Description
Renewing the Automated Device Enrollment (ADE) token ensures seamless integration of Apple Business Manager or Apple School Manager with Jamf Pro, Apple Business Manager for device enrollment.
This token needs to be renewed yearly and it may also be necessary if the password changes for the user that renewed the token last or there is a different syncing issue.
In Jamf Pro, navigate to Settings > Global > Automated Device Enrollment.
Click Public Key on the upper-right side of the page to download the key. Do not open the downloaded
.pemfile and keep it accessible for the next steps.Log in to Apple Business Manager or Apple School Manager.
Click on the username in the lower-left corner and choose Preferences.
Ensure that the resulting page has a 'Your MDM Servers' section.
If the 'Your MDM Servers' section is missing, ensure the Apple Account used to log in has appropriate permissions.
Select the MDM Server that we would like to renew.
Click Edit.
Under MDM Server Settings, either drag/drop the Public Key or click Replace Certificate to select the file from your computer.
Click Save.
Click Download Token located at the top of the page.
A warning will appear: "After downloading a new server token, you will need to upload it to your MDM server." Acknowledge the warning by clicking Download MDM Server Token.
Do not open the downloaded file and keep it accessible for the next steps.
Back in Jamf Pro, navigate to Settings > Global > Automated Device Enrollment.
Click on the name of Automated Enrollment instance we would like to renew.
Click Edit on the lower-right corner of the page.
Click Upload Server Token File.
Choose the .p7m file that we downloaded previously and click Upload.
Click Save in the lower-right corner of the page.
More Resources
The following is a video of the renewal process without using the public key: https://learn.jamf.com/bundle/training-video-shorts-jamf-pro/page/How_to_Renew_a_Device_Enrollment_Token_in_Jamf_Pro.html