The MDM solution creates its own escrow key, and sends it to Apple servers when it needs to enable or disable Activation Lock for the device.