How to Re-sign a ipa file with our apple account and install on physical device for testing , as apps like BrowserStack does, Thanks.

Hi, I would like to add custom app inside ABM, but i can only upload pkg. which is not enough for what i need. Installation has some flags for install, like: #sudo curl -so wazuh-agent.pkg https://packages.wazuh.com/4.x/macos/wazuh-agent-4.5.3-1.arm64.pkg && sudo echo "WAZUH_MANAGER='wazuh.domain.com'" > /tmp/wazuh_envs && installer -pkg ./wazuh-agent.pkg -target / #sudo /Library/Ossec/bin/wazuh-control start How to make this work? thank you

Are the codes generated by the business portal always limited to the country in which the DUMS code is registered? I have clients who have only one office and therefore can request only one DUMS code but have employees in various countries. How can I generate codes, from the business portal, valid for all countries? Has it become possible to do this? What alternatives can I evaluate for distributing a private app?

We are creating our own server for MDM, we followed apple suggested approach with following link [https://it-training.apple.com/tutorials/deployment/dm055] After uploading .pem file in ABM portal, new server token is generating but my question is where we need keep that server token(.P7M) in our servers...is there any specific path we have...if we gone through apple documents they are suggesting to follow vendor documentation but in my case we did't take any third party server's...so we don't have any vendor document. Can you please help me to achieve this scenario.

Hi everyone, We have developed an application for a large company and are distributing it using a business account. We have codes that we give to users. The problem is that we released an update for the same app, but users aren't receiving the update automatically as it should be. It's not working. So, we are giving new codes to users as if they are installing a fresh version. We have contacted Apple, but we haven't received any answers (the suppport its a nightmare mostly people just saying they dont have acess to our ticket case) Has anyone else experienced this problem? And does anyone have a solution for this? Thanks.

I opened my account as a personal account. Then I decided to switch to the company account without publishing anything. I sent all the application documents. He also stated that he wanted to talk by phone. However, the problem is that we do not support your language during the meeting, so you inform yourself to hire a translator. Ok I did this too! While my translator is talking to Apple customer service, he says we need to talk to the account owner again, okay but he doesn't know my language to talk to me, and he wants to talk to me? So how will this happen? I paid $200 to my translator..

Hi, I'm trying to confirm if there is an API that can be used to interrogate ABM for device info? It holds our enterprise devices and so want to regularly extract a list of all devices along with associated information, and import these into a corporate system. It's unclear from the documentation if this can be done. This is the closest I can find but implies it must be done from within another (developed) app...? TIA.

When we specified a "Unlisted app" by InstallApplication(MDM command), the response state is NeedsRedemption. This is the request and response. ■Request <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"[]> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>dd3fe1a1-a1a7-4987-8201-447e815bd6f9</string> <key>Command</key> <dict> <key>RequestType</key> <string>InstallApplication</string> <key>Attributes</key> <dict> <key>Removable</key> <false /> </dict> <key>Identifier</key> <string>******</string> <key>ChangeManagementState</key> <string>Managed</string> <key>InstallAsManaged</key> <true /> <key>ManagementFlags</key> <integer>4</integer> </dict> </dict> </plist> ■Response <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"[]> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>dd3fe1a1-a1a7-4987-8201-447e815bd6f9</string> <key>Identifier</key> <string>******</string> <key>State</key> <string>NeedsRedemption</string> <key>Status</key> <string>Acknowledged</string> <key>UDID</key> <string>00008110-001E74C814EA401E</string> </dict> </plist> I think non-VPP apps don't need redemption codes. Is there a way to install "Unlisted app" without using a redemption code?

We currently have a Developer Account registered as an organisation and publish our app to App Store. One of our customers want our App to be part of their MDM, so that they can distribute it to their employees without App Store. Questions: What are the steps to make our App available to Client's MDM solutions like Microsoft Intune ? Will this be achieved by having Apple Developer Program (Account) or any other steps are involved ? Will the solution be applicable to multiple Clients using their own different MDM solutions ?

When I execute the InstalledApplicationList(MDM command), A part of the response is Incorrect. TikTokLite is not a managed app according to the later methods. This is the request and response. ■Request <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"[]> <plist version="1.0"> <dict> <key>Command</key> <dict> <key>ManagedAppsOnly</key> <true /> <key>RequestType</key> <string>InstalledApplicationList</string> </dict> <key>CommandUUID</key> <string>8dffac1f-55df-40b1-8c69-414dfb8aedac</string> </dict> </plist> ■Response <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"[]> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>8dffac1f-55df-40b1-8c69-414dfb8aedac</string> <key>InstalledApplicationList</key> <array> <dict> <key>AdHocCodeSigned</key> <false /> <key>AppStoreVendable</key> <true /> <key>BetaApp</key> <false /> <key>BundleSize</key> <integer>12525568</integer> <key>DeviceBasedVPP</key> <false /> <key>DynamicSize</key> <integer>12288</integer> <key>ExternalVersionIdentifier</key> <integer>858324287</integer> <key>HasUpdateAvailable</key> <false /> <key>Identifier</key> <string>net.skyseaclientview.mdm</string> <key>Installing</key> <false /> <key>IsAppClip</key> <false /> <key>IsValidated</key> <true /> <key>Name</key> <string>SKYSEA MDM</string> <key>ShortVersion</key> <string>1.1.182200</string> <key>Version</key> <string>36</string> </dict> <dict> <key>AdHocCodeSigned</key> <false /> <key>AppStoreVendable</key> <true /> <key>BetaApp</key> <false /> <key>BundleSize</key> <integer>266919936</integer> <key>DeviceBasedVPP</key> <false /> <key>DynamicSize</key> <integer>15335424</integer> <key>ExternalVersionIdentifier</key> <integer>858769767</integer> <key>HasUpdateAvailable</key> <false /> <key>Identifier</key> <string>com.ss.iphone.ugc.tiktok.lite</string> <key>Installing</key> <false /> <key>IsAppClip</key> <false /> <key>IsValidated</key> <true /> <key>Name</key> <string>TikTokLite</string> <key>ShortVersion</key> <string>29.3.16</string> <key>Version</key> <string>2931603</string> </dict> </array> <key>Status</key> <string>Acknowledged</string> <key>UDID</key> <string>00008120-000C28DC0AB8C01E</string> </dict> </plist> ・TikTokLite does not appear in the "Mobile Device Management App" in the iPhone's Settings app. Is this right? If this is expected response, Is there a way to judge that the app is a managed app? This is the Device information. <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"[]> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>31317d47-355c-40cb-ad72-3bff6c57989b</string> <key>QueryResponses</key> <dict> <key>AvailableDeviceCapacity</key> <real>112.608231424</real> <key>BatteryLevel</key> <real>0.97999999999999998</real> <key>BluetoothMAC</key> <string>***</string> <key>BuildVersion</key> <string>20F66</string> <key>CellularTechnology</key> <integer>1</integer> <key>DataRoamingEnabled</key> <false /> <key>DeviceCapacity</key> <real>128</real> <key>DeviceName</key> <string>***</string> <key>EASDeviceIdentifier</key> <string>***</string> <key>IMEI</key> <string>***</string> <key>IsActivationLockEnabled</key> <true /> <key>IsCloudBackupEnabled</key> <true /> <key>IsDeviceLocatorServiceEnabled</key> <true /> <key>IsDoNotDisturbInEffect</key> <false /> <key>IsMDMLostModeEnabled</key> <false /> <key>IsRoaming</key> <false /> <key>IsSupervised</key> <false /> <key>Model</key> <string>MQ983J</string> <key>ModelName</key> <string>iPhone</string> <key>ModemFirmwareVersion</key> <string>1.70.02</string> <key>OSVersion</key> <string>16.5</string> <key>PersonalHotspotEnabled</key> <false /> <key>ProductName</key> <string>iPhone15,3</string> <key>SerialNumber</key> <string>***</string> <key>SubscriberMCC</key> <string></string> <key>SubscriberMNC</key> <string></string> <key>UDID</key> <string>00008120-000C28DC0AB8C01E</string> <key>VoiceRoamingEnabled</key> <false /> <key>WiFiMAC</key> <string>***</string> <key>iTunesStoreAccountHash</key> <string>***</string> <key>iTunesStoreAccountIsActive</key> <true /> </dict> <key>Status</key> <string>Acknowledged</string> <key>UDID</key> <string>00008120-000C28DC0AB8C01E</string> </dict> </plist>

Problem Description: We are using manageVPPLicensesByAdamIdSrv API for assigning licenses for serial numbers. We get "Internal error - 9603" response for this API when assigning the API for valid adamID of an app. When using the same API other apps, this issue doesn't occur. AdamID: 720111835. The license is assigning properly for the same app in VPP License Management 2.0.0 + - Associate Assets API. Currently, we will not able to the new API. We overcame this issue by creating a new location token in the same organization and purchasing the same app in it and using it to assign the license to device for the same app which is successful. Kindly help us with this issue. Request: {"pricingParam":"STDQ","disassociateSerialNumbers":["SAMPLESERIAL"],"adamIdStr":"720111835","sToken":"********************","notifyDisassociation":false} Response: {"errorMessage":"Internal error.","errorNumber":9603,"status":-1}

Hello, I have a mobile game company, but the account where we uploaded the games was closed due to non-payment and we did not renew the domain of our mail. Is there any chance I can recover the account? If I recover it, will the games be deleted?

hi, my country (Indonesia) not available in list options at form signup. I guess it happen because my country not ready for this program. But i want to ask, is it available for another solution for manage my apple device at my university? thanks

App crashes or closes immediately when deployed as a VPP app via the Hexnode UEM portal. When the app is installed on a device not enrolled in Hexnode it works without any issues. It seems it works when deployed as a store app as well. App :  https://apps.apple.com/us/app/behaviorsoft/id1281297493

Cannot enroll to developer account: "Your apple id is not eligible to use this application at this time"

I'm from Vietnam, and I opened a business account for my company, but it's taken 3 months already, and it's still being processed :)) what's wrong with Apple? How a startup company can survive to waiting for an account to release the product? I don't know how long it takes, but it's too funny.

When pushing the “ScheduleOSUpdate” command to a Supervised MDM enrolled iPad device, command fails with the following error. Available OS Update response <key>AvailableOSUpdates</key> <array> <dict> <key>AllowsInstallLater</key> <false/> <key>Build</key> <string>20G75</string> <key>DownloadSize</key> <integer>4456890240</integer> <key>HumanReadableName</key> <string>iOS 16</string> <key>InstallSize</key> <integer>467664896</integer> <key>IsCritical</key> <false/> <key>ProductKey</key> <string>iOSUpdate20G75</string> <key>ProductName</key> <string>iOS</string> <key>RestartRequired</key> <true/> <key>Version</key> <string>16.6</string> </dict> </array> <key>CommandUUID</key> <string>AvailableOSUpdates</string> <key>Status</key> <string>Acknowledged</string> ScheduleOSUpdate command <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>ScheduleOSUpdate</string> <key>Command</key> <dict> <key>RequestType</key> <string>ScheduleOSUpdate</string> <key>Updates</key> <array> <dict> <key>ProductKey</key> <string>iOSUpdate20G75</string> <key>InstallAction</key> <string>Default</string> <key>ProductVersion</key> <string>16.6</string> </dict> </array> </dict> </dict> </plist> ScheduleOSUpdate command response <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>AttemptOSUpdate</string> <key>Status</key> <string>Acknowledged</string> <key>UDID</key> <string>****</string> <key>UpdateResults</key> <array> <dict> <key>ErrorChain</key> <array> <dict> <key>ErrorCode</key> <integer>12057</integer> <key>ErrorDomain</key> <string>MCMDMErrorDomain</string> <key>LocalizedDescription</key> <string>The update failed to download.</string> <key>USEnglishDescription</key> <string>The update failed to download.</string> </dict> <dict> <key>ErrorCode</key> <integer>2202</integer> <key>ErrorDomain</key> <string>DeviceManagement.error</string> <key>LocalizedDescription</key> <string>A download failed.</string> </dict> <dict> <key>ErrorCode</key> <integer>31</integer> <key>ErrorDomain</key> <string>com.apple.softwareupdateservices.errors</string> <key>LocalizedDescription</key> <string>The operation couldn’t be completed. (com.apple.softwareupdateservices.errors error 31.)</string> </dict> </array> <key>InstallAction</key> <string>Error</string> <key>ProductKey</key> <string>iOSUpdate20G75</string> <key>Status</key> <string>DownloadFailed</string> </dict> </array> </dict> </plist> As seen in the AvailableOSUpdate response, this device is applicable for iOS 16 update but unable to update manually as well as via MDM. The device has the following message showing up, is there any relation between the MDM command failing and this message. This iPad device is currently running "12.1.4" OS version Kindly confirm the reason for this message and the reason for this failure via MDM. And also confirm if there are any restrictions to update to certain major OS versions from lower OS versions, if so kindly share any documentation available regarding this. 

Dear All, I've just received an email from a user of my paid app who says he is no longer able to use it on his work phone. He works for a US government agency which I'll abbreviate to GOV below. Apparently they have started using Microsoft Intune for device management and as a result they need the following work-around: This app is not free to download, so it cannot be added to Intune app catalog through this tool. Reach out to the app developer and explain that GOV uses Apple Business Manager (ABM) and MDM for delivering managed apps to devices. Payment through ABM is not supported by GOV, so the app developer will need to provide a version of the app that's free to download but take payment outside of the Apple ID payment process. GOV's Custom App Store can be access by developers by advertising their app to Organization ID 12345678. I don't know much about MDM, ABM and Intune, and I would more or less consider this a scam except that I am confident that the person who has sent it really does work for this government agency and does use my app on his personal device. Is there any possibility that what they are asking for is legitimate? I suspect that the crucial part is: "Payment through ABM is not supported by GOV", i.e. fundamentally ABM/MDM/Intune can support paid apps, but the financial people at GOV AGENCY have chosen not to support that. Has anyone else experienced anything like this?

Able to access corporate mail attachment in unmanaged apps even after the restriction profile (“allowOpenFromManagedToUnmanaged”) has been installed in the device. Followed the following steps able to reproduce this issue Logged in with a personal mail account in iOS device in Mail app. Pushed an MDM profile with Email configuration to an iOS device. Now this account is in managed space Pushed a Restriction profile which has the key “allowOpenFromManagedToUnmanaged” to “false”. This restricts unmanaged apps to open attachments from managed space. Now when I send a email with an attachment to this managed mail account from personal account (Mail is sent from another device, not managed device) On receiving the email in managed mail account, Able to open the attachment in unmanaged apps. The restriction seems not to be working when the personal mail account is present in the mail app along with the corporate mail account and the attachment received in a corporate mail account is treated to be in unmanaged space. The restriction works fine when the personal mail account is removed from mail app. Kindly confirm whether this is the expected behaviour.

During the "What’s new in managing Apple devices" session, you provided information about the "Not Now" option during Mac ABM Enrollment. We observed that this option was functional when enrolling a Mac through ABM using the "profiles renew -type enrollment" command. However, when attempting to enroll a Mac by erasing it through ABM, we couldn't find the "Not Now" option. Could you please confirm whether the "Not Now" option is intended to be available when enrolling a Mac by erasing it through ABM? Your clarification on this matter would be greatly appreciated.