Renew Apple Device Enrollment server tokens

Supported editions for this feature: Frontline Standard; Enterprise Standard and Enterprise Plus; Education Standard, Education Plus, and Endpoint Education Upgrade; Cloud Identity Premium. Compare your edition

When you manage company-owned iOS devices through Google endpoint management and Apple Device Enrollment, you created an Apple server token that you must renew yearly.

Before you begin

• You need access to the MDM Server that the previous server token was generated for. If you can't access it, you can create a token for another MDM Server. However, you must move all the devices from the old MDM Server to the new one and users must re-enroll their devices.
• Don’t reload your browser window or close any pages while you renew the token.

Renew your server token

You must be signed in as a super administrator for this task.

1. Sign in to your Google Admin console.

   Sign in using an account with super administrator privileges (does not end in @gmail.com).

2. In the Admin console, go to Menu  DevicesMobile & endpointsSettingsiOS.
3. Click Apple certificatesRenew Enrollment.
4. Click Get public key. The public key downloads to your device.
5. Open Apple Business Manager or Apple School Manager and sign in with your business Apple ID. In the Device Enrollment Program section:
   1. Click Manage Servers.
   2. Open the MDM Server that has the managed devices.
   3. When prompted, upload the public key you downloaded from the Admin console.
   4. Download the server token from Apple.
6. Return to the Admin console.
7. Under Business Apple ID, enter the Apple ID you used to get the token.
8. Click Upload Server Token, select the token you downloaded from Apple, and click Open.
9. Click Save & Continue.
10. The token and its expiration date are now listed on the settings page. Set a calendar reminder to renew the token before it expires.

Related topics

Set up company-owned iOS device management