Renewing Apple Push Certificates

https://support.addigy.com/hc/en-us/articles/4403542434707-Renewing-Apple-Push-Certificates 

 

 

 Renewing Apple Push Certificates 

 

 

 Apple Push Certificates expire after one year and need to be manually renewed. This article explains how to renew your certificate   with Addigy. 

 If the Push Certificate has already expired , please see  FAQ: My Push Certificate Expired . 

 Similar to when creating a new certificate, the renewal process requires you to log into Apple's Push Certificate portal. You must have access to the Apple ID that was used to create the cert initially. 

 How to renew your Apple Push Certificate with Addigy: 

 

 

 

 First, navigate to  Account > MDM Settings , find the certificate you'd like to renew, and make a note of the APN Topic. 

 Open the actions dropdown for the certificate and select  Renew  to open the Renew Certificate window. 

 The pop-up provides the CSR you'll need to renew the certificate (the same CSR that was used to create it). Download the  AddigyCSR.plist  and go to the  Apple Push Certificate website  ( you'll have to log in with the same Apple ID that was used to create the cert originally ) 

 After logging in with the Apple ID, find which certificate you are renewing. To ensure the push certificates match, you can click on the blue   button and reference the  Subject DN  (specifically, the string after " CN=APSP: "). This Subject DN should match the  APN Topic  shown in the  Account > MDM Settings  page. Follow this check for each certificate until you find a match. If there is no match, the Apple Push Certificate in Addigy was created under another Apple ID.

 If you cannot access the Apple ID that managed the push certificate OR you do not know which Apple ID managed the cert, you can reach out to Apple for further assistance. For steps on what is needed for this process, please reference  this great article  from Rich Trouton @ DerFlounder. 

 

 After finding a match, click the  Renew  button. From here, click  Choose File  and select the plist file downloaded from Step 3. 

 

 You will now be able to download the renewed certificate .pem file and upload it into Addigy via the Renew Certificate Window in Step 2. 

 If you see the error: "Error: There is a problem with the certificate’s topic (400)" returned when uploading, please review  this article  to see why. 

 

 

 Finally,  Save  and then verify that the  Updated  date column of the certificate has changed. 

 

 

 

 Renaming Apple Push Certificate 

 In  Account > MDM Settings >  Click the three dots under  Actions >   Info . The Info tab will show you all of the attributes of the Apple Push Certificate including the serial numbers, the topic, and the expiration date. It also allows for the certificate to be renamed by providing a  Rename  button next to the Push Certificate name.