Issue Description
Unable to add “Mac apps” from the App store in Jamf Pro instance. Once the app is added from the app catalog, it will spin infinitely. This will happens with any app you will try to add.
The spinning is due to a firewall rule blocking vpp.itunes.apple.com service when Jamf Pro reaches out. We can see this in the Jamf Pro Server logs and VPP logs:
[ERROR] [duledPool-0] [VppLicenseMonitor ] - Error running license monitor org.springframework.web.reactive.function.client.WebClientRequestException: An existing connection was forcibly closed by the remote host; nested exception is java.io.IOException: An existing connection was forcibly closed by the remote host at org.springframework.web.reactive.function.client.ExchangeFunctions$DefaultExchangeFunction.lambda$wrapException$9(ExchangeFunctions.java:141) ~[spring-webflux-5.3.27.jar:5.3.27] Suppressed: reactor.core.publisher.FluxOnAssembly$OnAssemblyException:
2024-10-29 21:11:02,983 [ERROR] [duledPool-0] [AppCatalogUpdater ] - Error during IOSAppCatalogUpdater run org.springframework.web.reactive.function.client.WebClientRequestException: An existing connection was forcibly closed by the remote host; nested exception is java.io.IOException: An existing connection was forcibly closed by the remote host at org.springframework.web.reactive.function.client.ExchangeFunctions$DefaultExchangeFunction.lambda$wrapException$9(ExchangeFunctions.java:141) ~[spring-webflux-5.3.27.jar:5.3.27] Suppressed: reactor.core.publisher.FluxOnAssembly$OnAssemblyException: Error has been observed at the following site(s): *__checkpoint ? Request to GET https://vpp.itunes.apple.com/mdm/VPPServiceConfigSrv [DefaultWebClient] Caused by: java.io.IOException: An existing connection was forcibly closed by the remote host
Error has been observed at the following site(s): *__checkpoint ? Request to GET https://vpp.itunes.apple.com/mdm/VPPServiceConfigSrv [DefaultWebClient]
[ERROR] [duledPool-0] [AppCatalogUpdater ] - Error during IOSAppCatalogUpdater run org.springframework.web.reactive.function.client.WebClientRequestException: An existing connection was forcibly closed by the remote host; nested exception is java.io.IOException: An existing connection was forcibly closed by the remote host at org.springframework.web.reactive.function.client.ExchangeFunctions$DefaultExchangeFunction.lambda$wrapException$9(ExchangeFunctions.java:141) ~[spring-webflux-5.3.27.jar:5.3.27] Suppressed: reactor.core.publisher.FluxOnAssembly$OnAssemblyException: Error has been observed at the following site(s): *__checkpoint ? Request to GET https://vpp.itunes.apple.com/mdm/VPPServiceConfigSrv [DefaultWebClient] Caused by: java.io.IOException: An existing connection was forcibly closed by the remote host
Troubleshooting Steps
Ensure that connection to
https://volumepurchaseprogramcredit.apple.com/itunes/index.do service is not blocked on their network. Safelist on the network if needed.