Supervised iPhone not checking in: ABM re-enrollmentSolved

Hi @maatthew,

For a supervised iPhone enrolled through Apple Business, internet access alone does not always mean the MDM communication channel is still healthy. If Hexnode has not received a check-in for several months, the MDM/APNs communication path or enrollment profile may no longer be functioning correctly.

You can try the following first:

1. Reinstall the MDM profile if the option is available on the device.
2. Open the Hexnode app on the iPhone and initiate a sync.
3. From the Hexnode portal, run a Scan Device action.
4. Confirm that the device is still assigned to the correct Hexnode MDM server in Apple Business.

If the device was enrolled using Apple Business and still does not check in after these steps, the reliable fix is to refresh the Apple Business assignment and perform a full factory reset. ADE/Apple Business enrollment is applied during the iOS Setup Assistant, so the device must return to the initial “Hello” setup screen to fetch the refreshed MDM assignment and restore supervised management.

Regards,
Isabel Lora
Hexnode UEM

That makes sense. We checked Apple Business and the device is still assigned to the Hexnode server. If we unassign and reassign it in Apple Business, does the user have to set up the iPhone again? The device is not with us, so I’m trying to avoid anything too complicated.

Yes. If you want to keep the device supervised through Apple Business, the user must go through the iOS setup process again after the reset.

Recommended supervised re-enrollment workflow:

1. In Apple Business, search for the iPhone.
2. Unassign the device from the current MDM server.
3. Reassign it back to the Hexnode MDM server.
4. On the iPhone, go to Settings > General > Transfer or Reset iPhone.
5. Tap Erase All Content and Settings.
6. Enter the device passcode if prompted and confirm the erase.
7. After the device restarts to the “Hello” screen, connect it to Wi-Fi and continue through Setup Assistant.
8. The Remote Management screen should appear, and the Hexnode management profile will be installed during activation.

If the iPhone prompts for an Apple ID password because of Activation Lock, the administrator can remove Activation Lock from Apple Business before the user continues.

This is the only path that restores full supervised management through Apple Business, including silent app installation and supervised-only restrictions.

Regards,
Isabel Lora
Hexnode UEM

Hi all. Is there any no-wipe option just to get the device manageable again? We don’t need the perfect setup immediately, but we need some way to reconnect it because the remote user may struggle with a full reset.

A no-wipe option is manual enrollment, but it should be treated as a workaround rather than a replacement for Apple Business enrollment.

The user can open Safari on the iPhone, go to the Hexnode enrollment URL for your portal, download the configuration profile, and complete the on-screen profile installation steps.

This can bring the device back into Hexnode for basic management without erasing it. However, because the device does not pass through Apple Business Setup Assistant, it will not be supervised in Hexnode after manual enrollment.

Limitations of manual enrollment include:

• Apps cannot be installed silently. The user will receive prompts to approve app installation.
• Supervised-only restrictions will not apply.
• The MDM profile may be removable depending on how enrollment/profile settings are configured.
• It is not suitable for a fully locked-down corporate-owned iPhone workflow.

Use manual enrollment only if restoring basic management is more urgent than maintaining full supervision. For complete corporate control, the factory reset and Apple Business re-enrollment workflow is required.

Regards,
Isabel Lora
Hexnode UEM

For replacing the phone, we usually back up the old iPhone to a MacBook Air and restore from Finder. We don’t use iCloud backups. What order should we follow so the new iPhone stays supervised?

When restoring from a Mac backup, the order is important. The new iPhone should enroll through Apple Business Manager before the local backup is restored.

Use this workflow:

1. Assign the new iPhone to the Hexnode MDM server in Apple Business Manager before setting it up.
2. Back up the old iPhone to the Mac using Finder.
3. Turn on the new iPhone.
4. Proceed through Setup Assistant and connect to Wi-Fi.
5. Wait for the Remote Management screen to appear.
6. Accept Remote Management and allow the Hexnode profile to install first.
7. When the setup reaches the Apps & Data screen, choose From Mac or PC.
8. Connect the new iPhone to the MacBook using a USB cable.
9. Open Finder on the Mac and select the new iPhone from the sidebar.
10. Choose Restore Backup, select the latest backup from the old iPhone, and restore it.

This sequence applies the supervised management layer first, then restores the user’s data and settings on top of it. Restoring the backup before the Remote Management step can interfere with the intended supervised enrollment flow.

Regards,
Isabel Lora
Hexnode UEM