Vpp platform

[jenjac]

Connects the VPP package with Platform and starts with endpoints to get licenses and service config information from stored VPP Tokens.

[jenjac]

Just added mdmctl commands to interact with a VPP token

[jenjac]

This Pull Request now includes everything that you should need to add a single VPP token, and to view apps and licenses within that token, both through api and through mdmctl get vpp-apps/vpp-licenses.

It can also handle VPP Device Assignment using the api, and mdmctl apply/remove vpp-apps.

[gavinelder]

Gave this a really quick pass, some small formatting comments.

PS like the use of pkg/errors

[gavinelder]

AdamIDStr ?

[gavinelder]

nit, seems that a number of the vars swap between Id and ID I believe it should be consistently applied as ID as per https://github.com/golang/go/wiki/CodeReviewComments#initialisms

[brettfire]

Hi all, what happened to this PR? What is the current status? VPP support would be great, and it seems like most or all of the code is already written and waiting to be merged. It's a damn shame it's sitting here rotting.

[brevilo]

Same here. After Apple dropped its own free MDM solution (Server.app) we're looking for an alternative. VPP/ABM is the only part we actually use (just license management, without any DEP). So seeing this merged would solve our problems. What's left/needed to get this PR merged?

[krmzbbr]

I was able to install VPP custom app using these steps:

You need to assign licenses to serial numbers using POST request to the VPP management endpoint (with Bearer token you will get from Apple School/Business Manager/Preferences/Payments And Billing/Server Tokens). "adamId" is the app store id of your application. More info here Associate Assets

POST
https://vpp.itunes.apple.com/mdm/v2/assets/associate
Content-Type: 'application/json'
Authorization: 'Bearer Token'
{
"assets": [
        {
            "adamId": "99999999",
            "pricingParam": "STDQ"
        }       
    ],    
    "serialNumbers": [
        "DMQZXXXXXXXX",
    ]
}

This will let you install VPP apps but I had to use a custom script instead of install_appstore_application because it requires you to submit itunes_store_id (as number) instead of an identifier and add the option purchase_method=1.

If you use an identifier, you will get a "Could not retrieve license for the app" from MDM - I have wasted so many hours until I figured this out.

#!/bin/bash 
source $MICROMDM_ENV_PATH
endpoint="v1/commands"
jq -n \
  --arg request_type "InstallApplication" \
  --arg udid "$1" \
  --arg itunes_store_id $2 \
  '.udid = $udid
  |.request_type = $request_type
  |.itunes_store_id = ($itunes_store_id|tonumber)
  |.options = {"purchase_method": 1}
  '|\
  curl $CURL_OPTS \
    -H "Content-Type: application/json" \
    -K <(cat <<< "-u micromdm:$API_TOKEN") "$SERVER_URL/$endpoint" -d@-

[GregOriol]

I can confirm that the process described by @krmzbbr works

[RavishPunon]

Its Installing application but users are able to delete the application, How I can restrict app removal.

[ZhouLixuanwu]

Its Installing application but users are able to delete the application, How I can restrict app removal.

You may check the Removable under object InstallApplicationCommand.Command.
For your convenience, this is here: https://developer.apple.com/documentation/devicemanagement/managedapplicationattributesresponse/applicationattributesitem/attributes-data.dictionary