Forum Discussion
VPP Apps Not Installing via Intune – Error 0x87D127DB Despite Valid Configuration
Hi everyone,
We’re currently using Microsoft Intune in combination with Apple Business Manager (ABM) to provision iPhones in our organization. Our setup has worked reliably until recently: in April/May, we successfully deployed 50 iPhones without any issues.
However, for the past 10 days, we’ve encountered a persistent issue: VPP apps are no longer installing automatically on newly enrolled devices.
✅ What’s working:
- Device registration in ABM
- Syncing devices from ABM to Intune
- Device renaming, resetting, and syncing via Intune
- Uninstall Apps using uninstall group of the deployment configuration on existing devices)
- Disabling devices in ABM and syncing changes to Intune
- Purchasing new apps in ABM and syncing them to Intune
- App license counts (total, used, available) are correctly shown in Intune
❌ What’s not working:
- VPP apps are not being installed. Only one or two icons appear on the home screen with a cloud symbol. Tapping them prompts a message that the app must be downloaded from the App Store.
- Intune consistently shows the following error:
“App installation failed. 0x87D127DB (Unknown)” - Occasionally, a message appears stating that VPP licenses could not be found, although all apps have sufficient licenses and Intune reflects this correctly.
Troubleshooting steps taken:
- Devices have been reset multiple times
- New apps were purchased and assigned with a minimal configuration (one required group)
- All certificates (MDM push, VPP token, enrollment token, Apple SCIM token) are valid
- Apple Business Support confirms their services are operational
- Microsoft Support has not provided a resolution and suspects the issue lies with Apple
- Apple, in turn, refers us back to Microsoft
At this point, we’re stuck between both vendors and are hoping someone in the community has encountered this issue or found a workaround.
Has anyone else experienced this behavior or found a solution for the 0x87D127DB error with VPP apps in Intune?
Thanks in advance for your help!
Hi everyone,
I wanted to share my recent experience that might be helpful to others dealing with firewall configurations and Apple service integrations.
At the request of management, I implemented a policy to block streaming services via our firewall. To do this efficiently, I used the vendor’s built-in web filtering categories, as manually blocking every streaming provider is practically unmanageable.
Unfortunately, I lost sight of this change over time. What I didn’t realize—and what isn’t clearly documented by the vendor—is that the selected category also blocks essential Apple services. Specifically, it interferes with the communication between Apple Business Manager (ABM) and Microsoft Intune. This behavior is reproducible and was the root cause of the issues we encountered.
To be clear: The issue was not caused by Apple Business Manager or Intune, but solely by the firewall configuration.
I’m now working on a more targeted approach to block streaming content without disrupting ABM–Intune connectivity.
Best regards,
MSThomK
7 Replies
Hi everyone,
I wanted to share my recent experience that might be helpful to others dealing with firewall configurations and Apple service integrations.
At the request of management, I implemented a policy to block streaming services via our firewall. To do this efficiently, I used the vendor’s built-in web filtering categories, as manually blocking every streaming provider is practically unmanageable.
Unfortunately, I lost sight of this change over time. What I didn’t realize—and what isn’t clearly documented by the vendor—is that the selected category also blocks essential Apple services. Specifically, it interferes with the communication between Apple Business Manager (ABM) and Microsoft Intune. This behavior is reproducible and was the root cause of the issues we encountered.
To be clear: The issue was not caused by Apple Business Manager or Intune, but solely by the firewall configuration.
I’m now working on a more targeted approach to block streaming content without disrupting ABM–Intune connectivity.
Best regards,
MSThomKHi MSThomK ,
I have exactly the same problem as which only started yesterday and so far nothing that I remove and re-add appears to resolve the issue. The same error keeps appearing regarding no VPP Licence despite there being lots left.
Going to try and log a ticket with Microsoft, but I suspect will get the same response as you, the problem lies with Apple.
Let me know if you resolve the issue and likewise I will if I find a solution.
Thanks,
James
Hi J-Wr1ght
Unfortunately, there is still no solution to this issue. Apple Support recommended the following workaround until the problem is resolved:
You can install VPP apps using Apple Configurator, bypassing Intune. I tried this approach. I was able to see the device in Apple Configurator, select one of our VPP apps, and initiate the installation. The app was downloaded, but the installation failed with an error message.
I have also reported this to the Microsoft support
How are things looking on your end?Hi MSThomK
Strangely for me it has resolved itself in the last couple of days. I didn't get chance to test due to exam setup but now it is working. I submitted a service outage but Microsoft said there wasn't a problem. I then submitted a support ticket (it started working at this point) and the engineer wasn't sure what would have caused the issue and why it would do this. It all points to issues between two competing services where once makes a change and the other has to react.
Will keep an eye on it and see what happens.
Thanks,
James
Thank you very much for your response.
I was not aware of any changes to the Apple v2 VPP API. Do you happen to have more detailed information on this? Microsoft Support has not mentioned anything in that regard so far.
Just to clarify: I renewed all necessary certificates and tokens on May 14, 2025, and re-uploaded the VPP token again on May 23, 2025. Unfortunately, the issue still persists, even though all other components appear to be functioning correctly.
Current symptoms:
- App icons are no longer being placed on the home screen (at least not during my latest tests).
- Apps made available via the Company Portal are not installing on already enrolled devices, which is currently causing significant disruption.
- App updates also seem to fail silently.
- Occasionally, I receive error code 0x87D13B95 ("No VPP license found for the app"). After some time, this is replaced by 0x87D127DB ("Unknown").
I have purchased new apps via Apple Business Manager, successfully synced them to Intune, and assigned them to test devices — but unfortunately, the apps are not being installed.
As I urgently need to prepare devices for new employees, my only remaining option seems to be setting them up using personal Apple IDs. I plan to test this today in the hope that at least the app installations will succeed. However, this is merely a temporary workaround to ensure basic functionality (e.g., teams phone calls).
At this point, I’m honestly at a loss and would greatly appreciate any insights or suggestions.
Best regards,
MSThomKHiMSThomK
Look like your issue started around the time of Microsoft moving to the Apple v2 VPP API, v2 is a new token with a different format.I didn’t see renewing your VPP token in the list of troubleshooting steps, please try this and let me know how you get on.
See “Renewing VPP tokens or Apple Business Manager location token” under: https://learn.microsoft.com/en-us/intune/intune-service/apps/vpp-apps-ios
