An organization has successfully used VMware Workspace ONE UEM to deploy a managed, public application...

The most likely cause of this issue is that the organization’s Apple Push Notification certificate expired. The Apple Push Notification certificate is required for iOS devices to communicate with Workspace ONE UEM and receive commands, profiles, and applications2. If the certificate expires, the iOS devices will not be able to receive any updates from Workspace ONE UEM, including the application catalog. The organization should renew the certificate as soon as possible to restore the functionality of the iOS devices3. The other options are not likely causes of this issue because:

A misconfigured application assignment via a smart group would affect all devices in the smart group, not just iOS devices.

A misconfigured application assignment via the enrollment type would affect all devices with the same enrollment type, not just iOS devices.

An expired Apple sToken would prevent the organization from purchasing or distributing new applications from Apple Business Manager or Apple School Manager, but it would not affect the existing applications in the Workspace ONE Catalog.