Remote wipe a non-ABM Mac with Activation Lock and expired APNsSolved

Yes @thomas_m . If Activation Lock was enabled through policy and the User Activation Lock Bypass Code is available in the Hexnode UEM portal, the code can be used to clear Activation Lock after wiping the Mac, even if the Mac is not listed in Apple Business.

Before triggering the wipe, copy the bypass code from the device details page in Hexnode UEM and keep it available. The code must be entered exactly as shown, including capitalization and hyphens.

For the expired APNs certificate:

• Hexnode UEM cannot deliver MDM commands to Apple devices while APNs is expired.
• If a remote wipe command is queued while APNs is expired, it should remain pending.
• After renewing the APNs certificate with the matching Unique Identifier, Hexnode UEM will attempt to deliver pending commands automatically once the device is reachable.
• You can verify the command status from Reports > Action History or from the device’s Action History tab.
• If the wipe action has timed out or changed to Failed, issue the Wipe Device action again from Manage > Devices.

It is important to renew the existing APNs certificate using the same Unique Identifier. Creating a new APNs certificate instead of renewing the existing one can break the MDM communication channel and may require re-enrollment.

Regards,
Isabel Lora
Hexnode UEM

That helps for the APNs part. For the Activation Lock screen itself, where exactly is the bypass code entered? I want to know what to expect before standing in front of the wiped Mac.

After the wipe, when the Mac shows the Activation Lock screen, use the Recovery Assistant menu from the top menu bar.

Depending on the macOS version, the option may appear as one of the following:

• Activate with MDM key
• Activate with Key
• Deactivate Mac

Then enter the User Activation Lock Bypass Code from Hexnode UEM in the key/password field. If the screen also shows an Apple Account or username field, leave that field blank and enter only the bypass code in the password/key field.

Make sure the code is entered character-for-character exactly as displayed in Hexnode. It is case-sensitive, and any hyphens shown in the portal should be included.

Regards,
Isabel Lora
Hexnode UEM