Skip to main content
Solved

How does one send 'Allow Activation Lock' command?


Forum|alt.badge.img+21
  • Valued Contributor
  • 321 replies

I have not been able to find a way to send the 'Allow Activation Lock' command to supervised devices. Supervised devices are reporting the bypass code with inventory, but Activation Lock is not enabled if these devices are restored using Recovery Mode.

Here are the relevant commands from Profile Manager:

external image link

external image link

Best answer by jcarr

I think this is what I was looking for:

https://jamfnation.jamfsoftware.com/article.html?id=366

View original
Did this topic help you find an answer to your question?

8 replies

wakco11
Forum|alt.badge.img+9
  • Valued Contributor
  • 146 replies
  • April 3, 2014

Personally, I'm more interested in the "Clear Activation Lock" option there.


kevinmwhite
Forum|alt.badge.img+21
  • Contributor
  • 11 replies
  • April 7, 2014

Unfortunately, this new feature of CasperSuite 9.3 isn't well documented yet (sigh).

However, in my testing it appears that the JSS (v9.3+) automatically collects the Activation Lock Bypass Code. You can view the Activation Lock Bypass code in the Management Tab of the mobile device's inventory record.

Further, I also discovered in my testing that I can enable activation lock on Supervised devices. (The default for Supervised devices is that they cannot enable Activation Lock without being allowed by the MDM.) Thus, the JSS must also automatically pass down the Allow Activation Lock command to the iOS device if the Bypass Code was successfully collected.

What I haven't tested is the last bit of this puzzle, wherein you would use the Activation Lock Bypass Code. The idea of this whole system is that when you need to wipe and reactivate an iOS device, you can enter the Bypass Code instead of the user's Apple ID credentials to clear the Activation Lock during Setup Assistant.

It would seem that the Profile Manager implementation of this allows you to decide if you want to send Activation Lock optionally instead of automatically sending it. On the other hand, I can't seem to find the ability to Clear Activation Lock in CasperSuite 9.3, so perhaps that feature is missing. Though I'd argue it's largely unnecessary given that the inventory should contain the Activation Lock Bypass Code.


Forum|alt.badge.img+21
  • Author
  • Valued Contributor
  • 321 replies
  • April 9, 2014

For Supervised devices, "Clear Activation Lock" isn't required until after the "Allow Activation Lock" command has been sent. Activation Lock is not enabled on a Supervised device until that command has been received.

This is also a moot point for non-Supervised devices, as non-Supervised devices do not generate an Activation Lock bypass code.


Forum|alt.badge.img+21
  • Author
  • Valued Contributor
  • 321 replies
  • Answer
  • April 28, 2014

I think this is what I was looking for:

https://jamfnation.jamfsoftware.com/article.html?id=366


wakco11
Forum|alt.badge.img+9
  • Valued Contributor
  • 146 replies
  • May 7, 2014

And this post describes what to do with the Activation Lock Code, once you have it:

https://jamfnation.jamfsoftware.com/discussion.html?id=10096#responseChild59361


Forum|alt.badge.img+4
  • Contributor
  • 15 replies
  • August 9, 2016
  1. Generate Code in MDM
  2. At the white screens of the setup leave the Apple ID Email blank use the bypass code in the password section. All capitals no dashes.

It will work, I just did it!


Forum|alt.badge.img+5
  • Contributor
  • 63 replies
  • November 16, 2016

@theelysium is right! This method works, i just did it also.

Thanks!


Forum|alt.badge.img+4
  • Contributor
  • 15 replies
  • November 16, 2016

I do it all the time!


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings