Note: re-enrollment is not mandatory. If the device is not re-enrolled, it will lose the ability to be remotely un-locked (the unlock command sent from CEM will be ignored).
Important It is highly recommended to:
Regularly backup your devices
Ensure iCloud backup is configured on iOS and iPadOS devices
Install the XMS 10.11 RP1 or XMS 10.10 RP4 if you are planning to upgrade your devices to iOS/iPadOS 13.1+.
Problem Cause
Apple is tightening security, so Apple has changed the way the unlock token is sent to MDM in iOS/iPadOS 13.1+. Due to the changes, after upgrading an iPhone/iPad to iOS or iPadOS 13.1+, Citrix Endpoint Management may lose the ability to unlock devices which are passcode protected.