Citrix Endpoint Management

MDM options device policy

March 7, 2024

Contributed by:

K C K

The MDM options device policy manages Find My Phone/iPad Activation Lock on supervised iOS devices. For the steps on setting an iOS device to supervised mode, see Deploy devices using Apple Configurator 2.

Activation Lock is a feature of Find My iPhone/iPad that prevents reactivation of a lost or stolen supervised device. Activation Lock requires the user Apple ID and password before anyone can turn off Find My iPhone/iPad, erase the device, or reactivate the device. For the devices that your organization owns, bypassing an Activation Lock is necessary to, for example, reset or reallocate devices.

To enable Activation Lock, you configure and deploy the Citrix Endpoint Management MDM Options device policy. You can then manage a device from the Citrix Endpoint Management console without the Apple credentials of the user. To bypass the Apple credential requirement of an Activation Lock, issue the Activation Lock Bypass security action from the Citrix Endpoint Management console.

For example, if the user returns a lost phone or to set up the device before or after a Full Wipe: When the phone prompts for the Apple App Store account credential, you can bypass that step by issuing the Activation Lock Bypass security action from the Citrix Endpoint Management console.

To add or configure this policy, go to Configure > Device Policies. For more information, see Device policies.

iOS settings

Device Policies configuration screen

Enable Activation Lock: Select whether to enable Activation Lock on the devices to which you deploy this policy. The default is Off.

After you enable Activation Lock by deploying the MDM options device policy: The Security action Activation Lock Bypass appears when you select those devices on the Manage > Devices page and click Security. An Activation Lock Bypass allows you to remove the Activation Lock from supervised devices before device activation without knowing the Apple ID and password of the device users. You can send an Activation Lock Bypass to a device before or after a Full Wipe. For more information, see Bypass an iOS activation lock.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

MDM options device policy

March 7, 2024

Contributed by:

K C K

March 7, 2024

Contributed by:

K C K

MDM options device policy

iOS settings

In this article