iPad asks for passcode after restart and Hexnode cannot clear itSolved

Hi @porter ,

This message is shown by iPadOS after a restart when a passcode already exists on the device. Even if Hexnode UEM did not push a passcode policy, the passcode may have been set manually on the iPad during or after setup.

Hexnode UEM can clear an iPad passcode only when the device is reachable and able to receive MDM commands. If the iPad has not checked in for several months, the Clear Passcode command cannot be delivered to the device.

In this situation, the available recovery path is to erase the iPad using Apple Recovery Mode with a Mac or PC. This removes the passcode and restores access, but it also wipes the device. After the reset, the iPad can be re-enrolled into management.

For future prevention, keep managed iPads online periodically so they can receive MDM commands, and review whether any passcode policy or manual setup step is being applied before placing devices into lockdown or kiosk mode.

Regards,
Isabel Lora
Hexnode UEM

So just to confirm, if there’s no passcode policy in Hexnode, the passcode must have come from the device itself and not the lockdown policy?

Correct. A kiosk or lockdown configuration does not automatically create a device passcode unless a passcode policy is also configured. The lock screen message indicates that iPadOS already has a local passcode set and requires it after restart as part of Apple’s security behavior.

If the device were still checking in, the passcode could be cleared from Hexnode using the remote passcode clear action. Since the device is offline and not communicating with Hexnode, the command cannot take effect.

Regards,
Isabel Lora
Hexnode UEM