Product Documentation

Requesting an APNS Certificate

Dec 21, 2015

In order to enroll and manage iOS devices with Device Manager, you need to set up and create an Apple Push Notification Service (APNS) certificate from Apple. This section outlines the following basic steps for requesting the APNS certificate:

  • Use a Windows 2008 R2 Server and Microsoft Internet Information Server (IIS) or a Mac computer to generate a certificate signing request (CSR).
  • Request an APNS certificate from Apple.
  • Import the certificate to Device Manager.
  • The APNS certificate from Apple enables mobile device management via the Apple Push Network. If you accidentally or intentionally revoke the certificate, you will lose the ability to manage your devices.
  • If you used the iOS Developer Enterprise Program to created a Mobile Device Manager push certificate, you may need to take action due to the migration of existing certificates to the Apple Push Certificates Portal. For details, see Apple MDM Push Certificate Migration Information.

The topics that outline the step-by-step procedures are listed in order in this section as follows:

To create a CSR by using Microsoft IIS

To create a CSR on a Macintosh computer

Generate a CSR with a Windows 2008 R2 Server and Microsoft IIS or on a Mac computer. Citrix recommends this method.
To submit the CSR to Citrix for signing Submit the CSR to Citrix at the XenMobile APNs CSR Signing website (MyCitrix ID required). Citrix signs the CSR with its mobile device management signing certificate and returns the signed file in a .plist format.
To submit the signed CSR to Apple to obtain the APNS certificate Submit the signed CSR to Apple at Apple Push Certificate Portal (Apple ID required) and then download the APNS certificate from Apple.
To create a .pfx APNS certificate by using Microsoft IIS

To create a .pfx APNS certificate on a Macintosh computer

To create a .pfx APNS certificate by using OpenSSL

Export the APNs certificate as a PCKS #12 (.pfx) certificate (on IIS, Mac, or SSL).
To import an APNS certificate into Device Manager Import the certificate into Device Manager.