The Apple Apps (VPP) token enables Addigy to communicate with Apple for App Store deployments. It must be renewed yearly and can become invalid if an admin resets their Apple Business/School Manager password. This article will walk you through the steps to renew an expired token.
Finding an Expired or Invalid Token
A token's expiration date can be found by navigating to Policy > Integrations & Settings > Apple Apps:
After a token has expired, you may encounter the following error when clicking the Scan Now button:
Bad status response[400]: "Error syncing token"
This error indicates that the token has expired, syncing has been revoked, and renewal is required.
When a token becomes disabled, it is logged as a System Event (Dashboards > Events). Filter by Receiver Type = vpp-token to identify an expired/disabled token:
401 - error while retrieving token assets || 9625 - The server has revoked the sToken.
This error indicates that the token is no longer valid or has been explicitly revoked by the server, which will require a renewal of said token.
Renewing an Expired or Invalid Token
To renew an expired Apple Apps token, log in to business.apple.com or school.apple.com with an account that has Content Manager or higher permissions. Without proper permissions, the renewal options won’t appear.
- After logging in, click your name (bottom left) > Preferences > Payments and Billing.
-
Under Server Tokens, select the token you would like to renew, and download the
.vpptokenfile.
Head back over to your Addigy environment and select Renew.
Upload the token file by dragging it in or selecting it via the file browser, then click Save.
After uploading the token, confirm the details—ID number, name, Apple ID, and organization—in the confirmation window. After verifying all information is correct, click Save.
After renewing the token, the system will refresh all associated licenses without removing any apps from devices. Once the scan completes, the last successful sync date and time will be displayed.
Note: A token can only be renewed if its identifier matches the expired token's. If you do not have access to the expired token, it will be necessary to create a new one and transfer app licenses to the new token. See Configuring Apple Apps (Apps & Books) for more information about creating a new .vpp token.