The cryptographic identifier that binds a supervised iPhone to an MDM operator. Our supervision certificate is installed on your device at enrollment and validated on every policy check. A device cannot be "stolen" from our MDM — the certificate only works with our management server, and removing it requires either physical access to our DEP account or an explicit transfer request from us.
Related terms
This term is connected to the broader supervised iPhone ecosystem. See the [full glossary](/glossary/) or return to [how it works](/how-it-works) for context.