Cannot Validate a Managed In-House App

A managed in-house app cannot be validated for a mobile device, preventing the app from opening on that device.

Mobile device in-house apps that are provisioned by an Enterprise Developer Program certificate are required to periodically check in with Apple to verify the developer certificate is still valid. If the check isn't successful, the application will not be able to launch.

The following table explains the possible reasons why an app cannot be validated:

ReasonExplanation
Problem contacting Apple's validation servers

The device cannot contact Apple's servers to validate the app. Re-connect to a network to validate the app. After the device is connected to a network, the app will validate the next time it is opened or on the next scheduled validation. In addition, ensure the hostname of the Apple server used for Enterprise App validation (ppq.apple.com) is accessible. For more information about the Apple server hostname, see the following article from Apple's support website: https://support.apple.com/HT210060

You can also manually force all devices to check in with Apple to validate installed in-house apps by navigating to Settings > Mobile Device Management > App Maintenance > In-House Apps, and clicking the Force Validation button.

The provisioning profile for the app has expired

If the provisioning profile for the app has expired, the app cannot be validated until the profile is renewed using your Apple Developer account. The app must also be redistributed to devices.

For information on renewing an expired provisioning profile, see Apple's documentation at: https://help.apple.com/xcode/mac/current/#/devba5e7054d

After the profile is renewed, re-distribute the new version of the app to devices.

The device does not have a network connectionThere may be an environmental issue preventing devices from communicating with Jamf Pro and Apple's servers, such as the loss of a network connection. Ensure that the impacted mobile devices in your environment are functioning properly and the hostname of the Apple server used for Enterprise App validation (ppq.apple.com) is accessible. For more information about the Apple server hostname, see the following article from Apple's support website: https://support.apple.com/HT210060