Mdm Push Certificate
Remember to fill out the account apple id used to issue the certificate originally.
Mdm push certificate. Mdm apns certificates expire yearly. Select intune mdm authority and then click choose i will get a notification that my changes were saved successfully. If youre having trouble downloading the certificate refresh your browser. To manage ios devices you must have an apple push certificate.
Renew apple mdm push certificate. Apple mdm push certificates mdm server tokens and vpp tokens expire 365 days after you create them. Before we look at the renewal process this is a good opportunity to go over the recommended practice for provisioning mdm push certificates from apple to use with intune or with office 365 mdm. Renew the mdm push certificate with the same.
Set up mobile device management mdm in office 365. The mdm push certificate is used to establish a trust relationship between the management service intune and enrolled ios mobile devices. The certificate signing request file is used to request a trust relationship certificate from the apple push certificates portal. Troubleshooting apple mdm push certificate renewal.
The download will provide you with a file named mdm microsoft corporationcertificatepem. Intune for education will alert you when a certificate or token is close to or past its expiration date. Once you have an mdm apns certificate you have the ability to send push notifications to devices that are enrolled in your mdm. The apple mdm push certificate is valid for one year and must be renewed annually to maintain ios and macos device management.
In the intune blade we want to go to device enrollment and then apple enrollment and select apple mdm push certificate. Also as shown below. Go back to office 365 and select next to get to the upload apns certificate page. The certificate is associated with the apple id used to create it.
If you have renewed your apple push notification service certificate and dashboard is reporting that your devices are offline and out of compliance this means that something went wrong with the renewal process and a new certificate was generated rather than an actual renewal. If your certificate expires enrolled apple devices cannot be contacted. Eventually the certificate will expire and needs to be renewed. This will be used completing the renewal back in the azure portal in the configure mdm push certificate blade.
Make sure to renew them to maintain the connection between your intune for education account and apple account. But there are a couple of caveats that you want to keep in mind.