Customer Wiki: VMWar ...

*Instructions below is to renew the Apple Server token for Automated Device Enrollment Program (ADE) or  formerly "DEP" deployments on Workspace ONE.

Note: Your Apple Server token file is valid for one year, after which time you must renew it. It is often necessary to renew the Apple Server token if/when Apple Business Manager (ABM) loses its connection to the Workspace ONE UEM Console.

Important: Ensure that the MDM server name in ABM matches the token name from the DEP configuration within the Console when generating the new token, otherwise the token will not match, and the renewal will not be successful. You might see a warning like "Please login to Apple Business Manager and review the updated Terms and Conditions". See Image 1 for illustration.

 Within the Workspace ONE UEM Console, navigate to Groups & Settings > All Settings > Devices & Users > Apple > Device Enrollment Program. Take note of the Apple Server token details such as the expiration date and the name of the specific token that should be renewed.

Apple Business Steps

1. Open Apple Business.
2. Sign in with an Apple Business account that has permissions to manage device management services.
3. Go to:

Devices > Management Services

4. Select the existing Workspace ONE UEM / AirWatch / Omnissa device management service.
5. Download the new Service Token.

Back in Workspace ONE UEM

1. Return to the Automated Device Enrollment token renewal screen.
2. Upload the downloaded Apple server token, usually a .p7m file.
3. Click:

Save

4. Confirm the token expiration date is updated.
5. Sync devices.

For manual ADE synchronization, Omnissa documents the path:

Devices > Lifecycle > Registration
Add > Sync Devices

Use Fetch All Devices only as a final refresh option if normal sync does not bring devices in, because it synchronizes all devices assigned to the token, including devices already synchronized.

Validation

Confirm:

- ADE token expiration date is updated.
- Last Successful Sync updates.
- Sync Devices completes successfully.
- Newly assigned Apple Business devices appear in Workspace ONE UEM.
- ADE enrollment profile assignment remains correct.

Image 1 - Device Enrollment Program screen