Alerts & monitoring
MovoSuite proactively monitors your integration health and notifies you before things break — primarily so expiring Apple tokens and certificates don’t silently halt deployments. Alerts can be delivered by email, the Teams bot, and webhooks, according to the configured recipients, targets, and independent admin-channel switches (see Notifications).
How expiry checks work
Section titled “How expiry checks work”Every expiry check uses a single scan window (default 30 days) plus a 7-day post-expiry grace window — it is not a series of 30/14/7-day milestone reminders:
- When an item falls within 30 days of expiry, MovoSuite raises an alert.
- An item that has already expired keeps alerting for up to 7 days past expiry, after which the alert is suppressed.
What MovoSuite alerts on
Section titled “What MovoSuite alerts on”| Condition | Trigger |
|---|---|
| APNS Certificate Expiry | Certificate expires within the 30-day window (+7-day grace). |
| DEP Token Expiry | Apple enrollment (DEP) token expires within 30 days (+7-day grace). |
| VPP Token Expiry / Invalid state | VPP/content token expires within 30 days (+7-day grace), or its Apple token state is anything other than Valid. |
| App Key Credential Expiry | Entra app key credential expires within 30 days (+7-day grace). |
| Password Credential Expiry | Entra app password (secret) expires within 30 days (+7-day grace). |
| Microsoft 365 Service Health | New Microsoft service-health issue detected. |
When the checks run
Section titled “When the checks run”| Check | Schedule (UTC) |
|---|---|
Apple integration (APNS / DEP / VPP) — AppleHealthCheck |
Daily at 13:00 |
Entra app credentials (key + password) — CredentialCheck |
Daily at 14:00 |
Microsoft 365 Service Health — M365HealthCheck |
Every minute |
See Scheduled actions.
Acting on alerts
Section titled “Acting on alerts”- APNS / DEP / VPP — renew the certificate or token in Apple Business Manager / Apple School Manager and Intune before it expires. (An expired APNS certificate or DEP token will interrupt enrollment and deployment on the Apple/Intune side; MovoSuite only detects and warns — it doesn’t block.)
- Credential expiry — rotate the affected app key or secret. These back MovoSuite’s own integrations; if they lapse, background automation can’t authenticate.
- Service health — these reflect Microsoft-side disruptions; usually there’s no action beyond awareness, and deployments may be delayed until Microsoft resolves the incident.
Telemetry
Section titled “Telemetry”Scheduled functions emit structured telemetry to Application Insights, stamped with the release version.