Updating the ADE Token

This guide details how administrators can renew or update the Automated Device Enrollment (ADE) token within the Mobile Guardian Dashboard using Apple Business Manager.

ADE Token Renewal

Apple requires MDM server tokens to be renewed annually to maintain secure, automated device enrollment. Updating your DEP token ensures newly purchased corporate iOS devices continue to enrol automatically into Mobile Guardian upon initial unboxing and setup.

Step-by-Step DEP Token Renewal

Download Public Key from Mobile Guardian:

• Log in to the Mobile Guardian Dashboard, navigate to Settings > iOS MDM Settings, and click the link to download your organisation's Public Key file to your local computer.

Upload Public Key to Apple Business Manager:

• Log in to Apple Business Manager using your corporate Managed Apple ID with Administrator or Device Enrollment Manager privileges.

Locate MDM Server Entry:

• Click Device, select Management Services, and navigate to Your MDM Servers. Select your active Mobile Guardian MDM server from the list.

Upload Public Key & Download Server Token:

• Click the kebab menu in the top right, select Edit, 

• Select Replace Certificate and upload the Public Key file downloaded in Step 1. Click Save.

• Click Download Server Token to retrieve the updated .pem or .p7m token file from Apple.

Update Token in Mobile Guardian:

• Return to the Mobile Guardian Dashboard under Settings > iOS MDM Settings. Click Clear server token. 

• Upload the new server token file downloaded from Apple Business Manager.

Ensure your Apple Device Enrollment Settings are correct.

Critical Annual Maintenance Note

ADE server tokens expire exactly 365 days after generation. Failure to update the token before expiration will temporarily suspend zero-touch device enrollment for new iOS and macOS hardware assets.