Both the Apple VPP token and the Apple enrollment token need to be updated once a year.


https://business.apple.com/#main/settings/appsandbooks

User Profile (Bottom Left) -> Preferences -> Intune -> Server Tokens



https://business.apple.com/#main/accounts

User Profile (bottom left) - Preferences -> Payments and Billing -> Content Token, Download

 


https://endpoint.microsoft.com/#blade/Microsoft_Intune_Enrollment/DepTokensPagingBlade

Endpoint manager -> Tenant Administration -> Connectors and Tokens -> Apple VPP -> Edit basic settings -> Upload new file



https://endpoint.microsoft.com/#blade/Microsoft_Intune_DeviceSettings/TenantAdminConnectorsMenu/appleVpp

Endpoint manager -> Devices -> iPad/iOs -> Enrollment -> Enrollment program tokens

Select token

Properties -> Basics -> Edit -> Upload new token




Apple MDM Push Certificate


https://endpoint.microsoft.com/#view/Microsoft_Intune_DeviceSettings/DevicesIosMenu/~/iosEnrollment

Intune -> Devices -> iOS -> iOS Enrollment -> Apple MDM Push Certificate 

Download your CSR


https://identity.apple.com/pushcert/

Sign in with AppleDEP Account

Renew cert -> Upload CSR -> Download Cert


Upload new cert back in the Intune portal