What is required for MDM to escrow a bootstrap token?
Bootstrap Token use requires the Mac to be enrolled through Apple School Manager or Apple Business Manager, which makes the Mac supervised. On supported macOS versions, a secure-token-enabled user login can then generate and escrow the bootstrap token to an MDM service that supports the feature.
Community Discussion