Activation Lock

iOS

Related Video: Supervised Mode: iOS

The following features can help manage against activation lock (i.e., an inaccessible phone) once a device is returned by an employee.

Supervised Mode
By default, a device in supervised mode will not register with activation lock. Even if ‘Find My iPhone’ is enabled on the device, activation lock is disabled. See Supervised Mode.

Allow Activation Lock While Supervised
In KACE Cloud MDM, an admin can enable or disable the security setting that allows supervised devices to register with activation lock. While there is an added security benefit to enabling the feature, there is potential for a supervised device to become inaccessible to the organization.

To manage this setting:

  1. Go to the Libraries tab.
  2. Choose Option Sets.
  3. Select an iOS Option Set.
  4. In the right panel, scroll to the Activation Lock section.
  5. Select Enable, Disable or Device Default, then click Save.

Activation Lock Bypass Code
Before resetting a device, an admin should ensure that activation lock is disabled. If activation lock isn’t disabled before device reset, an activation lock bypass code can be used as a password.

To locate the activation lock bypass code:

  1. Go to the Devices tab in top navigation.
  2. Select a device.
  3. In the right panel, select General.
  4. Scroll to the Security section to locate the 30-character bypass code.