...
This article provides instructions on how to push application updates to devices for public and Apple's Volume Purchase Program (VPP) apps with Workspace ONE UEM. It also includes details on how to transition from public applications to VPP applications within the Workspace ONE UEM Console.
VPP Device-based applications: Workspace ONE UEM allows you to configure automatic updates or manually push updates to device-based VPP applications at the application level. Application Update Statuses A VPP application can have 4 update statuses: Not Applicable: This would be for applications that do not qualify this feature currently - User Based Licensed applications.Update Pushed: Status of an application when the updates have been pushed to devices. Note: This will also be the first status of applications on upgrade to AW 9.1 if all devices assigned to the application have the latest version already installed. Update Available: Status of an application when an update is available in the App StorePending Check: Status of an application when it’s waiting for the scheduled process to check if an update is available. An application would get into this state when it is enabled for Device-based licensing. For VPP applications, three methods are available for updating applications: From the Managed Devices page of the Workspace ONE UEM Console, you can issue a command to all devices. To issue the command to all devices, change the view filter to All. Select Install on Filtered to issue a command to all of these devices.For Console version 1908+, click the radio button on the left side of the app to view the Managed Devices Button on top. Remove the assignment from the app in the Console and save. Then, re-add the proper assignment and save again. Be aware, the app will be first removed and then added again. This is not recommended if the app is still in use.If the App Catalog is available to users, they can update the app at any time by choosing to re-download from the App Catalog. The App Catalog will always display the latest application version. Enable automatic updates for VPP apps: Within the Workspace ONE UEM Console, navigate to Apps & Books > Applications > Native > List View > Purchased. Select one or multiple applications using the check box to the left of the application name.Select Enable Auto Updates. Disable Automatic Updates: Disabling automatic updates and pushing them manually, allows you to control what application versions are on devices. Within the Workspace ONE UEM Console, navigate to Apps & Books > Applications > Native > List View > Purchased. Select one or multiple applications using the check box to the left of the application name.Select Disable Auto Updates. To manually push application updates: Navigate to Apps & Books > Applications > Native > List View > Purchased. Select one or multiple applications using the check box to the left of the application name.Select Update App to push app update to devices if there is an update available for the selected application(s). You can use Filters to find applications and perform tasks in bulk: Use the Auto Update filter or the Update Status filter to only sort applications applications according to those filters. Admins have the ability to select a single or multiple applications with which to enable/disable the Automatic Update feature. For applications where manual updates are preferred, this can be selected individually by clicking the Update button, which queues updates to devices that have the earlier version of the application installed.The default frequency for checking updates is 24 hours. If an update is available, Admins are notified via Console notifications.If the update is triggered manually from the console via the Update button or automatically updated by Workspace ONE, only devices that already have the application installed and are running an earlier version of the application installed will receive the updates.End users should see no prompt unless the application is actively running on the device in the foreground when the update is pushed.Automatic updates (if enabled) will be pushed as soon as an update is detected and will move to Update Pushed status. The device must then accept the command and process it successfully as iOS devices cannot process an application install when locked. Note: User-based VPP applications are tagged as Not Applicable. This type of VPP applications are not supported for this feature. The Workspace ONE UEM Console and App Catalog will always utilize the latest version of the app. Public applications: For public applications, three methods are available for updating applications: Within the Workspace ONE UEM Console, navigate to the App Details View > Devices List view, select the applicable devices and click on the Install button. Workspace ONE UEM will deliver a new InstallApplication command and device will reach out to app store to grab the latest version.If the App Catalog (Hub Catalog) is available to users, they can update the app at any time by choosing to re-install from the App Catalog. The App Catalog will always keep the latest version.Users can turn on the Auto-update for apps on their devices by navigating to Settings > iTunes & App Store. (To utilize this method, make sure no app restrictions are enabled: do not hide the app store). How to transition from Public applications to VPP applications First, add the same VPP application to the Workspace ONE UEM Console by navigating to Apps & Books > Purchased and clicking the Sync Assets button. Assign the VPP application to the same smart group(s) as the existing public application instance and click Save & Publish. As the overall assignment does not change, only devices that are assigned but do not have the app installed will get a new InstallApplication Command Delete the instance of the app that has been deployed as Public. As long as the same application is still assigned through the VPP instance, devices will not be affected and applications will not be re-installed. Save & Publish the VPP application again to initiate the license association if the device doesn’t have one.
For additional details on Workspace ONE and Apple's Volume Purchase Program, please view these resources: Common issues when integrating Workspace ONE with Apple's Volume Purchase Program (VPP)Understanding VPP Setup and Process Flows with Workspace ONEFAQs: Integrating Apple's Volume Purchase Program (VPP) with Workspace ONEEnable Device-Based VPP Assignment in Workspace ONE (50100966)VPP apps not syncing with Workspace ONE ConsoleHow to renew a VPP sToken for use with Workspace ONE (AirWatch)