iOS ADE enrollment: Hexnode UEM app not installing automatically after VPP syncSolved

Participant
Discussion
1 day ago Jun 26, 2026

I’m setting up a supervised iPad through Apple Business Manager/ADE and VPP for the first time. The device is assigned to Hexnode and enrolled successfully.

After syncing VPP, the asset count changed from 0 to 2 and I can now see the apps in Hexnode. But the Hexnode UEM app did not install automatically during enrollment. The iPad also prompted for an iTunes/App Store sign-in, which I don’t want because these devices should be fully supervised and app installs should not require an Apple ID.

I may have enrolled the iPad before the VPP apps were fully synced. Does the Hexnode UEM app install automatically during ADE enrollment once VPP is configured, or do I need to configure something else?

Replies (3)

Marked SolutionPending Review
Hexnode Expert
1 day ago Jun 26, 2026
Marked SolutionPending Review

Hi @rob_mitch,

For ADE-enrolled iOS devices, the Hexnode UEM app can be installed automatically, but the required VPP app/license must be available and synced before or during enrollment.

If the device was enrolled before the VPP assets were synced or before the Hexnode UEM app license was available, the app may not install immediately.

For the already enrolled device, try this:

  1. Go to Manage.
  2. Open the affected iPad.
  3. Go to Enrollment Details.
  4. Locate the Hexnode UEM app section.
  5. Click the red sync icon to retry the app/license assignment.

Once the VPP license is assigned correctly, the Hexnode UEM app should install without requiring an Apple Account on the device.

For future ADE enrollments, make sure the VPP token is synced and the Hexnode UEM app appears under Apps before enrolling or re-enrolling the iPad. Then the app should be pushed automatically during enrollment.

Regarding the App Store sign-in prompt: with VPP/device-based app assignment, users should not need to sign in with an Apple Account to install managed apps. If the prompt appears, it usually means the app was not installed using the VPP device license flow at that point.

Best Regards,
Isabel Lora
Hexnode UEM

Marked SolutionPending Review
Participant
1 day ago Jun 26, 2026
Marked SolutionPending Review

That explains it. I had enrolled the iPad before the VPP sync completed. After syncing VPP manually, I could see the app listed in Hexnode. I wiped the iPad and went through ADE enrollment again, and this time the Hexnode UEM app showed up after setup.

Also one more thing @isabel_lora. After resetting the iPad, I briefly ran into Activation Lock even though no Apple ID was signed in on the device. I want Activation Lock completely avoided on these shared/supervised iPads.

Marked SolutionPending Review
Hexnode Expert
1 day ago Jun 26, 2026
Marked SolutionPending Review

If the goal is to prevent Activation Lock from being enabled, do not enable or deploy the Activation Lock setting from the Advanced Restrictions policy.

If Activation Lock is ever encountered, it can be cleared in one of these ways:

  • From Hexnode UEM: Go to Manage > select the device > Actions > Security > Clear Activation Lock.
  • Using the bypass code: Open the device details in Hexnode, reveal the Activation Lock bypass code, enter it on the device, and leave the Apple Account field blank.
  • From Apple Business: Search for the device and choose the option to turn off Activation Lock.

Best Regards,
Isabel Lora
Hexnode UEM

Save