Description
Jamf Now requires complete deletion of any existing device record when re-enrolling a device using a different APNs certificate. In cases where a device lost MDM communication with Jamf Now as a result of a new APNs certificate being uploaded, follow the steps below to ensure the device re-enrolls correctly.
For the steps for mobile devices, please see: Re-enrolling a mobile device in Jamf Now that was previously enrolled using a different APNs.
Re-enrolling Managed Macs
Send an Unenroll Device command to computers that need to be re-enrolled.
Note: It is expected that the device will not receive the command if a different APNs certificate is currently uploaded but this step is needed to be able to remove the devices from Jamf Now. If devices aren't removed, they will enroll with the old APNs information.
Optional: if there are FileVault Recovery Keys or Activation Lock Bypass Codes as part of the device records, consider Exporting Device Data. For more information, see Exporting Device Data in the Jamf Now Documentation.
Click Remove from my Devices to fully remove the device record.
Enroll the device back into Jamf Now either via Open Enrollment or Auto-enrollment depending on what is available for the device.
If using Auto-enrollment: follow the steps in Re-enrolling a Computer Using Automated Device Enrollment.
If using Open Enrollment: follow the steps in Enrolling a Mac Using Open Enrollment.
Optional: once the computer is enrolled again re-enable desired security features such as 'Find My' and FileVault.
For more information on Activation Lock Bypass Codes, see Using Activation Lock Bypass in the Jamf Now Documentation.
For more information on FileVault Recovery Keys, see Generating a New FileVault Key for Escrowing with Jamf Now.