iPad supervision fails with "already supervised" or activation lock error when provisioning via Apple Configurator: erase device and retry to resolve

iOS

When provisioning an iPad using Apple Configurator 2, you may see an error stating the device is already supervised by another MDM server, or an Activation Lock screen appears that blocks the setup from completing.

Why this happens

iPads retain supervision metadata from a previous MDM enrollment even after a factory reset performed outside of Apple Configurator 2. Activation Lock engages when a device was previously signed into an Apple ID with Find My enabled, tying the hardware to that account until it is explicitly removed.

Before you begin

This workflow applies only to iPads not enrolled in Apple Business Manager (ABM). If the device is registered in ABM, provision it through the ABM/DEP zero-touch workflow instead. You will need:

A Mac running macOS with Apple Configurator 2 installed
The iPad connected to the Mac via USB
The Apple ID credentials associated with the device, if Activation Lock is enabled

Steps

Confirm the device is not enrolled in ABM. Check with your IT administrator before proceeding. If the iPad is registered in ABM, stop here and use the ABM/DEP provisioning workflow. Attempting to manually supervise an ABM device will conflict with Apple's automated enrollment.
Open Apple Configurator 2 and connect the iPad via USB. Attempt to supervise the device using Actions → Prepare. If the error This device is already supervised by another MDM server appears, continue to the next step.
Erase the device from within Apple Configurator 2. Right-click the device in Apple Configurator 2 and select Actions → Erase. Confirm the operation and wait for the device to reboot. Erasing from within Apple Configurator 2 (rather than from the iPad's Settings menu) is necessary because it clears the supervision record stored in the device's firmware, not just its user data.
Wait for the iPad to reach the Setup Assistant screen. This confirms the erase completed successfully and the device is ready to receive a new supervision profile.
Handle Activation Lock if it appears. If an Activation Lock screen appears during or after the erase, you have two options:
- Apple ID credentials are available: Enter the Apple ID and password associated with the device to dismiss the lock, then continue.
- Apple ID credentials are unavailable: The device cannot be provisioned until Activation Lock is removed. Contact the original Apple ID account owner, or submit an Activation Lock removal request directly to Apple at apple.com. Provisioning cannot continue until this is resolved.
Re-initiate supervision in Apple Configurator 2. With the iPad at the Setup Assistant screen, return to Apple Configurator 2 and run Actions → Prepare again, targeting the Esper enrollment profile. Complete the preparation workflow to apply supervision.
Apply the Esper enrollment profile and complete enrollment. After supervision succeeds, apply the Esper enrollment profile as prompted. Wait for the device to complete the enrollment process. The device will appear in the Esper Console under Devices & Groups once enrollment finishes.

Verify: On the iPad, go to Settings → General → VPN & Device Management and confirm an MDM profile referencing Esper is listed. In the Esper Console, navigate to Devices & Groups and confirm the device is visible with a managed status. The device should appear within 5 minutes of completing the enrollment profile installation.

If this doesn't resolve it

If the device still reports already supervised after a full erase from Apple Configurator 2, the supervision record may be stored in the device's Secure Enclave or the device may have an undisclosed ABM registration. Before contacting support, collect the following:

The exact error message text from Apple Configurator 2
The iPad's serial number (found in Settings → General → About)
A screenshot of Settings → General → VPN & Device Management showing any existing profiles
Confirmation of whether the device appears in your ABM portal

Contact Esper Support with this information so the issue can be investigated further.

Still need help?

If the steps above don't resolve the issue, submit a support ticket with your device model, Android version, Esper Agent version, and a description of what you've already tried — this helps the support team investigate without a follow-up.