iPhone multi-app kiosk not activating in Hexnode after enrollmentSolved

Hi @lila_ace ,

For iOS kiosk mode to work, the device must be supervised. If the iPhone was enrolled using Safari/web enrollment first, it will not become supervised through that method.

To resolve this, wipe and re-enroll the iPhones using one of the supported supervision methods:

1. Disenroll the affected iPhone from Hexnode UEM.
2. Factory reset the device.
3. Assign the device to the correct MDM server in Apple Business.
4. Re-enroll it through Automated Device Enrollment during the initial iOS setup.
5. When the Remote Management screen appears, proceed with enrollment.
6. After the device is enrolled as supervised, re-associate or confirm the kiosk policy target.

Alternatively, Apple Configurator can also be used to supervise supported iOS devices. Once supervision is enabled, the multi-app kiosk policy should activate normally.

Regards,
Isabel Lora
Hexnode UEM

I reset one of the iPhones and assigned it in Apple Business Manager, but I don’t see the Remote Management prompt during setup. It also doesn’t show up automatically in Hexnode. Do I need to do something else after assigning it in ABM?

After assigning devices in Apple Business, sync the Automated Device Enrollment device list in Hexnode UEM.

Go to:

Admin > Apple Business/School Manager > Automated Device Enrollment > Devices > Manage > Sync with ADE.

First try Sync New Devices. If the device still does not appear, use Sync All Devices. Then search for the device under the Devices section and confirm that the ADE configuration profile is attached.

Once it appears there, restart the iPhone setup from the beginning. The Remote Management prompt should appear after the Wi-Fi step. If the setup was already completed, erase the device again and start over.

Regards,
Isabel Lora
Hexnode UEM

Sync All Devices did the trick. The iPhones now appear under Automated Device Enrollment. After resetting again, I got the management prompt.

One more thing: during setup it asks me to sign in to iTunes so Hexnode can manage and install apps. I thought apps could be installed silently without an Apple ID.

That prompt usually appears when iOS cannot install the assigned apps silently. In this case, check the Apple VPP token and app licenses.

Common causes are:

• The VPP token in Hexnode UEM has expired.
• There are not enough VPP licenses for one or more apps.
• The apps were deployed without proper device-based VPP assignment.

To renew the VPP token:

1. Sign in to Apple Business.
2. Go to Settings.
3. Open Payments & Billing.
4. Under Apps and Books, locate Content Tokens.
5. Download the required content token.
6. In Hexnode UEM, go to Admin > Apple Business/School Manager > Apple VPP.
7. Open the matching VPP account.
8. Upload the newly downloaded server token file under Renew VPP Token.
9. Save the changes.

After renewal, Hexnode UEM should be able to install assigned VPP apps silently, provided sufficient licenses are available.

Regards,
Isabel Lora
Hexnode UEM

Hi @isabel_lora. Is there a way to add a custom wallpaper to these kiosk devices from the same policy?

Yes @rob_mitch . You can configure a custom wallpaper through an iOS policy.

Go to:

Policies > New Policy or edit an existing policy > iOS > Configurations > Wallpaper

Click Configure, upload a .png or .jpg image, and associate the policy with the required devices or device groups under Policy Targets. If you are already using a kiosk policy for these iPhones, you can add the wallpaper configuration to the same policy if that fits your deployment structure.

Regards,
Isabel Lora
Hexnode UEM