Apple Re-enrollment — Clean Install

Important

Read Before Starting If you are re-enrolling an Apple device and you do not want it to keep the same apps, groups, and configurations as before, you must delete the device from CapaOne before starting the enrollment again.

Re-enrolling device without existing apps and configurations

1. In CapaOne, find the iPad/iPhone under Apple → Endpoints.
2. Open the device page.
3. Click the three dots and select Request → Wipe device.

After this the device will reset to factory settings and is ready to be enrolled again. When the Device is enrolled again it will be a clean install.

Wipe device is available only for supervised devices. For an unsupervised device, use the procedure in If the device certificate is broken: delete the endpoint data in CapaOne and erase the device from its own settings.

If the device certificate is broken

A device whose MDM certificate has broken or expired can no longer receive the remote Wipe command, so the procedure above never completes. A common symptom is DEP re-enrollment that hangs at the Entra ID sign-in step. Erase the device by hand instead:

1. In CapaOne, find the device under Apple → Endpoints and open its device page.
2. Click the three dots and select Delete endpoint data. This removes the endpoint record in CapaOne without needing a working connection to the device.
3. On the device itself, go to Settings → General → Transfer or Reset iPhone/iPad → Erase All Content and Settings.
4. Enroll the device again, through DEP or with an enrollment profile. See Apple Enrollment.

The device now appears in CapaOne as a newly enrolled endpoint.

Deleting endpoint data is not reversible

Delete endpoint data removes the device’s history in CapaOne. The device re-enrolls as a fresh device and does not keep its previous groups, apps, or configurations. If you want to keep those and the certificate still works, use Apple Re-enrollment — Keep Profiles and Apps instead, which does not delete the endpoint.

If you hit this certificate error across many devices at once, the cause is more likely an Apple Business Manager or DEP token problem than a fault on each device. See Apple DEP Integration.

Related

• Apple Re-enrollment — Keep Profiles and Apps — re-enroll while keeping groups, apps, and configurations
• Apple Enrollment — enroll an Apple device from scratch
• Apple DEP Integration — connect Apple Business Manager and renew the DEP token
• Apple Endpoints Overview — find a device and its available actions
• Integrate CapaOne with Entra ID — the sign-in step DEP enrollment depends on