This guide describes how to create, renew, or delete an Apple push certificate. You must have a push certificate in Jamf School to manage devices with Jamf School. Devices enrolled prior to May 2, 2017 are managed by a push certificate in Jamf School. To check if your devices are managed by Jamf School, navigate to Organization > Settings > Apple Push Notification Service. If the Push Topic is “com.apple.mgmt.XServer.01ab0995-0663-4e2d-a001-25e9ef3eaf9e”, the devices are managed by Jamf School. You can choose to create your own certificate for future enrollments, but this is not required. If a new certificate is created, enrolled mobile devices will not be able to receive MDM commands unless they are re-enrolled. Apple requires the Apple Push Notification service (APNs) certificate to be renewed every year.
Requirements
To create or renew a push certificate, you need a valid Apple ID (a corporate Apple ID is recommended).
Note: If you are renewing a push certificate that was originally obtained from Apple’s iOS Developer Program (iDEP), you must use the Apple ID for the iDEP Agent account used to obtain the certificate.
Creating an Apple Push Certificate
-
Log in to Jamf School.
-
Click Organization in the sidebar.
-
Click Settings.
-
Click the Apple Push Notification Service payload.
-
Click Create own Certificate.
-
On the pop-up dialog, click Download Certificate Signing Request.
The certificate signing request (.csr) downloads.
-
Open another tab in your browser and navigate to the Apple Push Certificates Portal:
https://identity.apple.com/pushcert
-
Log in to the portal with your Apple ID.
-
Click Create a Certificate.
-
Upload the certificate signing request you downloaded from Jamf School.
-
Click Upload.
-
Click Download.
The Apple push certificate (.pem) downloads.
-
Return to the Jamf School tab in your browser.
-
On the pop-up dialog, upload the Apple push certificate and enter your Apple ID username in the Apple ID field.
-
Click Apply.
Renewing an Apple Push Certificate
Important: If the original Apple push certificate expires, you must manually re-enroll all managed devices.
-
Log in to Jamf School.
-
Click Organization in the sidebar.
-
Click Settings.
-
Click the Apple Push Notification Service payload.
-
Click Renew Push Certificate.
-
On the pop-up dialog, click Download Certificate Signing Request.
The certificate signing request (.csr) downloads.
-
Open another tab in your browser and navigate to the Apple Push Certificates Portal:
https://identity.apple.com/pushcert
-
Log in to the portal with your Apple ID.
-
Click Renew next to the current Jamf School certificate.
-
Upload the certificate signing request you downloaded from Jamf School.
-
Click Upload.
-
Click Download.
The Apple push certificate (.pem) downloads.
-
Return to the Jamf School tab in your browser.
-
On the pop-up dialog, upload the Apple push certificate and enter your Apple ID username in the Apple ID field.
-
Click Apply.
Deleting an Apple Push Certificate
Important: If the original Apple push certificate is deleted, you must manually re-enroll all managed devices.
-
Log in to Jamf School.
-
Click Organization in the sidebar.
-
Click Settings.
-
Click the Apple Push Notification Service payload.
-
Click Delete Push Certificate.
-
Click Delete.