Hello - I have a few users who have been unable to accept the VPP enrollment invitations. Right now I have two users, a separate invitation and purchasing account for each. When they try to accept the VPP invitation, they are presented with the Terms screen, and tap "Accept". Then it only says "Your session has timed out. Try again."
I've tried all the solutions I found on the Apple support forums. On the iPads I tried moving the date ahead, moving the date back, signing out/in to iTunes and iCloud, and tapping "Send by email" on the terms screen (which results in "unable to send email"). Then I sent the invitation via email and tried to redeem it on the computer. I signed out of iTunes and clicked the link in the email and.... same error in the iTunes desktop app.) During this same time period I have had other users be able to accept the VPP invitation.
Edit: the account CAN download apps directly from the App Store without issue. It's only erroring on the VPP invitation Terms.
We have had similar issues since Apple's services went down last week. It seems to be only kids that were created last week according to the reports from my guys. I don't know that they have had anyone else new since then.
We were able to hook them up to a mifi and get them to enroll, our ISP is Brighthouse and the mifi provider is AT&T.
I was thinking about grabbing one that we have been using for testing home to see if it activates as I have the same ISP that we use at work.
We have ruled out the firewall and our web filter, iBoss, by adding the proxy manually to the iPad as we are still on 9.62. Anyone else on a similar version?
@sparedes I would talk to your Apple rep if you continue to have this issue.
Our Apple SE and our JAMF rep both had multiple customers with this problem and, as of yesterday morning, everyone who reported it say it is back to working. Our VPP is back to normal now. It's possible it could take a restart of your JSS, but it didn't for us.
Same issue here and have been trying to sort the issue with the aid of Jamf, Apple and our local supplier.
VPP token has been updated/refreshed
Self service invites fail and time out
Email invites open itunes (added to firewall, running as administrator) but time out after accepting terms and conditions.
itunes diagnostics and the apple push diagnostics tools all pass without any errors.
I have been able to get 35 out of 300 working but there is no guarenteed method, all of a sudden Ill be able to register 10-15 devices ina short window then they'll all time out again.
One thing I have noticed:- When logging into itunes with the correct username and password it always fails the first time no matter how careful I am with typing that password in. The second attempt succeeds and passes me through to the terms and conditions.
On all the attempts that succeeded the authentication worked first time.
Quick update to my above post.
I found that internet filters were causing the issue. This didnt make sense since it would accept 5-10 invitations every 24 hrs but then suddenly block them.
I investigated traffic coming from the IP of one of the ipads rather than from the user is was connected as. There are several attempts to connect to the apple servers as soon as the device boots up.
NTP (time protocol) - all this traffic gets denied by out filters due to a NTP vulnerability. We changed local DNS records to point NTP traffic to local servers (4 records) but the devices ignore this and connect via IP to these servers so they remained denied.
icloud-base and itunes-base IPs
Server connections here were getting blocked. Im assuming this is for device registration with apple. Once we passed all traffic through the filter for these 2 destinations the VPP invites started to work again with no time outs. (sometimes this required a hard reset of the device and clear all queues in Casper)
We now have 300+ devices working and have accepted invitations.
Few other things to be wary of:
Once the VPP invite is accepted there can be a delay before the assigned apps show up in "purchased" up to 3-4 hrs although this only occurred in about 10% of devices.
Some invites need to be resent for it to show up
Self Service invites required Self Service to be updated to the latest version
just some info on what we've seen here experiencing the timeout upon accepting the VPP invitation..
We have opened a ticket w/ Apple on this issue. I have sent them logs from an iPad/Apple ID that is timing out on acceptance. They couldn't determine which end was causing the issue. I'm pretty confident that
our network is allowing all of the required traffic it should be for this process to work. It worked when we started our 1:1 iPad deployment back in Oct 2014, it failed sometime in March. As noted in this thread it worked for a short time after April 6th and now it is back to failing again.
In the talks I've had w/ Apple about this, it seems that engineering is aware of this but are unable to determine the root cause of the issue. They have requested Apple ID's to setup logging against those accounts on their end to see if they can capture any new data that might lead to a fix for this issue.
I would suggest that you open a ticket w/ Apple and see if you can get something like this going from your environment as well. The more data they can collect, the quicker the resolution comes hopefully.
Oddly enough soon after I posted about this on 5/6 it started working. All I did was a reboot based on others in the thread mentioning it. I hadn't rebooted the JSS server in some time so I did just for grins, and for some reason students were able to accept and authenticate their VPP tokens and to date it is still functioning as it should. We've not heard anything back from Apple on this yet, but when I do I will pass that along. I was also contacted by our Apple SE this week informing me that he heard it was working again.
For the moment that's what I got on it...