iPhone DEP enrollment fails with “Only configuration profiles can be installed”Solved

Hey @noor_k,

This error can occur when the device still has a stale enrollment state or a cached/corrupted enrollment payload after being wiped or restored.

Start by confirming the DEP assignment from the Hexnode side:

1. Go to Admin > Apple Business / School Manager.
2. Open Devices and confirm that the iPhone has an enrollment profile assigned.
3. Click Sync with DEP to refresh the assignment from Apple Business.
4. Restart the iPhone and go through the Remote Management step again.

If the profile status is assigned and the DEP sync is successful, but the iPhone still shows “Only configuration profiles can be installed,” the issue is likely on the device side rather than with the DEP sync itself.

Regards,
Isabel Lora
Hexnode UEM

I checked those parts. The profile status shows assigned, the sync is successful, and the device time is correct. I also removed the MDM server assignment in ABM and assigned it again, but the same profile installation error comes back during setup.

In that case, perform a full iOS restore using Finder or Apple Configurator on a Mac. This is different from only erasing the device from Settings, as it reinstalls iOS and can clear corrupted system files or cached enrollment payloads that may block the DEP profile installation.

Recommended sequence:

1. Unassign the device from the MDM server or enrollment profile temporarily.
2. Restore the iPhone completely using Finder or Apple Configurator on a Mac.
3. After the restore completes, reassign the device to the Hexnode MDM server in Apple Business.
4. Then, go to Admin > Apple Business / School Manager and run Sync with DEP.
5. Restart the iPhone and proceed through Setup Assistant again.

Once the refreshed DEP assignment is pulled during Remote Management, the enrollment profile should install normally.

Regards,
Isabel Lora
Hexnode UEM