Hi @tomas, welcome to the Hexnode community! Don’t worry, you aren’t misinterpreting anything. This is a very common hurdle when dealing with Apple native apps.
Here is what is happening behind the scenes. Apple Books and Apple Home are preinstalled system apps, but Apple treats them as App Store apps for updates and redownloads. Because they cannot be purchased and deployed silently via VPP, pushing them through a Required Apps policy forces the iPad to ping the App Store, which triggers the Apple Account prompt.
To get your Kiosk running smoothly without the login prompts, you will need to adjust the deployment order. Here is the best workaround:
- Install the apps before applying the Kiosk policy Because of Apple restrictions, these specific apps must be physically present on the device before the Kiosk lockdown is applied. You will need to ensure they are downloaded first. You can install them using the Install Application remote action or a Required Apps policy.
- Remove them from Required Apps To stop the recurring iTunes login prompt, remove Apple Books and Apple Home from your Required Apps list. Keeping them there is what causes the policy to constantly attempt a fresh App Store installation.
- Add them to your Kiosk Once the apps are on the device, you can add them to your Kiosk configuration. Go to Kiosk Lockdown > iOS Kiosk Lockdown > Single App/Multi App, click + Add App, and use their specific Bundle IDs:
- Apple Books: com.apple.iBooks
- Apple Home: com.apple.Home
- Update your Allowlist Since you mentioned using an Allowlist, make sure those exact Bundle IDs are also added there so the Kiosk does not accidentally block them from opening.
To keep things simple moving forward, ensure the apps are installed first, and then push your Kiosk policy.
Let us know if this gets those iPads up and running!
Cheers,
Eden Pierce
Hexnode UEM