What's new 
I’m setting up Automated Device Enrollment for an iphone and get an “ADE is returning: Invalid” message when uploading the server token in Hexnode. I’m new to this and may be using the wrong file. The file I tried uploading has a “.pem” extension. Is that the correct token file for ADE, or should I be downloading something else from Apple Business Manager?
20 Views
Replies (1)
Marked SolutionPending Review
Hexnode Expert
1 day ago
Jul 15, 2026
Marked SolutionPending Review
Hello @laura123 ,
The “.pem” file is not the correct file for renewing or uploading an Automated Device Enrollment server token. A “.pem” file is typically associated with the APNs certificate workflow, while ADE uses a server token file downloaded from Apple Business, usually with a “.p7m” extension.
To resolve the “ADE is returning: Invalid” error, download the correct ADE server token from Apple Business and upload that file in Hexnode UEM:
- Sign in to Apple Business.
- Go to Devices.
- Select Management Services from the left pane.
- Under Device Management Services, select the MDM server linked to Hexnode.
- Click the ellipsis icon in the upper-right corner.
- Choose Download Token.
- Confirm the prompt to download the server token.
- In Hexnode UEM, go to Admin > Apple Business/School Manager > Automated Device Enrollment > Accounts.
- Hover over the required ADE server entry and click Edit.
- In the Edit ADE Account page, upload the downloaded “.p7m” token using Upload Token.
- Click Save.
Make sure the token is downloaded from the same Apple Business MDM server that is configured in Hexnode UEM.
Regards,
Simon Scott
Hexnode UEM
Save