Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Introduction

...

Info
titleApple Push Notification Service Update

Apple has announced a new protocol must be used for the Apple Push Notification service as of March 29th, 2021 as well as a new root certificate must be incorporated in the MDM solution.

In CapaInstaller 6.1 both have been implemented. To make installations simpler and easier to maintain, Apple Push Certificate in CapaInstaller 6.1 is uploaded to CapaInstaller's s Cloud service - the certificate is no longer installed on MDM server(s). The certificate is uploaded to CapaInstaller MDM Portal.

...

 Request and generate or update an Apple Push Certificate

StepAction
1

In the "System Administration" module, select menu item "Actions", then select "Apple Push Certificate request.."

2

Wizard starts, press the "Next" button to proceed

3

If the "Verify OpenSSL" isn't status Passed go to Install OpenSSL

If the "Verify access to Capainstaller certificate request signing service" isn't status passed you must:

First, try to open a browser on the machine from which you run this wizard. Open the following URL: http://certservice.capainstaller.com:7000/status

Ensure that port 7000 is opened from the CapaInstaller server out to the internet. The certificate request signing service is placed on a Capainstaller server at port 7000.

4

Select an output folder. Press the "Start" button, and click "Next" when the certificate request is finished

5Now you have created the certificate request which has been signed by CapaSystems and stored in the previously selected output folder
6

Press the "Open Apple Push Certificates Portal"

7

Log in with your Apple Push Certificates Portal account

8

Press the "Renew" tab

9

If this disclaimer appears then just accept it

10

Press "Choose File" and select the file named: plist_encoded, it is stored in the output directory, and click "upload"

11

Now you should get the real certificate as shown in the picture.

First, you should open your calendar and insert an alert that will expire a month before the certificate's expiring date. This will help you recall when to get a new certificate.

12

You should now press the "Create Certificate File" button in the CapaInstaller certificate Wizard in order to continue the certificate issuing process.

13

In the "Apple certificate File" select the certificate downloaded from the Apple push Cert page. (Named: MDM_something.pem)

When that is done, press the start tab and then click next

14

Now you have the Apple Push Certificate in your output folder (File extension is pfx)

15

A new Apple Push Certificate has been generated and uploaded to CapaOne.

16

Logon to https://mdm.capaone.com and select Certificates

17

Check the certificate is uploaded and valid

...