Wednesday, October 13, 2021

Assigning Apple Volume Purchasing licenses to Bring Your Own Devices

My school has enjoyed the myriad of benefits from Bring Your Own Device for a number of years now. Students in Grades 2-4 are expected to include an iPad as part of their school supplies. Over the years, we've experienced the longitudinal wave of app acquisition: from excitement and experimentation with dozens of free apps in the early years to paid apps and, recently, back to free apps.

In the beginning with a handful of iPad 2s (2011; over a decade ago!) our teachers were excited to try out such exciting digital opportunities as Calculator, Screen Ruler, or many other free apps that barely made it out of the substitution tier in Puentedura's SAMR model. Free was great for classrooms on a budget and we didn't need to worry about licensing since free apps could be transferred to different iPads using master backup images in iTunes. Shortcuts included using encrypted backups to save passwords and wallpapers, and 10-port USB hubs for simultaneous re-imaging

App development reached a crescendo with the refinement of the iTunes App Store. License agreements were refined and the Volume Purchase Program (VPP) was created to help with the influx of educators wanting paid versions to avoid advertisements or to unlock premium features. VPP in particular was a boon for me as it offered 50% discounts for 20+ quantity purchases and offered an easy distribution method for our BYOD model: redemption codes.

Redemption codes allowed me to transfer licenses of paid apps directly to our students. Ownership and updating remained with families and was completely hands-off from the school. We didn't need any device information, AppleIDs or any other identifying information. Redeeming a code downloaded the exact version of the app we wanted and eliminated any confusion that could happen with providing gift cards or having families deal with inputting payment information. We were also able to track which student received which code and stay on top of compliance.

A little too app happy?


In recent years, we've started to move away from paid apps back to free apps. But instead of ad-sponsored or freemium apps we're back to relying on a small number of legacy or enterprise apps: Keynote, iMovie, Google Docs and Slides and a number of free-to-download apps that use subscription models. One notable exception is Book Creator and their move towards a teacher-centered subscription model with unlimited students. Book Creator has removed the academic discount of 50% for their app (currently $3.99 CAD) and heavily promotes their web-based subscription model.

Last year we migrated to Apple School Manager (ASM) to ensure continuity of purchasing and managing our volume licenses. ASM works well with Meraki MDM which I use to manage our iPadOS devices. Last year also marked Apple's deprecation of redemption codes. This was a gut punch to our model of hands-off BYOD and required some thought to maintain our level of support.

We could use Apple Business Manager instead which still allows generation of redemption codes. Unfortunately ABM does not offer academic discount of 50% on 20+ quantities. This would add up to hundreds of dollars for us yearly. Instead, I am using ASM to purchase paid apps along with any applicable discount. These licenses sync with Meraki which allow for easy distribution to school devices. Family BYOD never engage with Meraki though, and I did not want to go down the path of registering of external devices with our MDM for privacy, security and logistical issues.

What is working well so far is using Apple Configurator to assign licenses to family devices based on device IDs and serial numbers. No personal or other identifying information is shared. Configurator also allows me to transfer the apps instantly without the need for families to log into an AppleID or initiate a download. Unfortunately, this requires a physical connection from the iPad to Configurator. This involved me visiting groups of students and plugging their devices in. Students needed to enter their passcode, after which I made sure to download the unlock token.

VPP apps in Configurator

It took me while to sort out the ASM and VPP accounts and syncing them with Configurator. Sometimes I would log in and could view non-migrated licenses, and other times I was able to view VPP licenses. This article was helpful but I ended up not needing to create another location in ASM. I highly recommend saving a copy of the .ipa file for each app you want to transfer. Configurator, for some reason, removes the .ipa after each transfer which means it downloads a fresh copy every time you plug a new iPad in. This adds minutes to each transfer. For me, the .ipa gets saved in:

~/Library/Group Containers/K36BKF7T3D.group.com.apple.configurator/Library/Caches/Assets/TemporaryItems/MobileApps/

You must copy the file before Configurator completes the transfer because as I mentioned, it'll get removed immediately after the transfer completes.

To transfer the app and assign the license plug in the iPad and select +Add App. Choose the apps and cancel the operation after Configurator assign the licenses. Now select +Add App again and choose the .ipa files from your computer. If the app does not open on the iPad when tapped it probably means the licenses weren't assigned correctly in Configurator and you'll need to repeat the process.

There are some unknowns about this process. I don't know what happens when an app needs updating, or if the apps gets removed by accident. I assume we'll need to plug everything back in to Configurator. I also wonder what happens if we revoke licenses; does the app stop functioning or is it similar to download an app then logging out of the AppleID? The biggest question would actually be: what's changing next?!