Apple Business Manager .p7m token shows invalid during ADE setupSolved

Participant
Discussion
3 weeks ago May 20, 2026

Hi, I’m setting up Automated Device Enrollment with Apple Business in Hexnode. The server token I downloaded from ABM is a .p7m file and it was created today, but Hexnode says it is an invalid token when I try to upload it.

I’m on the ADE configuration screen and trying to create enrollment through ABM. Is there anything specific I should check for .p7m tokens?

Replies (2)

Marked SolutionPending Review
Hexnode Expert
3 weeks ago May 20, 2026
Marked SolutionPending Review

Hi @douglas,

For Apple Business Manager, a .p7m file is specifically used for Automated Device Enrollment. Please ensure you are uploading it in the correct section by navigating to Admin > Apple Business/School Manager > Automated Device Enrollment > Devices. Additionally, verify the file name before uploading; if it was downloaded multiple times, your OS might have added spaces or parentheses to the file name, which Hexnode may reject. Rename it to ensure it ends cleanly with .p7m and does not contain any extra characters.

If the upload location and file name are correct but you are still receiving an invalid token message, the .p7m token from Apple Business likely doesn’t match your current ADE certificate from Hexnode. To resolve this, you will need to refresh the certificate-token pair. Download a fresh Hexnode_Apple_DEP certificate file from the Hexnode ADE setup page, upload it to the corresponding server settings in Apple Business, and then download a new .p7m server token to upload back into Hexnode. The certificate uploaded to Apple Business and the token downloaded from that same MDM server must be an exact pair, so using an older version of either will cause Hexnode to mark the token as invalid.

Regards,
Sienna Carter
Hexnode UEM

Marked SolutionPending Review
Participant
3 weeks ago May 20, 2026
Marked SolutionPending Review

Thanks, that fixed it.

Save