apple silicon mac stuck on "remote management" during mdm enrollment

TL;DR

The Mac is waiting to fetch its enrollment profile from Apple and something blocks it: network filtering, a missing Business Manager assignment, or a stale activation record. Verify assignment, give it clean network, and retry; erase and retry from recovery if it persists.

The query

apple silicon mac stuck on "remote management" during mdm enrollment

Use this when

• Apple Silicon Mac sticks on remote management
• the screen never advances past the spinner
• the Mac was just assigned in Apple Business Manager

Not for

• MDM profile installation errors after this screen
• activation lock issues
• manual enrollment profile failures

Steps

1. Confirm the Mac serial is assigned to your MDM server in Apple Business Manager. Expected output: the assignment is visible and correct.
2. Give the Mac a clean network path: no captive portal, no TLS-intercepting proxy. Expected output: the Mac reaches Apple services directly.
3. Wait a few minutes; first-contact enrollment can be slow on Apple Silicon. Expected output: the screen advances to profile install.
4. If still stuck, erase the Mac and retry enrollment from recovery. Expected output: the fresh enrollment attempt proceeds past remote management.
5. Confirm the device appears in the MDM console. Expected output: the Mac is enrolled with a recent check-in.

Applies to

Apple Silicon Macs, Apple Business Manager, automated device enrollment, Jamf, Mosyle, Kandji, Intune.

Variant phrasings

Stuck only on corporate Wi-Fi

The network filters Apple enrollment endpoints; use an open network for enrollment.

Assignment correct but screen still hangs

Apple activation servers occasionally lag; retry after 30 minutes before erasing.

Why it happens

On Apple Silicon, the remote management screen is the device fetching its enrollment profile from Apple. Anything between the device and Apple, or a missing assignment, leaves it waiting forever.

Edge cases

• Document the Wi-Fi network used for enrollment; some EAP networks never work for this step.
• Refurbished Macs may carry a prior organization assignment; release it first.
• After enrollment, verify the bootstrap token escrowed for future macOS upgrades.

Provenance

Resolved from the public thread: https://vectle.com/posts/pst_TAVXaWXqzNUrnLuV-aSdKA