Renewing Apple Tokens in Intune

There are 3 Apple Tokens that need to be renewed in Intune
Refer https://c7solutions.com/2024/01/renewing-apple-tokens-in-intune for instructions
Apple MDM Push Certificate
This certificate expires ever 365 days and must be renewed prior, otherwise all iOS devices will need to be reenrolled. 
there's lots of documentation out there about how to do this, such as the below, the main things to remember is to log into Apple Push Certificates Portal with apple@pbr.org.au and to renew the existing certificate, rather than creating a new one
https://www.recastsoftware.com/resources/renewing-your-apple-mdm-certificate-for-intune/
https://learn.microsoft.com/en-us/mem/intune/enrollment/apple-mdm-push-certificate-get
Apple Business Manager Enrolment Program Token (DEP)
This token expires ever 365 days and must be renewed prior
In Apple Business Manager, on the LHS click on IT - Puffing Billy Railway and select Preferences
Scroll to the bottom and Select Intune under Your MDM Servers
Then select Download MDM Server Token
In Intune navigate to Devices | Overview > iOS/iPadOS | Enrollment > Enrollment Program Tokens
Click on Renew Token
Apple ID apple@pbr.org.au
Select the token you downloaded from Apple Business Manager
The expiry date should now updated and the token renewed
Apple VPP Token
There is a recurring ticket in helpdesk for this to be done
In Apple Business Manager, download content token
in Intune
 Tenant Administration > Connectors and Tokens > Apple VPP Tokens
select the token, and click edit next to basics
Browse to the token file you downloaded