Steven P.

In my testing, I wasn't able to get `UnlockToken` to populate in the database. I downloaded the profile with the [Get manual enrollment profile](https://fleetdm.com/docs/rest-api/rest-api#get-manual-enrollment-profile) API endpoint from my test server,...

> I'm not sure if `beatrix` automatically enrolls these hosts via Apple Business Manager (ABM) or manually enroll via profile from the /enroll page or both. The `beatrix` CSM may...

Still waiting on an iOS test device, but `beatrix` confirmed they use ABM.

@noahtalerman got it to work with an iPad. Here's the order of operations: 1. Sign in to the mysql database 2. Get the host info using `SELECT id, serial_number, TO_BASE64(unlock_token)...

> [@spalmesano0](https://github.com/spalmesano0) would it be possible to make a video demo to share with `customer-beatrix` to share the interim solution? @bettapizza yes. Is this urgent for them?

When the database is accessed for the customer, we should be able to provide every unlock token at one time. But, if there are new devices that are enrolled later,...

@bettapizza Took me a couple of tries to get the recording right, but [here](https://drive.google.com/file/d/1RADYKynB2UDSiJExB5fNzX1LouDjRuzX/view?usp=sharing) it is! 🙂 This link is only available to you and Matt for now. Here's the...

Summary: 1. Customer requests unlock tokens from Fleet support. 2. Customer runs through the steps [outlined here](https://github.com/fleetdm/fleet/issues/27646#issuecomment-3429669558).

Related to #36559. Not sure if these are the same.

@lukeheath Adding P1 as `customer-fiorella` is having an issue with FileVault PRK escrow on 100+ hosts that looks very similar to this issue. [Slack thread](https://fleetdm.slack.com/archives/C08KYP9L8SY/p1759530884384839) for context. cc @ddribeiro