Renew an Apple Push Certificate

The Apple Push Notification Service (APNs) certificate is used to establish a trusted connection between an MDM server, Apple services, and managed devices.

The APNs certificate is crucial to managing Apple devices with LogMeIn Resolve MDM. See Apple Push Certificate for more information on the APNs certificate.

The importance of renewing an APNs certificate

Your APNs certificate must be renewed once a year in order to retain the MDM communication with your managed Apple devices. Without an active certificate, you cannot enroll or manage your Apple devices.

Important: The APNs certificate can only be renewed with the same Apple ID that was used to create the certificate. If you cannot find or do not remember the Apple ID that was used to create a certificate, see Troubleshooting Apple Push Certificate renewal for troubleshooting information.

Apple offers a 30-day grace period for renewing an expired certificate. However, to avoid issues that might result in having to re-enroll your devices in Miradore, we suggest you renew the certificate before it expires.

Warning: Do not delete the old certificate when it expires and create a new one instead. If you delete the existing certificate, you must re-enroll your Apple devices. Even if a certificate expires, it can be renewed without having to create a new one.

Identify the correct APNs certificate

If you have more than one APNs certificate created in the Apple Push Certificates Portal, ensure that you are renewing the correct one.

Compare the Subject of the APNs certificate found in LogMeIn Resolve MDM's Infrastructure diagram to the Subject DN found in the Apple Push Certificates Portal, available at https://identity.apple.com/pushcert/ after logging in with the correct Apple ID.

APNs certificate information in LogMeIn Resolve MDM's Infrastructure diagram

APNs certificate information in the Apple Push Certificates Portal

Renew the APNs certificate

In LogMeIn Resolve MDM, navigate to System > Infrastructure diagram and hover over the Apple Push Notification Service icon.
Select Renew.
Select Download the CSR to download the certificate signing request file (csr.txt), then select Next.
Select Open Apple Portal to open the Apple Push Certificates Portal. Do not close LogMeIn Resolve MDM.
Sign in to the Apple Push Certificates Portal using the Apple ID that was used to create the certificate.
Find the correct certificate to renew, then select Renew.
Select Choose File to upload the csr.txt file that you downloaded from LogMeIn Resolve MDM and select Upload.
Once the upload is confirmed, select Download to download the certificate. You may close the Apple Push Certificates Portal.

Note: The downloaded certificate file's extension is .pem.
Navigate back to LogMeIn Resolve MDM and select Next.
Save your Apple ID in LogMeIn Resolve MDM by entering it in the text box.
This makes it easier to find the Apple ID used for managing the certificate in the future.
Once the upload is confirmed, close the wizard by selecting Close.

Article last updated: 27 August, 2025