3:55 PM in response to olePigeon

I finally figured it out. I had to add my App Store account as an approved user for VPP Facilitator account on the Meraki management server.


After doing that, all my VPP purchases auto-magically showed up. I was then able to download available purchaces using iTunes, then add them through Configurator 2. It didn't ask for an account name or password, which was the problem I was having.


It still doesn't work via Configurator 2 in terms of downloading apps. It fails at the Token acquisition phase, and I don't know why. However, if I download them via iTunes first, then add them through Configurator 2, it works.


Down side is that apps added via Configurator 2 don't show up under Meraki. I think I inadvertently found a way around a managed iPad and run un-approved apps in an MDM setting.


Oh well, it works for my purpose.

Jan 26, 2016 8:36 AM in response to olePigeon

olePigeon wrote:


It still doesn't work via Configurator 2 in terms of downloading apps. It fails at the Token acquisition phase, and I don't know why. However, if I download them via iTunes first, then add them through Configurator 2, it works.


Can you elaborate more on this please? I've had this same problem with downloading apps in AC2. Process fails 95% of the time. Enterprise support has been unable to resolve this error for me.


In iTunes, would I log in with my VPP account and download my apps there? Or another Apple ID? Do the apps always transfer successfully in AC2 after downloading them in iTunes first? I'm willing to try anything at this point.

Jan 26, 2016 10:05 AM in response to APL_Anderson

First, you log into the VPP store account using your VPP account. Purchase your licenses there (test with some free apps like Google, you don't want to waste any money.)


Now, if you have an MDM solution (such as Meraki, JAMF, or Profile Manager) you download your VPP token from that website, then associate it with your server. You can then add users that can utilize those licenses.


Now here's where it gets fuzzy for me. If you're not using an MDM, then I assume you'd use your VPP account as your main account. If you log into iTunes with your VPP account, then go the Store menu and do "Available Purchases," I believe it'll download whatever apps you've purchased with the VPP account. I could not find anywhere in the VPP Store settings to add users.


Now with Configurator 2, you can Add new apps, then click On My Mac button, then select the apps you downloaded with your iTunes account. The apps are located in your ~/Music/iTunes/iTunes\ Media/Mobile\ Applications


This should copy the apps you downloaded via iTunes to the iPad. Your iPad will need to use the VPP account as its main account also. However, using your VPP account as your main account doesn't seem right to me. It used to be that you'd get code vouchers, but they don't do it that way anymore. But please, be careful. I could not find a single shred of documentation online that explained any of this, which is why I posted here, and I ended up stumbling my way through. Your best option is to find out who your Apple Representative is, and set up a meeting with him or her.


So if you're NOT using an MDM, what you can try is this:


In Configurator 2, sign in to the Store using your normal account (not the VPP.) Add an App to your iPad. It'll prompt you for your iTunes account, use your regular one. Next, it'll prompt you again, but this time for the Token, and type in the VPP account. If I read the dialog box correctly, this will associate your VPP account with Configurator 2. I do not know if this is a permanent association, or if it can be changed just by uploading your VPP token to a different server (such as if you decided to use OS X Server & Profile Manger instead.)

Jan 26, 2016 10:29 AM in response to olePigeon

I'm not using an MDM. No OS X Server or Profile Manager. Just a MacBook Pro with AC2 for 20 brand new iPad Air 2s.


I've already "purchased" all 49 of my apps--they're all free ones--through the VPP store. But I seem to remember reading somewhere that I shouldn't ever sign into iTunes using my VPP account...is this true? I don't want to do anything that might mess up the apps that I have already slowly and painstakingly added successfully via AC2 to a few of the iPads.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Configurator 2, Meraki, & VPP Token - Can I do it Manually?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.