1.Overview
Sophos Mobile needs an Apple Push Notification service (APNs) certificate to manage iPhone, iPad, and Mac devices. The APN certificate is valid for one year.
When the APN certificate expires, the following message will be displayed on Sophos Central Mobile: “Your Apple Push Notification service (APNs) certificate has expired. You must renew it to continue managing Apple devices”.
This article will guide you how to renew the APN certificate, as well as how to determine the correct certificate to renew.
2. Instruction
Step 1: Download Certificate singing request.
Login Sophos Central Admin > Mobile > Setup > Apple Setup > APNs.
You need to record this Topic sequence to determine the correct renewal of the certificate.
Note: If renewing the wrong certificate you will have to re-enroll iOS devices due to the incorrect original certificate.
Click the APNs certificate wizard.
Select Renew my APNs Certificate. Click Next.
Click Download certificate signing request.
You will download a file called apple.csr.
Step 2: Renew certificate on Apple portal.
After downloading the apple.csr file. Click Next.
Sophos Mobile stores and displays the Apple ID used to generate the initial APN certificate.
You need this ID to sign in to the Apple portal. Click Next.
Click Renew certificate on the Apple portal.
Enter the App ID above. Click the arrow sign.
In the Apple Portal, it is important that you choose the correct APNs certificate to renew. If you renew the wrong certificate, you may need to re-enroll all iPhones, iPads, and Macs.
In the list of APN certificates, click the certificate “i” icon next to the first certificate.
You check the UID to see if it matches the Topic sequence in step 1. If not, click Cancel.
Continue to select the second certificate and check the UID information. If it matches Topic, then this is the right certificate to renew.
Click Renew the second certificate from the top, when you have checked the UID and Topic.
Step 3: Upload certificate signing request.
After clicking Renew, the Renew Push Certificate panel appears, select Choose file.
Select the apple.csr file you just downloaded in
Click Upload.
Click Download.
Step 4: Upload Renew APNs Certificate
Go back to step 2, click Next.
Click Upload Certificate.
Select MDM_Sophos Limited_Certificate .pem file downloaded in step 3.
After uploading check “Expiration date” to see the expiration date in 1 year. Click Save.
Leave a Reply