I erased an iPad that was previously managed through Hexnode, but during setup it still looks like it is connected to Hexnode. The device is in Apple Business Manager, and the APNs certificate in Hexnode has expired. Do I need to renew the APNs certificate first to stop the iPad from reconnecting, or is there another step in Apple Business Manager? I’m also having trouble getting into Apple Business Manager because of an account verification issue.
iPad still connects to Hexnode after erase due to Apple Business Manager assignmentSolved
Replies (5)
This behavior is expected when the iPad is still assigned to a Hexnode MDM server in Apple Business Manager through Automated Device Enrollment.
Erasing the iPad removes local data, but it does not remove the Apple Business Manager assignment. During activation, the iPad checks Apple’s enrollment service. If it is still assigned to the Hexnode server, it will continue to enroll or show the management screen again.
To stop the iPad from connecting to Hexnode during setup:
- Sign in to Apple Business Manager.
- Go to Devices and select the iPad.
- Unassign the device from the Hexnode MDM server, or assign it to a different MDM server if needed.
- In Hexnode, sync the ADE account so the device list updates.
- Confirm that the iPad is removed from the ADE devices list in Hexnode.
- Erase or factory reset the iPad again.
Renewing APNs is not the step that removes the Apple Business Manager assignment. APNs is required for ongoing communication with managed Apple devices, but the ABM/ADE assignment itself must be changed from Apple Business Manager.
That makes sense. So if the only thing I want is to stop this erased iPad from going back to Hexnode setup, I don’t have to renew APNs first?
Correct. If the goal is only to stop the erased iPad from returning to Hexnode during activation, the required step is to unassign the device from the Hexnode server in Apple Business Manager and then erase it again. You should renew the APNs certificate if you plan to continue managing iPads, iPhones, or Macs with Hexnode. An expired APNs certificate can prevent managed Apple devices from receiving commands and communicating properly with Hexnode. If renewing APNs, use the Apple ID that was originally used to create the certificate and renew the existing certificate from the Apple Push Certificates Portal, then upload the renewed certificate back in Hexnode under Admin > APNs.
What if I can’t log in to Apple Business Manager at all? I’m the only administrator and the login is blocked by verification.
If Apple Business Manager access is unavailable, the device cannot be unassigned from the Hexnode side. The MDM server assignment is controlled by Apple Business Manager, so Hexnode cannot remove that ABM assignment on behalf of the organization.
In that case, the next step is to contact Apple Support and recover access to the Apple Business Manager account. Once access is restored, complete the unassignment in ABM, sync the ADE account in Hexnode, and factory reset the iPad again.
Until the ABM assignment is changed, the erased iPad will continue to check in with Apple during setup and may keep showing the Hexnode management flow.