Skip to main content
This article moves the devices whose APNs topic differs from the installed certificate topic. Each type of device moves in its own way. To find these devices, see Diagnose devices on another Apple Push certificate.

​
Check the prerequisites

  • The kept certificate is installed: Installed certificate topic, in MDM > Settings > Apple, shows its topic.
  • The enrollment profile cache was purged after the certificate was installed. See Purge the enrollment profile cache.
  • You have the list of devices to move, split by type and enrollment.
Never use the cockpit’s Unenroll action for this migration. It also removes the Primo agent, which Macs need to re-enroll. Only Turn off MDM applies here.

​
Move each device

Turn off MDM removes the MDM profile and keeps the Primo agent on Macs. The migration agent cannot send it yet: ask Primo support to turn off MDM on the devices to move, with their serial numbers.
1

Remove the MDM profile

Remove the MDM profile locally, with a script run by the Primo agent, or wait for Turn off MDM to arrive. [À CONFIRMER : le script de retrait local n’est pas encore dans la bibliothèque de scripts. En attendant, demander au support Primo.]
2

Re-enroll the Mac

The employee follows the guided re-enrollment: they click Install and type their administrator password. [À CONFIRMER : le script de réenrôlement guidé n’est pas encore dans la bibliothèque de scripts.]If the employee has no administrator rights on their Mac, your IT team does this step with them.

​
Verify that a device is migrated

  • In Devices, its APNs topic matches Installed certificate topic. A device is migrated only then.
  • After Turn off MDM and before re-enrollment, its MDM status shows Deactivated.
  • On a Mac, before re-enrollment, profiles status -type enrollment in Terminal shows MDM enrollment: No.
The migration is over when no device shows a topic other than the installed one.

​
Contact

If a device does not move, contact support@getprimo.com with:
  • its serial number, type, and enrollment method
  • its APNs topic and the installed certificate topic
  • what was done on it, and when