Supervised iPhone not checking in: ABM re-enrollmentSolved

Hi @maatthew,

For a supervised iPhone enrolled through Apple Business, internet access alone does not always mean the MDM communication channel is still healthy. If Hexnode has not received a check-in for several months, the MDM/APNs communication path or enrollment profile may no longer be functioning correctly.

You can try the following first:

1. Reinstall the MDM profile if the option is available on the device.
2. Open the Hexnode app on the iPhone and initiate a sync.
3. From the Hexnode portal, run a Scan Device action.
4. Confirm that the device is still assigned to the correct Hexnode MDM server in Apple Business.

If the device was enrolled using Apple Business and still does not check in after these steps, the reliable fix is to refresh the Apple Business assignment and perform a full factory reset. ADE/Apple Business enrollment is applied during the iOS Setup Assistant, so the device must return to the initial “Hello” setup screen to fetch the refreshed MDM assignment and restore supervised management.

Regards,
Isabel Lora
Hexnode UEM

That makes sense. We checked Apple Business and the device is still assigned to the Hexnode server. If we unassign and reassign it in Apple Business, does the user have to set up the iPhone again? The device is not with us, so I’m trying to avoid anything too complicated.

Yes. If you want to keep the device supervised through Apple Business, the user must go through the iOS setup process again after the reset.

Recommended supervised re-enrollment workflow:

1. In Apple Business, search for the iPhone.
2. Unassign the device from the current MDM server.
3. Reassign it back to the Hexnode MDM server.
4. On the iPhone, go to Settings > General > Transfer or Reset iPhone.
5. Tap Erase All Content and Settings.
6. Enter the device passcode if prompted and confirm the erase.
7. After the device restarts to the “Hello” screen, connect it to Wi-Fi and continue through Setup Assistant.
8. The Remote Management screen should appear, and the Hexnode management profile will be installed during activation.

If the iPhone prompts for an Apple ID password because of Activation Lock, the administrator can remove Activation Lock from Apple Business before the user continues.

This is the only path that restores full supervised management through Apple Business, including silent app installation and supervised-only restrictions.

Regards,
Isabel Lora
Hexnode UEM

Hi all. Is there any no-wipe option just to get the device manageable again? We don’t need the perfect setup immediately, but we need some way to reconnect it because the remote user may struggle with a full reset.

A no-wipe option is manual enrollment, but it should be treated as a workaround rather than a replacement for Apple Business enrollment.

The user can open Safari on the iPhone, go to the Hexnode enrollment URL for your portal, download the configuration profile, and complete the on-screen profile installation steps.

This can bring the device back into Hexnode for basic management without erasing it. However, because the device does not pass through Apple Business Setup Assistant, it will not be supervised in Hexnode after manual enrollment.

Limitations of manual enrollment include:

• Apps cannot be installed silently. The user will receive prompts to approve app installation.
• Supervised-only restrictions will not apply.
• The MDM profile may be removable depending on how enrollment/profile settings are configured.
• It is not suitable for a fully locked-down corporate-owned iPhone workflow.

Use manual enrollment only if restoring basic management is more urgent than maintaining full supervision. For complete corporate control, the factory reset and Apple Business re-enrollment workflow is required.

Regards,
Isabel Lora
Hexnode UEM