Push Certificates
Jamf Pro requires a valid push certificate to communicate with Apple Push Notification service (APNs). This communication is required to do the following:
-
Send macOS configuration profiles and macOS remote commands to computers.
-
Distribute Mac App Store apps to computers.
-
Enroll and manage iOS devices.
An assistant in Jamf Pro guides you through the following steps to create a new push certificate (.pem) and upload it to Jamf Pro:
-
Obtain a signed certificate signing request (CSR) from Jamf.
-
Create the push certificate in Apple’s Push Certificates Portal by logging into the portal, uploading the signed CSR obtained from Jamf Nation, and downloading the resulting push certificate.
-
Upload the push certificate to Jamf Pro.
If you have a push certificate in .p12 format, you do not have to create a new one. You can simply upload the .p12 file to Jamf Pro.
You can also use Jamf Pro to renew your push certificate when needed.
Uploading a push certificate to Jamf Pro automatically enables the Enable Push Notifications setting in Jamf Pro's Security settings.
Creating a Push Certificate
A valid Jamf ID. To create a Jamf ID, go to: https://id.jamf.com/CommunitiesSelfReg
A valid Apple ID. (A corporate Apple ID is recommended.) If you are renewing a push certificate that was originally obtained from Apple's iOS Developer Program (iDEP), you must use the Apple ID for the iDEP Agent account used to obtain the certificate.
Uploading a Push Certificate (.p12)
If you have a push certificate that’s in .p12 format, you can upload it to Jamf Pro.
You will only have a push certificate in .p12 format if the CSR used to create the certificate was not issued by Jamf Pro.
- In Jamf Pro, click Settings
in the top-right corner of the page.
- In the Global Management section, click Push Certificates
.
- Click New
.
- Select Upload push certificate (.p12).
- Follow the onscreen instructions to upload the push certificate.
Renewing the Push Certificate
It is recommended that you do not delete the existing push certificate from Jamf Pro when renewing a push certificate.
A valid Jamf ID. To create a Jamf ID, go to: https://id.jamf.com/CommunitiesSelfReg
A valid Apple ID. (A corporate Apple ID is recommended.) If you are renewing a push certificate that was originally obtained from Apple's iOS Developer Program (iDEP), you must use the Apple ID for the iDEP Agent account used to obtain the certificate.
Deleting the Push Certificate
Deleting the push certificate from Jamf Pro disables communication between Jamf Pro and APNs. This prevents Jamf Pro from sending macOS configuration profiles and macOS remote commands to computers, and managing iOS devices. In addition, without a push certificate, Mac App Store apps cannot be distributed to computers. To restore these capabilities, you must create a new push certificate, and then re-enroll your computers and mobile devices with Jamf Pro.
- In Jamf Pro, click Settings
in the top-right corner of the page.
- In the Global Management section, click Push Certificates
.
- Click the push certificate and click Delete
. Then click Delete again to confirm.