iOS app installations from ABM stuck as pending because devices are not checking inSolved

Hello,

Thanks for reaching out to Hexnode Connect.

Your issue points directly to a communication breakdown. It most likely could be caused due to an expired Apple Push Notification service (APNs) certificate.

Hexnode does not deploy commands directly to iOS devices. When you initiate an action—such as installing an ABM app or removing a policy—Hexnode sends a request through Apple’s servers. APNs then sends a secure wake-up signal to the device, prompting it to contact Hexnode and fetch the queued command.

If your APNs certificate has expired, Apple immediately rejects that communication. Because APNs governs the entire Apple device management flow, this expiration impacts all managed iPhones and iPads, regardless of whether they are brand new or running the latest iOS versions. As a result:

• Devices do not receive the wake-up signal to check in.
• App installation commands remain pending.
• Policy changes do not apply.
• Remote actions stay stuck in the queue.

To resolve this, you must renew your APNs certificate. You can verify its status in your Hexnode portal by navigating to Admin > APNs. If it has expired, you need to renew the certificate via the Apple Push Certificates Portal using the exact same Apple ID that was originally used to create it.

Once the renewed certificate is uploaded back into Hexnode, communication between your MDM and Apple’s servers will be restored. You can then trigger any remote action, or simply wait for the devices to check in, and all of your pending app installations and commands will begin processing normally.

I hope this helps. If you find any more issues or need further assistance feel free to reach out.

Best regards,
George,
Hexnode UEM