- Jamf Nation Community
- Products
- Jamf Pro
- Re: Apple Push Certificate renewal
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Apple Push Certificate renewal
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 06-21-2021 09:48 AM
Our organization's Apple Push Certificate is expiring soon. I was able to renew the cert but when I try to upload the new one it says that the Identifier is different than the old cert. Will this break the push cert that has ben pushed out previously on all our deployed machines? I believe the identifier is different because I was not the one who created the current push cert. Will using my Apple ID break the current push cert? Thanks!
Labels:
- Labels:
-
Configuration
7 REPLIES 7
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 06-21-2021 10:15 AM
You MUST use the same Apple ID that was initially used, or you will need to re-enroll every device in your fleet. If you don't have access to that Apple ID, contact Apple with the identifier of the current APNs certificate. They can help you recover access with some supporting documentation.
Reply
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 06-21-2021 11:03 AM
Thank you for the help! Unfortunately, the previous admin renewed the old cert under his personal email so I had to switch it back to a managed account. How would I go about getting all machines to renew their Push certs? Thanks!
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 06-21-2021 11:08 AM
You can't, they will all need to be re-enrolled, either manually or via DEP. I'd really recommend getting in touch with Apple, it's entirely possible to gain access to the old APNs certificate with the correct documentation and have it transferred to your new managed Apple ID.
See this thread for more information.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 06-22-2021 08:39 AM
Reach out to Apple Enterprise Support -- We did this recently - they were able to move the cert from the Apple ID used to a generic Apple ID for us. Note: Only difference here is our Cert was not expired yet, but you can ask if they can still move it over.
No impact to end users.
Reply
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 06-22-2021 10:36 AM
Make sure you reach out to Apple right away. If your APNS certificate expires before you get this resolved, you will need to re-enroll all your devices again as well.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 06-22-2021 11:08 AM
Apple can still move the certificate after it's expired, and then you'll be able to renew it under the new Apple ID they move it to. I went through this just last week.
Reply
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 07-17-2023 03:31 PM
I just successfully renewed our organization's Apple Push Certificate that was expiring in 30 days. At first I was getting an error "certificate signature verification failed" when uploading a signed CSR certificate in Apple's push certificate portal. The fix that worked for my situation was to select the option in Jamf Pro to "download CSR and sign later" at first I was selecting to "download a signed CSR" and it was giving me the failed certificate.
