Purpose
This article provides instructions to renew the Apple Server token for Automated Device Enrollment Program (ADE) or formerly "DEP" deployments on Workspace ONE.Note: Your Apple Server token file is valid for one year, after which time you must renew it. It is often necessary to renew the Apple Server token if/when Apple Business Manager (ABM) loses its connection to the Workspace ONE UEM Console.
Resolution
Review the video below for instructions on how to renew the Apple Server token for Device Enrollment Program (DEP) deployments within Workspace ONE. Step-by-step written instructions are also included for your reference.Important: Ensure that the MDM server name in ABM matches the token name from the DEP configuration within the Console when generating the new token, otherwise the token will not match and the renewal will not be successful. You might see a warning similar to "Please login to Apple Business Manager and review the updated Terms and Conditions". See Image 1 for illustration.
Within the Workspace ONE UEM Console, navigate to Groups & Settings > All Settings > Devices & Users > Apple > Device Enrollment Program. Take note of the Apple Server token details such as the expiration date and the name of the specific token that should be renewed.Log into to Apple Business Manager.Select Manage Servers from the left panel.Select the Server Name of your MDM server that matches the token file you want to renew.Select Generate New Token > Generate and Download Server Token.Select Done > OK.Return to the Device Enrollment Program page within the Workspace ONE UEM Console..Select the Renew button.Upload your newly generated server token.In order for the devices to sync with the new token, be certain to click the Fetch All Devices button in the Console.
Image 1 - Device Enrollment Program screenFor more details on Apple Business Manager, refer to VMware documentation Introduction to Apple Business Manager.
Related Information
Refer to these resources for additional details:
“Invalid Profile” error in DEP devicesDEP Profile stuck in “Assignment in Progress”DEP devices not syncing with Workspace ONE UEM Console Unable to assign or remove DEP profile How to unenroll, re-enroll, and reconfigure DEP devices
