Skip to main content

Renew the Automated Device Enrollment server token in Jamf Pro

This article provides steps to renew the Automated Device Enrollment (ADE) server token in Jamf Pro using the Public Key.

Description

Renewing the Automated Device Enrollment (ADE) token ensures seamless integration of Apple Business or Apple School Manager with Jamf Pro for device enrollment.

This token needs to be renewed yearly and it may also be necessary if the password changes for the user that renewed the token last or there is a different syncing issue.

Renewing Automated Device Enrollment Server Token with Apple Business

  1. In Jamf Pro, navigate to Settings > Global > Automated Device Enrollment.

  2. Click Public Key on the upper-right side of the page to download the key. Do not open the downloaded .pem file and keep it accessible for the next steps.

  3. Log in to Apple Business.

  4. Select Devices at the top of the page and click Management Services.

    • If this option does not appear, ensure the Apple Account logging in has the appropriate permissions in Apple Business.

  5. Select the MDM Server you would like to renew.

  6. Click ... and select Edit.

  7. Click Replace Certificate and upload the .pem file downloaded from Jamf Pro.

  8. Click Save once it completes uploading.

  9. Click ... and select Download Token.

  10. Click Download Token again when prompted to confirm you want to download a new token.

    • Do not open the downloaded file and keep it accessible for the next steps.

  11. Back in Jamf Pro, navigate to Settings > Global > Automated Device Enrollment.

  12. Click on the name of Automated Enrollment instance we would like to renew.

  13. Click Edit on the lower-right corner of the page.

  14. Click Upload Server Token File.

  15. Choose the .p7m file that we downloaded previously and click Upload.

  16. Click Save in the lower-right corner of the page.

Renewing Automated Device Enrollment Server Token with Apple School Manager

  1. In Jamf Pro, navigate to Settings > Global > Automated Device Enrollment.

  2. Click Public Key on the upper-right side of the page to download the key. Do not open the downloaded .pem file and keep it accessible for the next steps.

  3. Log in to Apple School Manager.

  4. Click on the username in the lower-left corner and choose Preferences.

  5. Ensure that the resulting page has a 'Your MDM Servers' section.

    1. If the 'Your MDM Servers' section is missing, ensure the Apple Account used to log in has appropriate permissions in Apple School Manager.

  6. Select the MDM Server you would like to renew.

  7. Click Edit.

  8. Under MDM Server Settings, either drag/drop the Public Key or click Replace Certificate to select the file from your computer.

  9. Click Save.

  10. Click Download Token located at the top of the page.

  11. A warning will appear: "After downloading a new server token, you will need to upload it to your MDM server." Acknowledge the warning by clicking Download MDM Server Token.

    1. Do not open the downloaded file and keep it accessible for the next steps.

  12. Back in Jamf Pro, navigate to Settings > Global > Automated Device Enrollment.

  13. Click on the name of Automated Enrollment instance we would like to renew.

  14. Click Edit on the lower-right corner of the page.

  15. Click Upload Server Token File.

  16. Choose the .p7m file that we downloaded previously and click Upload.

  17. Click Save in the lower-right corner of the page.

Related Articles
Enrolling Devices Using Account-Driven User Enrollment in Jamf Pro
Enrolling Mobile Devices via Jamf Pro User-Initiated Enrollment URL
Jamf Pro QuickAdd Package Downloads When Trying to Enroll via User-Initiated Enrollment Link
Renew your MDM Push Notification Certificate in Jamf Pro
Renew the Automated Device Enrollment Token in Jamf School
Did this answer your question?