This guide outlines the step-by-step process for renewing an expiring Apple Push Notification Service (APNS) certificate within the Mobile Guardian Dashboard.
Critical Renewal Guidelines
You must renew your existing certificate using the exact same Apple ID used to create it originally. Do not create a new certificate or allow the existing one to expire. Creating a new certificate or changing Apple IDs will invalidate management tokens and require every enrolled iOS, iPadOS, and macOS device to be manually unenrolled and re-enrolled.
- No Re-Enrollment Required: Renewing the existing certificate maintains communication channels seamlessly without affecting enrolled devices.
- Annual Renewal: APNS certificates are valid for exactly 365 days. Mobile Guardian dispatches automated email reminders to all dashboard administrators prior to expiration.
Step 1: Download the Certificate Signing Request (CSR)
- Log in to the Mobile Guardian Dashboard.
- Navigate to Settings > iOS MDM Settings.
- Click the link to download the Certificate Signing Request (CSR) signed by Mobile Guardian.
- Save the Mobile_Guardian_APNS.csr file to your local computer.
Step 2: Generate the Renewed Certificate in Apple Portal
- Navigate to the Apple Push Certificates Portal.
- Sign in with the Apple ID associated with your active APNS certificate.
- Locate your active certificate under Certificates for Third-Party Servers.
- Tip: Verify the expiration date to confirm you are renewing the correct certificate.
- Click Renew next to the target certificate.
- Click Choose File, select the Mobile_Guardian_APNS.csr file downloaded in Step 1, and click Upload.
- Once the portal confirms the updated expiration date, click Download to save the renewed MDM_Mobile_Guardian_Ltd_Certificate.pem file.
Step 3: Upload the Certificate to Mobile Guardian
- Return to the Mobile Guardian Dashboard under Settings > iOS MDM Settings.
- Click Update/Renew Certificate.
- Click Select Certificate, browse for the downloaded .pem file, and click Update Certificate.
System Status Note: If the dashboard displays a "Waiting for service refresh" message after uploading, it will automatically clear as soon as the background sync process completes on the MDM server.