Apple VPP and Meraki MDM

1. Apple VPP and Meraki MDM

2. Three Distinct Parts – Three different accounts • VPP Store • This is where you buy the apps School.vpp@lskysd.ca Currently 1 per school • MDM • This is where you manage the apps • Also where you manage the devices Your.Email@lskysd.ca Currently 1 per managing person • iPad • This is where you use the apps Appstore.accnt@lskysd.ca Completely depends on deployment. We will discuss at the end!

3. VPP Store – Where you purchase the apps • https://volume.itunes.apple.com/ca/store • Login with the school.vpp@lskysd.ca account • Search like iTunes • How to pay? • VPP credit – can be requested by PO via helpdesk.lskysd.ca • Credit card – can be entered under account settings • Can distribute apps by tokens or managed distribution • Managed distribution is preferred • Free apps should be purchased here as well

4. MDM (Meraki) – Where you manage the apps • https://n54.meraki.com/ • Login with your firstname.lastname@lskysd.ca • Apps purchased from the VPP store are synced to Meraki • MDM > VPP > Licensed Application • Assign the app licenses to the desired users • MDM > VPP > User Management • Users must have accepted Apple’s Terms of Service • This user will be logged into the App Store (covered in part 3) • Multiuser accounts versus Dedicated Accounts depends on deployment

5. MDM (Meraki) – Managing the devices • Naming the device is possible, tagging the device is the key • To sort and group device, Meraki uses a tagging system • Tagging making app deployment to different groups and devices much easier • Monitor > Clients • Select the device(s) and create tags to group them

6. MDM (Meraki) – Where you deploy the apps • App management and deployment is separate from VPP App purchase • MDM > Apps • Add a new App (the same as you just purchased) • To Deploy an App • Select the App • Choose the scope • Confirm purchase method (VPP App assignment) • Check off Remove with MDM

7. iPad – Receiving the App • The user assigned in the MDM > User Management section in Meraki must be logged in to the App store • Settings > iTunes and App Store > Apple ID • Makes no difference if generic or personal account • If a different account has been logged in, this may or may not work • When Apps are pushed from the MDM, the iPad will prompt to install • This is by design

8. More advanced topics • VPP Store • PO process vs credit card and the implications • Managed Distribution vs Tokens • Technical issues with no credit card • MDM • New device setup • Setting up email address • Inviting a user • Other settings management • Additional features • App Store • The miserable process of creating an account with no credit card • The changing Apple deployment structure • Device Enrollment Program

9. Notes about creating and managing accounts • Apple REALLY wants everyone to have a credit card attached to their account. Getting away from this is tricky right now. • Apple also requires everyone accept the Terms of Service. This can also be tricky. • Meraki’s VPP user management component requires that users accept Apple’s Terms of Service as well • A VPP account cannot be an App store account. • Best practice for app store accounts and how they are deployed and managed does depend on the implementation of the devices at the schools. No one-size-fits-all approach is recommended.