How to Renew APNs (Apple Push Notifications) Certificate?

Apple Push Notification (APNs) Certificate Renewal

This document explains the steps involved to renew the APNs certificate. Always use a corporate Apple ID than a personal one. If the APNs certificate has expired, then you can no longer manage the Apple devices. In this case, you have to renew the expired APNs certificate at the earliest to continue managing them. It is recommended that the Apple Push Certificate (APNs) be renewed and uploaded in the Mobile Device Manager Plus MSP server at least a month before it gets expired, to ensure all devices get the renewed APNs certificate. If the APNs certificate renewal is done a few days before the APNs expiration, the devices will receive the renewed APNs once they come in contact with the server.
NOTE: If the APNs is revoked, you only have to renew it to continue managing devices. The devices need not be re-enrolled.

Info Message

    (Not applicable for MDM Cloud)

  • Ensure that is allowlisted on the organization's firewall and any other third-party filter.
  • If you're using MDM within Desktop Central, you can configure and manage APNs certificate by navigating to Enrollment in the left pane and selecting APNs Certificate under Apple.

There are 3 stages in renewing an APNs certificate, they are

  1. Checking APNs certificate expiry date
  2. Create and sign a CSR
  3. Renew and Upload APNs

Checking APNs certificate expiry date

To check the expiry date of the current APNs certificate, follow the steps mentioned below:

  1. On the MDM server, click the Enrollment tab and select APNs Certificate from the Apple dropdown in the left pane.

  2. The APNs certificate details are listed here.

  3. You can check the APNs certificate creation date and time as well as the date and time of expiry.

  4. Moreover, the renew APNs certificate button appears on the MDM console 3 months before expiry.

  5. Apple also mails the registered email ID with a reminder, "Your apple push services certificate will no longer be valid in 30 days", before expiry.

  6. It is recommended to carry out the APNs certificate renewal process before the certificate expires to facilitate seamless management of enrolled devices.

Create and sign a CSR

To create and get the CSR signed from Zoho Corporation, follow the steps mentioned below:

  1. On the MDM server, click the Enrollment tab and select APNs Certificate from the Apple dropdown in the left pane.

  2. Click the Renew APNs Certificate button, to invoke the renewal process. Renew APNs button appears 3 months before your APNs expires.
  3.  APNs certificate renewal on MDM server before expiry

  4. Download the Vendor Signed CSR once the signing process is complete.
  5. APNs certificate renewal by downloading the Vendor Signed CSR

Renew and Upload APNs

Upload the Signed CSR to the Apple Push Certificates (APNs) Portal as mentioned below:

You have successfully renewed and uploaded the APNs certificate, so you can continue managing your Apple devices.

Migration of APNs certificate from one Apple ID to another

In case the login credentials associated with your APNs certificate cannot be remembered or, if you prefer to migrate the APNs certificate from one Apple ID to another, you can raise a ticket with Apple Developer Program Support. You can contact Apple Developer Program Support by phone or web with the Certificate Name, UID, Serial Number, Expiry Date, Old Apple ID (optional) which is readily available on the MDM server.

Changing the E-mail address used for APNs

APNs created using employee e-mail address instead of an organization-based e-mail address, APNs cannot be renewed in the following scenarios:

Thus, it is ideal in having the APNs certificate created using organization-based e-mail address. To change the e-mail address, follow the steps mentioned below:

See Also: Device Authentication,Enroll iOS Devices, Enroll devices using Apple Configurator, Enroll Android Devices, Enroll Knox Devices, Enroll Windows Devices, Self Enrollment,Customize ME MDM App
Copyright © 2021, ZOHO Corp. All Rights Reserved.