vpp redownload call timed out <mdmclienterror:72>

[mjames]

Hi,

I am seeing a lot of our systems having the "vpp redownload call timed out <mdmclienterror:72>" error when cliets try to install VPP apps via Self Service on MacOS (most clients are 10.14.2).

I have tried clearing the failed commands, reconning, re-enrolling etc with no luck.

I am hesitant to revoke all apps as I have seen suggested because I am concerned about the number of people who will experience iTunes notifications about apps not being assigned (the staff at this school are fragile...).

Any advice would be appreciated.

[SureExclamation]

I opened a ticket with support on this just the other day and they sent me a list which is to renew VPP token and check network for anything that may be blocking communication with Apple (I doubt it's the latter). I am hopeful to work on this today.

https://www.jamf.com/jamf-nation/articles/512/knowledge-base-video-renewing-a-managed-distribution-token-with-jamf-pro

[ajfunk]

@markl - I tried the steps that were recommended to you, but I still receive the error 72. Hope this works for you, though!

[Heavy_D]

@markl If you read this entire post which I know is a-lot, this is part of long list of things that may or may not work and believe me theres a-lot of things to try it's all Intermittent

[jared_f]

I guess we aren't the only ones running into this. Question: if we create packages for Xcode, etc. with composer and push that way, can they be silently upgraded? That is the main reason we are switching any apps in the App Store to managed.

[krismonier]

This is absolute insanity. Every time I wipe a machine I have to jump through 20 hoops to get it to download a simple app. I'm going insane.

[donmontalvo]

Not sure who's watching the kids over at Apple, its not like their APNS changes are happening now...

https://developer.apple.com/news/?id=11042019a&1572897862

[GabeShack]

Just filed for this using the @donmontalvo listed AppleCare ticket and Jamf numbers. My SE from apple said Engineering is working on a fix and they are quite aware of the issue.

Gabe Shackney
Princeton Public Schools

[jamisondonato]

This is affecting us nearly 90% of the time. Cancelling the failed commands, sending blank push, run sudo jamf recon MIGHT fix it, but usually fails multiple times before it completes. This is will all apps, even something small like Trello. Extremely frustrating when attempting to deploy ~150 laptops. The hands off benefit is completely lost with this issue. It requires us to babysit each and every unit and repeat the same steps multiple times to hopefully get it to succeed. This seems to be a repeating issue and I've read that its both Apple and JAMF's problem since earlier this year. We are new semi-new to JAMF but this is really helping me prove its cost to upper management. Please prioritize this so we can use the product as intended and sold to us.

[Cayde-6]

So I don’t believe this is an Jamf issue, Jamf has sent the MDM command to APNS. That is the end of Jamf‘s responsibility so it becomes an Apple problem

[dpodgors]

I don't know if this is just coincidence, but I just added a couple more free licenses to one of the apps in VPP and now all the VPP apps are working again.

OOPS spoke too soon...

[donmontalvo]

If Apple doesn't fix this very soon, we're going to make it rain on them.

Yes, I'm pointing them to this thread.

[buhruce]

I'm dealing with the same issue. Our firewall is not blocking APNS traffic. Reached out to my rep and referenced 100893229861.

Very happy we didnt switch from MAU to MAS.

[LaMantia]

On-prem JSS 10.16.1

I think I just had a breakthrough! I've had the "vpp redownload call timed out <mdmclienterror:72>" on macOS devices for months now across various versions of the JSS.

Our master is in the DMZ. The Console is always off. “Computer Access only”

Turning it on to “Full Access” has resolved this for me on the first few tests today. Including a macOS device that was failing over and over for weeks no matter what I did.

I’ve only tested with free MS Office via VPP. So far so good.

Can anyone else confirm this condition?

[hhorn]

Sorry to say this, but we are still seeing this issue...

[TristanH]

hhhhmmmm
No. It is not the solution for us.

Hello @hhorn,
which permissions need your API-User? Your Script works fine, but I have trouble with blank push to computers.

[ChrisRybin]

Any updates on this? Still running into this issue.

Thank you

[ajfunk]

The issue is still happening at my org. Again - iOS VPP apps seem to be unaffected (for me, at least).

[Heavy_D]

I have stopped using Self Service for now as it's a complete waste of my time until it's fixed. I have switched back to AutoPkgr and rolling the Applications manually. This SUCKS! but until it's fixed can't afford to come back to a users machine and run the same commands x100 till it works.

[arnokenis]

Having just made the switch from deploystudio (yeah, a little late to the party) to fully deploy computers with DEP and VPP, this really is a setback.

Going back to packaging app store apps feels like going backwards.

Also seeing how long this issue has been around, that's a bit of a disappointment and unacceptable.

[admindaly]

Just adding my org to the list. Started seeing this today. Have had enough trouble sorting Xcode out and now I can't get it to install at all :(

[Danko]

If I'm honest.. I started seeing this issue in our org after setting up an enrollment package for our prestage enrollment. Could be a kind of coincidence?

[Pedz]

+1 on this :(

[rblaas]

+1 here... But we mostly see it when we enroll a mac..

[jbosma]

I do not have any prestage enrollments and I continue to see this. The only way around it that I've found it to try to send the blank push before it fails and then the apps will install. If I'm not quite quick enough to get the push off, it will fail until I've sent the blank push.

[Ajayv]

we are still seeing this issue...

[KyleEricson]

Apple updated my ticket, not very helpful.

We are hoping to release a fix for this issue before the end of the year, however we cannot yet confirm a release date. We’re doing everything possible to get a fix to our customers asap and I’ll notify you immediately once a fix is available to test.
Regards,

AppleCare Enterprise Services
Technical Support Engineer

[c_kay]

I’m seeing this issue with macOS 10.15.1 & macOS 10.14.6. Hope they fix it for both.

[joepopson]

Same here. Seeing this issue on macOS 10.14.6 machines.

Hope a fix is soon.

[KyleEricson]

Maybe we have to pay for the "Pro" version of VPP from Apple to get this to work :).

[donmontalvo]

@kerickson is that the "New And Improved" version? :)

[KyleEricson]

@donmontalvo Yeah yeah “it’s the most advance VPP Apple has ever created” - Apple every year.

[dtmille2]

Affecting my machines as well. Called Jamf support. They said it is this:

PI-007435 (Third-Party Issue) Mac App Store apps fail to install if the App Store cannot be reached by the computer within 30 seconds of sending the InstallApplication command. This results in an MDMClientError: 72. Workaround: Verify that your network is not preventing computers from reaching the App Store. Verify that your VPP token is not already in use by another MDM provider or another Jamf Pro instance. If the problem persists, contact Jamf Support and reference PI-007435.

No solution at the moment. Am I back to using Apple IDs?

[mpout]

From reading through this thread I think I'm getting that this is actually an Apple VPP issue not necessarily a JAMF issue (correct me if I'm wrong) So is there a case open with Apple that we can all throw our frustration at?! I can't believe this is still an issue!

[donmontalvo]

@mpout yeap, Jamf has a ticket with Apple, scroll up to an earlier post that includes our tic and Jamf's tic.

[joepopson]

Anyone have a solution for this? We use VPP deployment for macOS App Store Apps such as "Slack/ etc"

The apps deploy fine, but don't update at all.
The only solution now is to completely delete the app, check into inventory, and redeploy the latest App via Self Service or set to install automatically.

Any help is greatly appreciated.
Thanks everyone.

[damienbarrett]

Was seeing this about two weeks ago on a few new-enrolled machines, found this thread, read it, and then got busy doing something else. Came back a bit later and the Apps were installing successfully all of a sudden. Shrug. Now, I'm seeing it happen again to a newly-enrolled Mac. I can't seem to determine what the difference is. Timing? Communication to the JSS? Time or delay after enrollment? It's very weird.

[joepopson]

I have the Apps deploy with no problem at all.
It's the Apps that already HAVE been deployed that don't get updated until they are removed and completely re-pushed.

And yes the Apps are fully quit, on good wifi, users restarted their Macs, etc

[benducklow]

@joepopson I think the issue are are referencing is this PI:

PI-006120 - Jamf Pro fails to update Mac App Store apps that are made available in Self Service and configured to automatically update.

Its been opened for awhile now and is a reason we have to create uninstall policies for any Mac App Store/VPP applications.

[joepopson]

Thanks for your reply @benducklow

Will look into this to implement, although this is less than ideal for a solution that should "just work".

Thanks again!

[KyleEricson]

I think I may have to move back to the good ole PKG for office deployments :( . Apple you make me sad.