# View - Sources

The Sources View of the FileWave Anywhere can be thought of as a configuration view for the FileWave system. Today it is limited to Apple configuration elements, but before too long we'll see Google and Microsoft settings in here as well.  
  
We will use this view whenever we need to do something like renew an APNS certificate, DEP, or VPP token.

# Apple General Settings (APN)

## What

At the very top of the Sources View for Apple services, you will find some overall settings related to Apple in general.

## When/Why

We will need to specify these settings when our FileWave server is first setup, and will need to revisit this section at least annually to renew our APN (Apple Push Notification) certificate.

**How**

We'll discuss APN renewal in a moment, but let's talk about the other two preferences first:

![](https://kb.filewave.com/uploads/images/gallery/2023-07/ymVB748eEgaE9FJH-embedded-image-ufwjcbhk.png)

- MDM Profile Removal (if on) forces removal of the MDM enrollment profile from the device if we remove the device from FileWave
- Payload Importer (recommended in most circumstances) will ensure that any newly purchased VPP apps will automatically show up as payloads in your FileWave system without you having to do anything

APNS renewal (the first item in the above) must be done at least annually. The APN cert is the certificate that allows your MDM server to talk to Apple, which in turn then talks to devices on our behalf. If the certificate expires, then all communication to devices is cut off from the FileWave server. So yes, a relatively important certificate!

The only piece of the renewal that is done in the WebAdmin is the upload of the new certificate, but you'll want to reference the below documentation on APN renewal for all of the detailed steps for creating that certificate (dependent on platform of your admin workstation).

## Related Content

- [APNs Certificate Creation &amp; Renewal on macOS Computers](https://kb.filewave.com/books/certificates/page/apns-certificate-creation-renewal-on-macos-computers-keychain "APNs Certificate Creation & Renewal on macOS Computers")

# ADE Accounts (Tokens)

## What

ADE Token(s) allow your FileWave server to talk to Apple's ADE (Device Enrollment) services. This service is critical in supporting automated enrollment workflows, and is also critical in making sure your devices are able to be managed at the enterprise level.

## When/Why

We are going to use the ADE Accounts section of the Sources view whenever we want to add, remove or update a ADE token. Only through valid token(s) can the FileWave server talk to Apple to get device based information. This same method of communication is used to send our ADE profile information back to Apple for installation on the endpoint during the Setup Assistant phase. So, yes, it is critical!

## How

Edit and Deletion of Tokens are done from the actions menu for any particular token as shown below. Obviously one needs to take care before deleting a token, so you will be prompted for confirmation.

![](https://kb.filewave.com/uploads/images/gallery/2023-07/vu0Bly45MKP8LiDC-embedded-image-xsdn2go1.png)

Editing (aka renewing) or adding a token consists of the following 3 steps:

![](https://kb.filewave.com/uploads/images/gallery/2023-07/a4m3cOwDwFzm8JKj-embedded-image-o1nvb54i.png)

1. Download the FileWave server's public Key and save it locally (this identifies the server to Apple)
2. Login to either ASM or ABM and add or update MDM server as appropriate with above public key, and then download the generated ADE token
3. Upload the ADE Token back into FileWave

<p class="callout info">Apple's ADE servers prevent communication when your external IP changes, and traffic will be blocked until you renew your token. This most often happens in the instance of your network doing some type of disaster recovery failover.</p>

## ADE Synchronization

Your FileWave server synchronizes nightly with Apple ADE servers automatically. However, if you need to sync manually in the mean time you can do so from this view by clicking the (![](https://kb.filewave.com/uploads/images/gallery/2023-07/c1JOaNPfyHT1oJr9-embedded-image-e4arhoin.png)) icon. You'll be prompted for either a Sync (recommended) or a Full Sync (use only under special circumstances) as shown below:

![](https://kb.filewave.com/uploads/images/gallery/2023-07/4RtoArjqzbP4vdrc-embedded-image-qoxgrexy.png)

# ADE Profile Workflows

## What

Having ADE (formerly known as DEP) Profiles defined is one thing, but having them assigned to devices is another...and critical. ADE Profile workflows allow us to automatically assign ADE profiles based on programmatic criteria.

## When/Why

As much as possible we always want to use automatic profile assigning rules. Automatic assignment saves us time from having to manually assign profiles, and ensures that even brand new devices that are still in shrink wrap will have a ADE profile assigned correctly.

<p class="callout info">Reminder: ADE profile assignment, or changes in assignment impact nothing on the device's current state. Those changes are only pertinent the NEXT time the device goes through the setup assistant.</p>

You might find you only need one workflow, or you may find you need many...it tends to be driven by the number of ADE profiles you have. In general, fewer ADE profiles is better (to reduce complexity).

## How

Creating a new profile workflow is very similar to creating a smart group or a report. However, you'll notice in the below that we use the Operating System field from the ADE Devices table to assign our AppleTV profile to all AppleTV devices. We explicitly use that field because it comes directly from the ADE sync with Apple, and will always be populated, where FileWave normal inventory fields will only be populated AFTER enrollment.

Watch below as we assign all AppleTVs to the AppleTV profile we created earlier:

<video controls="controls" height="300" width="600"><source src="https://kb.filewave.com/attachments/74"></source></video>

# ADE Profiles

## What

The ADE (formerly known as DEP) Profile section allows us to create, edit and remove ADE (Apple Device Enrollment) profiles.

## When/Why

There are a lot of different reasons for creating and editing ADE profiles, but in general ADE profiles control device setup behavior for Apple devices. With these profiles we can control what dialogs users see during device setup, force devices to enroll in our MDM environment, and even control device naming. ADE profiles are a critical part of setting up automated device enrollment and setup.

<p class="callout info">Starting in FileWave 16.3.x, ADE profiles also support `do_not_use_profile_from_backup`, which lets a restored device ignore the ADE profile embedded in a backup and pull the current ADE assignment instead. FileWave 16.3.x also adds the **Age Based Safety Settings** skip key, while still keeping `AdditionalPrivacySettings` available because Apple's documentation is not yet fully consistent on whether the newer key fully replaces it.</p>

## How

The below is a quick run-through of creating (and editing) a new ADE Profile targeting AppleTV devices.

<video controls="" height="300" width="600"><source src="https://kb.filewave.com/attachments/75"></source></video>

See the link below for more information on automatically assigning ADE profiles to devices.

## Related Content

- [ADE Profile Workflows](https://kb.filewave.com/books/filewave-anywhere-help-menus/page/ade-profile-workflows "ADE Profile Workflows")

# VPP Tokens

## What

VPP (Volume Purchase Program) Tokens from Apple allow us to utilize licenses purchased for App store resources on our FileWave server. You may have one or many VPP tokens.

## When/Why

In ABM/ASM (Apple Business Manager / Apple School Manager) terminology tokens are created and allow access to licenses purchased within a location. The VPP tokens section of the Sources View allows you to Add, Edit and Remove VPP tokens.

## How

Adding a new token is done by simply clicking the plus icon (![](https://kb.filewave.com/uploads/images/gallery/2023-07/mtr1YCGiVh5H1Gwk-embedded-image-g8lcwcsa.png)). Editing and removal are done through the actions menu, and removal is only possible if all payloads are removed beforehand.

Whether adding a new, or refreshing an existing, token, the steps are the same, and and require the token from Apple:

![](https://kb.filewave.com/uploads/images/gallery/2023-07/fVNMuBXgXXdg2GJg-embedded-image-74kdaccs.png)

1. Download the appropriate location based token from ABM/ASM
2. Upload the Token to FileWave
3. Set the Country/Language as needed
4. Provide a local descriptive name for the Token
5. Specify where you would like VPP payloads to be created (default is root)

<table id="bkmrk-be-aware-that-if-you"><tbody><tr><td>Be aware that if you attempt to import a VPP token already in use on another system, FileWave will warn you as shown:

![](https://kb.filewave.com/uploads/images/gallery/2023-07/VjGCTutXalgwc35E-embedded-image-pa92duoq.png)

Only import a token in this circumstance if you are certain it will not interfere with another MDM server.

</td></tr></tbody></table>