Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/Mobile/help/en-us/index.html?contextId=renew-apns-cert

Renew APNs certificate

This topic explains how to renew a certificate for the Apple Push Notification service (APNs) you uploaded to Sophos Mobile that is about to expire.

To create and upload a new certificate, see Create APNs certificate.

Warning

In the Apple portal, it is important that you select the correct APNs certificate for renewal. If you renew the wrong certificate, you might need to re-enroll all iPhones, iPads, and Macs.

Renew APNs certificate

  1. On the menu sidebar, click Setup > Apple setup, and then click the APNs tab.
  2. Click APNs certificate wizard.
  3. On the Mode page, click Renew my APNs certificate.

  4. On the CSR page, click Download certificate signing request.

    This saves the certificate signing request file apple.csr to your local computer.

  5. On the Apple ID page, copy the email address of the Apple Account (formerly Apple ID) used to create the initial APNs certificate.

  6. On the Certificate page, click Renew certificate on the Apple portal.

    This opens the Apple Push Certificates Portal.

  7. Use the email address you copied from the assistant's Apple ID page to sign in to your Apple Account.

  8. In the Apple Push Certificates Portal, click Renew next to your Sophos Mobile APNs certificate.
  9. Upload the certificate signing request file apple.csr you prepared earlier.
  10. Download the .pem APNs certificate file and save it to your computer.
  11. On the Upload page, click Upload certificate and then browse for the .pem file that you received from the Apple Push Certificates Portal.
  12. Click Save.

Warning

If the following message is shown, you are not renewing the correct certificate:

The topic of the new certificate does not correspond to the old one. If devices have been set up with the previous certificate, they have to be set up again. Do you really want to save your changes?

This message indicates that you are about to create a new APNs certificate with a different identifier. If you confirm the message, all existing iPhones, iPads, and Macs are not manageable any more and you have to re-enroll them.

For information on how to select the correct certificate, see Identify the correct APNs certificate for renewal.