VPP licenses out of sync – renewing VPP token impact

[NetworkNînja]

Hi everyone,

we’re running Cisco Meraki Systems Manager in production and are currently seeing issues with Apple VPP license syncing.

Setup:

• ~1000 Apple devices
• 100+ apps managed via Apple Business Manager (VPP)
• Apps assigned using device tags

Issue:
VPP licenses are no longer being processed correctly in Meraki. According to Meraki Support, the same VPP token was previously used in another location. That token usage has been removed, but the issue remains.

In Systems Manager → VPP, license usage is no longer reliable and I don’t have a clear overview of how many licenses are actually assigned per app. App updates are also not being detected/applied correctly.

Questions:

• If I renew / re-upload the VPP token, will Meraki re-sync the licenses automatically?
• Is there a risk that apps will be removed from devices during the re-sync?
• Has anyone done this in a large production environment and can confirm it’s safe?

Any input or experience would be appreciated.

Thanks!

[PhilipDAth]

This is going to need a support case.

[NetworkNînja]

I already created one, but they could not help me.

[BlakeRichardson]

• If I renew / re-upload the VPP token, will Meraki re-sync the licenses automatically? I am not sure if uploading a VPP token forces a sync but you can manually run a sync
• Is there a risk that apps will be removed from devices during the re-sync? Unless the scoping is changed no.
• Has anyone done this in a large production environment and can confirm it’s safe? Yes I have done and yes it's safe. VPP tokens expires and need updating so refreshing the token isn't an issue. 

[NetworkNînja]

Hi @BlakeRichardsonthank you for your feedback.
I have refreshed the token in the hope that this will help resolve the license sync issue.

I have also created a community request in the Apple forum, as Meraki Support can only tell me that the token is being used by another MDM solution, but cannot specify which one.

I will update this topic as soon as I have any news.

Greetings

[BlakeRichardson · Accepted solution]

@NetworkNînja  I missed the part about the network token being used elsewhere. Have you used a different MDM in the past? Apple supports using multiple MDM's although a device can only be registered in a single mdm for example we use SM for iOS devices and Jamf for MacOS devices although everything is currently being migrated to Jamf.

If you have used a different MDM then you need to ensure the new/current MDM is setup in ABM/ASM properly. 

[NetworkNînja]

The Problem was like you wrote. The Token has been active on another MDM Solution and we deleted now the other Token. Now we need to wait until the Licence are correct again. 

[BlakeRichardson]

@NetworkNînja Also systems manager is being retired so now would be a good time to look for alternatives so that you can plan a migration with plenty of time. Apple supports migration to a new MDM on devices running OS26 and higher.