[ipad] Meraki change of details in regards to certificates MDM / ADE / ASM / Push / VPP

[Koldov]

This is something I only ever really look at once a year (and always have to look at my notes)... I messed it up one year and nearly had to manually re-enrol every single iPad on site...

 

As EDUGEEK saved me last time, I'm looking here for answers to this as it was set-up many, many years ago and I don't really know how to fix it (or if it really is even a problem).

 

We have moved email supplier (O365 > Google) and I am beginning to trawl through the hundreds of different places I need to change accounts/contact details on...

 

Although I am in the process of changing the whole Apple thing over, one thing I do seem to remember is that you must use the original VPP account to issue the certificates and download/upload them to the MDM, but this account is in the form of the old email address and has all those old details in. If you use a different account to create the certificates I believe it renders the currently installed certificates void.

 

I can't seem to get it straight in my head how I can change this over to a new VPP account without having to manually re-enrol all the iPads...?

[Brimstone]

This is something I only ever really look at once a year (and always have to look at my notes)... I messed it up one year and nearly had to manually re-enrol every single iPad on site...

 

As EDUGEEK saved me last time, I'm looking here for answers to this as it was set-up many, many years ago and I don't really know how to fix it (or if it really is even a problem).

 

We have moved email supplier (O365 > Google) and I am beginning to trawl through the hundreds of different places I need to change accounts/contact details on...

 

Although I am in the process of changing the whole Apple thing over, one thing I do seem to remember is that you must use the original VPP account to issue the certificates and download/upload them to the MDM, but this account is in the form of the old email address and has all those old details in. If you use a different account to create the certificates I believe it renders the currently installed certificates void.

 

I can't seem to get it straight in my head how I can change this over to a new VPP account without having to manually re-enrol all the iPads...?

 

Migrating the Apple ID used to renew the APNS cert will require you to raise a support ticket with Apple, see below

 

https://support.apple.com/en-gb/HT208643

 

Moving the VPP account is more simple once you have done the invitation from the existing VPP user into Apple School Manager as this creates a new account in ASM. So as an admin all you need to do is edit the email address of that user account.

[Koldov]

Moving the VPP account is more simple once you have done the invitation from the existing VPP user into Apple School Manager as this creates a new account in ASM. So as an admin all you need to do is edit the email address of that user account.

 

So for this I need to create an Apple ID for my new GMail user account/email and invite that, how do I make sure I create a 'school' type Apple ID and not a personal one?

 

EDIT: I don't even know if that's a thing, but I know when I forgot which 'Apple ID' I used that one time, when I tried to log into VPP it said something along the lines of 'you can't use that Apple ID in VPP'... or something like that...

[Brimstone]

So for this I need to create an Apple ID for my new GMail user account/email and invite that, how do I make sure I create a 'school' type Apple ID and not a personal one?

 

EDIT: I don't even know if that's a thing, but I know when I forgot which 'Apple ID' I used that one time, when I tried to log into VPP it said something along the lines of 'you can't use that Apple ID in VPP'... or something like that...

When you invite the existing VPP user, you have to use their existing VPP email address, see below...

 

 

https://support.apple.com/en-gb/guide/apple-school-manager/axm45c7f2117/web

[Koldov]

Moving the VPP account is more simple once you have done the invitation from the existing VPP user into Apple School Manager as this creates a new account in ASM. So as an admin all you need to do is edit the email address of that user account.

 

When you invite the existing VPP user, you have to use their existing VPP email address

 

Thanks for trying to help.

 

Sorry I don't use Meraki or Apple products very often and this, like most of it just doesn't make any sense to me... it made sense when I thought I was going to create a new Apple ID (for the new account I want to be VPP) and then get the existing VPP/ASM account to do the invite for it.

 

But then the part about inviting the 'existing VPP user' by using their 'existing VPP email address' has blown my tiny mind...

 

Maybe put it this way...

 

[email protected] (this is the original VPP apple ID - it is the ASM admin & the VPP admin and is on all the certificates)

 

Create a new Apple ID

 

[email protected] (this will be the new VPP Apple ID)

 

So then in ASM '[email protected]' (original) invites '[email protected]' (new).

[Face-Man]

I think you are talking about manged apple id created in apple school manager and personal apple ids created manually on device (or vis webpage).

 

I would log into apple school manager using [email protected] and create new admin user [email protected] no need to invite personal apple id in.

 

previously I did have issues with managed apple id being used for push certificates but apple can be asked to do this.

 

out of interest is there a reason you are not just migrating [email protected] from microsoft to google for email to avoid this ?

[Koldov]

out of interest is there a reason you are not just migrating [email protected] from microsoft to google for email to avoid this ?

 

The email has been migrated, but I'm not sure what that changes?

 

All I want is for a new user to be on all the push/pull/VPP/MDM/ADE/DEP - certificates - portal accounts, etc. .

 

Yeah it's a bit confusing as I don't really know what I actually want/need for this to happen...