Home » Create APNs certificate
Applicable For Endpoint Central MSP 
 
 

Create APNs Certificate

The following workflow diagram explains the steps involved in creating APNs certificate and managing the iOS devices. It is only recommended that you use a common generic corporate e-mail instead of personal e-mail as you need to renew the APNs certificate every year.

If you're using MDM within Endpoint Central, you can configure and manage APNs certificate by navigating to Enroll dropdown in the left pane and select APNs Certificate under Apple.

Ensure you have configured Proxy settings and Mail server settings for this process to work. You should also see to it, this URL : https://creator.zoho.com is added to your domain's exception list, to ensure Endpoint Central has permissions to reach this URL, to process the vendor signed CSR.

Create and upload APNs Certificate

  1. The first step in creating APNs certificate is to download the Vendor Signed CSR. To download a CSR signed by ManageEngine MDM, on the console go to Enrollment tab and select APNs certificate from the Apple dropdown. Click on Download the Vendor Signed CSR signed by ManageEngine MDM.
  2. The Signed CSR, which has been downloaded in step 1, has to be uploaded to the Apple Push Notification portal to create a APNs. Follow the steps mentioned below:
  3. Go to Apple Push Certificate Portal to create the APNs. It is recommended by Apple to use Safari/Google Chrome/Firefox browsers while executing the below mentioned steps. Internet Explorer is not recommended to create APNs certificate.
  4. Sign in using a corporate Apple ID and password. A corporate Apple ID or Apple Account is recommended, as this would negate the consequences of an employee quitting the enterprise after using a personal Apple ID for APNs creation. If your organization does not have an Apple ID, create one from https://appleid.apple.com.
    • It is recommended to use a common organization e-mail address for creating the APNs, instead of using employee e-mail address. If APNs created using an employee mail address is being used, the e-mail used can be changed, during APNs renewal as explained here
    • APNs is valid for one year from the day of its creation. It is recommended to use a corporate Apple ID to create APNs. When you renew the APNs certificate, you have to use the same Apple ID. If you happen to use a different Apple ID, then you have to re-enroll all the managed mobile devices.
  5. Once logged in, choose Create Certificate.
    6. APNs creation step 1
     
  6. After reading terms and conditions Click Accept.
    7. APNs creation step 2
     
  7. Upload the signed CSR that you received at step 1.
    8. APNs creation step 3
     
  8. A new certificate for managing the iOS devices appears in the portal. Download the new Apple signed certificate (MDM_ZOHO_Corporation_Certificate.pem).
    9. APNs creation step 4
  9. On the Endpoint Central web console, click Next to upload the APNs certificate, you have downloaded from the Apple Push Notification portal.
  10. Specify the Corporate Apple ID and address to which notification mails should be sent during APNs expiry.
  11. Click Upload to complete the process.

You have successfully uploaded APNs, you can start enrolling your iOS devices.

Remove APNs Certificate

  1. You can remove the APNs certificate only after all the devices have been unmanaged.
  2. Once the APNs certificate is removed, the details of Apple Configurator profile created using the particular APNs certificate is removed. All iOS devices which are enrolled and are yet to be enrolled are also removed and you can not manage any iOS device until you upload a new APNs Certificate.

You may require to remove APNs certificate in the following scenarios:

During the time of APNs renewal, in case you forget the Apple ID used to create the current APNs certificate, you need to remove the existing APNs certificate and upload a new one. You may also need to upload a new APNs certificate when you change the Apple ID used to create APNs certificate and use a Corporate Apple ID.

This can be done by following the steps mentioned below:

  1. On the web console, click the Enrollment tab and select APNs Certificate from the Apple dropdown in the left pane.
  2. Click the Remove APNs button