Page Comparison

In the "System Administration"  menu "Actions", you will find the "Apple Push Certificate request.."

Wizard starts, press the "Next" button to proceed

If the "Verify OpenSSL" isn't status Passed go to Install OpenSSL

If the "Verify access to Capainstaller certificate request signing service" isn't status passed you must:

First, try to open a browser on the machine from which you run this wizard. Open the following URL: http://certservice.capainstaller.com:7000/status

Ensure that port 7000 is opened from the CapaInstaller server out to the internet. The certificate request signing service is placed on a Capainstaller server at port 7000.

Select an output folder. Press the "Start" button, and click "Next" when the certificate request is finished

Press the "Open Apple Push Certificates Portal"

Login with your Apple Push Certificates Portal account

Press the "Renew" tab

If this disclaimer appears then just accept it

Press "Choose File" and select the file named: plist_encoded, it is stored in the output directory, and click "upload"

Now you should get the real certificate as shown in the picture.

First, you should open your calendar and insert an alert that will expire a month before the certificate's expiring date. This will help you recall when to get a new certificate.

You should now press the "Create Certificate File" button in the CapaInstaller certificate Wizard in order to continue certificate issuing process.

In the "Apple certificate File" select the certificate downloaded from the Apple push Cert page. (Named: MDM_something.pem)

When that is done, press the start tab and then click next

Now you have the Apple Push Certificate in your output folder (File extension is pfx)

Now you need to open MMC

Click on Certificates, and click Add.

Click on "Computer account" and click next.

Now click "Local computer: (the computer this console is running on)" and click finish

Click "OK"

Now expand Certificates, Right-click "personal" and under "All Tasks" click "Import"

Click next

Browse your certificate now, and click next

Click next

Click Next

Click finish

Now under "certificates", you can see your renewed Apple Push Certificate

Now go back to the CI Console → Click on System Administration → Right-click your MDM Service → Click on Service Settings

Under Service settings, click the configuration tab, scroll down to "Apple Push Certificates", click on the "..."

Click on the "..." 

select the renewed certificate, and click ok

now open the certificate store by opening run and typing "Certlm.msc" and then press Enter  

Right-click the Apple push certificate and click on "open" then go to the "Details" tap and find the "Thumbprint" menu and copy the text in the menu  

Paste the copied text under "thumbprint" in the Capa console and click "ok"

Now click ok 

Now restart your MDM Service, and you have renewed your Apple Push Certificate

In the "System Administration"  menu "Actions", you will find the "Apple Push Certificate request.."

Wizard starts, press the "Next" button to proceed

If the "Verify OpenSSL" isn't status Passed go to Install OpenSSL

If the "Verify access to Capainstaller certificate request signing service" isn't status passed you must:

First, try to open a browser on the machine from which you run this wizard. Open the following URL: http://certservice.capainstaller.com:7000/status

Ensure that port 7000 is opened from the CapaInstaller server out to the internet. The certificate request signing service is placed on a Capainstaller server at port 7000.

Select an output folder. Press the "Start" button, and click "Next" when the certificate request is finished

Press the "Open Apple Push Certificates Portal"

Login with your Apple Push Certificates Portal account

Press the "Renew" tab

If this disclaimer appears then just accept it

Press "Choose File" and select the file named: plist_encoded, it is stored in the output directory, and click "upload"

Now you should get the real certificate as shown in the picture.

First, you should open your calendar and insert an alert that will expire a month before the certificate's expiring date. This will help you recall when to get a new certificate.

You should now press the "Create Certificate File" button in the CapaInstaller certificate Wizard in order to continue certificate issuing process.

In the "Apple certificate File" select the certificate downloaded from the Apple push Cert page. (Named: MDM_something.pem)

When that is done, press the start tab and then click next

Now you have the Apple Push Certificate in your output folder (File extension is pfx)

Now you need to open MMC

Click on Certificates, and click Add.

Click on "Computer account" and click next.

Now click "Local computer: (the computer this console is running on)" and click finish

Click "OK"

Now expand Certificates, Right-click "personal" and under "All Tasks" click "Import"

Click next

Browse your certificate now, and click next

Click next

Click Next

Click finish

Now under "certificates", you can see your renewed Apple Push Certificate

Now go back to the CI Console → Click on System Administration → Right-click your MDM Service → Click on Service Settings

Under Service settings, click the configuration tab, scroll down to "Apple Push Certificates", click on the "..."

Click on the "..." 

select the renewed certificate, and click ok

now open the certificate store by opening run and typing "Certlm.msc" and then press Enter  

Right-click the Apple push certificate and click on "open" then go to the "Details" tap and find the "Thumbprint" menu and copy the text in the menu  

Paste the copied text under "thumbprint" in the Capa console and click "ok"

Now click ok 

Now restart your MDM Service, and you have renewed your Apple Push Certificate