Renew APNs Certificate

Renew APNs Certificate

This document explains you the steps involved in Renewing APNs certificate. Ensure that you use the same Apple ID which you have used, while creating the APNs for the first time. Always  use a corporate Apple ID than a personal one. If the APNs certificate has expired, then you will no longer be able to manage the iOS devices. In such cases, you would have to remove the APNs certificate and re-enroll the devices to manage them. So it is recommended to renew APNs well in advance before expiry. The APNs should be renewed and uploaded in the Mobile Device Manager Plus server at least a month before it gets expired, so that all the devices would get the renewed APNs certificate. In case you renew the APNs a few days before its expiry and upload it in the Mobile Device Manager Plus server, devices which have not contacted the Mobile Device Manager Plus server to get the APNs updated will have to be re-enrolled.

Note: Ensure that you have configured Proxy settings and Mail server settings for this Renewal process to work. You should also see to it, that this url : is added to your domain's exception list, so that Mobile Device Manager Plus will have permissions to reach this url, to process the vendor signed CSR.

There are 2 stages in renewing an APNs certificate, they are

  1. Creating and signing a CSR
  2. Renewing and Uploading APNs

Creating and signing a CSR

To create and get the CSR signed from  Zoho Corporation, follow the steps mentioned below:

  1. Login to Manage Engine Mobile Device Manager Plus Web Console.
  2. Go to MDM-> Settings -> APNs Certificate
  3. Click the Renew APNs Certificate button, to invoke the renewal process. Renew APNs button will appear 3 months before your APNs expires.
  4. You will be able to download the Vendor Signed CSR if the signing process is complete. By any chance if the signing process fails, then you will have to  download the CSR and send it to  to get it signed manually. The signed file will be mailed back to you.

Renewing and Uploading APNs

  1. Upload the Signed CSR to the Apple Push Notification Portal as mentioned below:
    1. Go to (Apple Push Certificate Portal website) to renew the APNs. Use "Safari/Google Chrome/Firefox" browsers, while executing the below mentioned steps. Internet Explorer is not recommended to renew APNs certificate.
    2. Sign in using the corporate Apple ID and password, that you have used the previous time while creating the APNs certificate.

      Note: Ensure that you use the same Apple ID which you have used while creating the APNs for the first time, else you have to re-enroll all the managed mobile devices. If you have generated more than one APNs certificate using the same Apple ID, then You can refer to the image below to identify the appropriate APNs certificate.

  2. Once logged in, choose "Renew Certificate" by selecting the certificate based on expiry date and UID as explained below. You can verify if the UID is same as the previous APNs certificate which is about to expire in the Mobile Device Manager Plus server.

  4. After reading terms and conditions Click Accept.
  5. Upload the signed certificate that you received from  Zoho Corporation.
  6. A new certificate for managing the iOS devices will appear in the portal.
  7. Select  to download the Apple signed certificate (MDM_ZOHO_Corporation_Certificate.pem).
  8. On the Mobile Device Manager Plus web console, click Next  to upload the APNs certificate, that you have downloaded from the Apple Push Notification portal.
  9. Click Upload to complete the renewal process.
You have successfully renewed and uploaded the APNs certificate, so you can continue managing your iOS devices.


See Also: Device Authentication,Enroll iOS Devices, Enroll devices using Apple Configurator, Enroll Android Devices, Enroll KNOX Devices, Enroll Windows Devices, Self Enrollment,Customize ME MDM App
Copyright © 2005-2015, ZOHO Corp. All Rights Reserved.