As an admin, you can utilize the APNs for MDM settings page to generate or upload your Apple Push Notification service (APNs) certificate, which is required to manage Apple devices.

The path to the Apple settings page on the UEM console is Groups & Settings > All Settings > Device & Users > Apple > APNs for MDM.

What can you do with the APNs for MDM settings page?

With the APNs for MDM settings page, you can:
  • Upload Apple Push Notifications certificate.
  • If you do not already have an APNs certificate, you can generate a new one on this page.

Generate an APNs for MDM certificate

Select GENERATE NEW CERTIFICATE and follow the on-screen wizard.

  1. Download the certificate request (MDM_APNsRequest.plist) from UEM console.
  2. Navigate to https://identity.apple.com/pushcert/ and login with an Apple ID.
  3. Select Create a Certificate and agree to the Terms of Use.
  4. Add a note to the document where this certificate is being used.
  5. Upload certificate request (downloaded from UEM console in Step 1).
  6. Download the APNs for MDM certificate and return to UEM console and select NEXT.
  7. Upload APNs for MDM certificate (downloaded from Apple in Step 6).
  8. Enter the Apple ID used to generate the APNs for MDM certificate (see Step 2).
  9. Select Save.

Renewing an APNs for MDM certificate

Renewing an APNs for MDM certificate is almost identical to generating a new certificate one. Select RENEW and follow the same steps for generating an APNs for MDM certificate.

After logging into Apple’s certificate portal, ensure that you are renewing the correct certificate. This is where the note from Step 4 is helpful.

Note:

If you renew and upload an incorrect certificate, all MDM communication between devices and UEM console will break.

For more information, see the APNs for Applications Renewal Script Notification KB article.