How to set up an Apple push certificate

googleTo use advanced management with Apple iOS devices, you need an Apple push certificate. The certificate establishes a trusted connection between iOS devices and your organization's domain. This article describes how to set up the Apple push certificate. Note that these certificates need to be renewed annually.


Apple ID

You will need an Apple ID that uses the same email address as your Google admin account.

 

Create a new certificate

Start by logging on to your Google Admin account.

  1. Go to Google Admin.
    1. In the left pane, go to Devices > Mobile and endpoints > Settings > iOS settings.
    2. Expand the Apple Certificates section.
    3. Click the Setup New Certificate link.
    4. Under Certification Request, click Get CSR.
    5. Save the certificate signing request (.csr) file to a convenient location where you can access it later.
  2. From your Admin console, click Apple Push Certificates Portal.
    1. Sign in with your Apple ID and password.
    2. Click Create a Certificate and accept the terms of use.
    3. Click Choose File and select the certificate signing request (.csr) file you saved earlier.
    4. Click Upload.
    5. Apple accepts the request and displays a confirmation page with your service type, vendor domain, and the expiration date for this certificate.
    6. Click Download and save the signed certificate (.pem) file.
  3. Go back to the Admin console.
    1. Under Enter Business Apple ID, enter the Apple ID you used to create the certificate.
    2. Click Upload Certificate and select the certificate (.pem) file you saved from the Apple Confirmation page.
    3. Click Save & Continue.

The system verifies and uploads the signed certificate. If you have problems, make sure the signed certificate you submitted is the one you saved in step 1. If you find multiple signing requests on your system, delete them all and start again.

 

Renewing an existing certificate

Start by logging on to your Google Admin account.

  1. Go to Google Admin.
    1. In the left pane, go to Devices > Mobile and endpoints > Settings > iOS settings.
    2. Expand the Apple Certificates section.
    3. Click the Renew Certificate link.
    4. Click the Get CSR button to download the Push Notification Certificate.csr file.
  2. Sign in to the Apple Push Certificates portal with your Apple ID account.
    1. Click the Renew button.
    2. Click the Choose file button and browse for the Push Notification Certificate.csr file that you just downloaded.
    3. Click Upload.
    4. On the Apple Push Certificates portal, you will see that your certificate is now active.
    5. Click the Download button to download the MDM_ Google LLC (Ent)_Certificate.pem
  3. Go back to the Google Admin page.
    1. In the Finish APNS Certificate setup section, click the Upload Certificate button, and browse to .pem file that you just downloaded from Apple.
    2. Click Save and continue.
    3. Click Finished.

Your existing certificate should now be valid for another 12 months.

 

Thanks for visiting,
Steven