Apple ADE/DEP sync failing with “account expired” in HexnodeSolved

Hello @sophia_miller ,

This can happen when Apple updates its Terms and Conditions in Apple Business. Even if the Hexnode subscription is active, ADE/DEP sync may fail until the updated Apple terms are accepted and the ADE server token is renewed.

Try the following:

1. Sign in to Apple Business.
2. Accept any pending Apple Terms and Conditions prompts, if shown.
3. Go to Devices.
4. Select Management from the left pane.
5. Under Device Management Services, choose the MDM server used for Hexnode.
6. Click the ellipsis icon in the top-right corner.
7. Select Download Token.
8. Confirm Download server token when prompted.
9. In the Hexnode UEM portal, go to Admin > Automated Device Enrollment > Accounts.
10. Edit the corresponding ADE account.
11. Upload the newly downloaded server token.
12. Save the changes and run the sync again.

After the new token is uploaded, ADE sync should resume successfully.

Regards,
Simon Scott
Hexnode UEM

Okayy got it. Is there a way to get notified before this turns into a firefighting situation? We only noticed it when enrollment started failing.

You can configure alert notifications for ADE sync failures from the Hexnode UEM portal.

Go to Admin > Alert Profile and add the technicians who should receive the notification. Once configured, Hexnode can notify the selected technicians when an ADE sync failure is detected.

The ADE scan is expected to run daily at the configured time. Based on the synchronization status, the alert profile can notify the assigned technicians if the sync fails.