iOS enrollment stuck on “Scanning in progress” because APNs certificate expiredSolved

Participant
Discussion
19 hours ago Aug 23, 2026

I’m enrolling iOS devices into Hexnode. The MDM profile installs successfully, but the device page keeps showing “Scanning in progress” and does not move forward. I already tried restarting the devices and switching networks. This happened on more than one iPhone, so it doesn’t look like a device-specific issue. Also, after installing the profile, I expected the Hexnode UEM app to appear on the device, but I don’t see it. Does this usually happen because of network connectivity, or is there something else I should check?

Replies (3)

Marked SolutionPending Review
Hexnode Expert
4 hours ago Aug 24, 2026
Marked SolutionPending Review

For iOS devices, this behavior can occur when Hexnode cannot communicate with the device after the enrollment profile is installed. Since the device network and date/time have already been ruled out, check the APNs certificate in the Hexnode portal.

A valid APNs certificate is required for Hexnode to send MDM commands and push notifications to iOS devices. Go to the APNs certificate section in the Admin area and confirm whether the certificate is active.

If it has expired, renew it using the same Apple ID that was originally used to create the certificate. After renewal, open the device page and run Actions > Scan Device. The Hexnode UEM app may not appear or install properly while the APNs certificate is expired because the device cannot receive the required MDM commands.

Regards,
Mary Romero

Marked SolutionPending Review
Participant
3 hours ago Aug 24, 2026
Marked SolutionPending Review

Does this still apply if the iPhone is not enrolled through Apple Business Manager? These are normal iOS enrollments, not Apple-managed devices.

Marked SolutionPending Review
Hexnode Expert
1 hour ago Aug 24, 2026
Marked SolutionPending Review

Yes. APNs is required for all iOS MDM communication, regardless of whether the device is enrolled through Apple Business Manager or through a standard enrollment profile. Apple Business is used for automated device enrollment and supervision workflows, but APNs is the underlying Apple service that allows an MDM server to communicate with iPhones and iPads.

If the APNs certificate expires, Hexnode cannot reliably send commands such as scan, app install, or profile updates to enrolled iOS devices.

Regards,
Mary Romero

Save