Renew Apple Push Certificate

The email address entered in the Add a new Apple Push Certificate section receives a renewal notification before the certificate’s expiration date. However, to ensure continued coverage the certificate you can renew it at any time before the expiration date.

When you renew a certificate, you must log into the Apple Push Certificates Portal with the same Apple ID used to create the current certificate and select the Renew option.

The association between existing devices and Device Management for Apple may be broken and the service interrupted if:

  • The certificate expires
  • A different Apple ID is used to renew the certificate
  • An option other than Renew is selected for the certificate in the Apple Push Certificates Portal

If any of the above three scenarios occur, to maintain service continuity you must upload a new certificate to Device Management for Apple, and all devices enrolled in Device Management for Apple must be unenrolled at the device and then enrolled again using the new certificate.

To renew an Apple Push Notification Certificate

Download CSR

  1. On the N-sight RMM Dashboard, go to Settings > Device Management for Apple
  2. Click Push Certificates
  3. Choose the certificate you wish to renew

  4. Select Renew certificate in the menu above the main pane or from more options button

  5. Choose Renew Certificate (Recommended) this renews your existing certificate and ensures uninterrupted coverage

  6. If you choose Create new certificate and all devices currently enrolled with the existing certificate will need to be re-enrolled to use this new certificate

  7. Enter the Apple ID (email address) to create the Certificate Signing Request (CSR) against. Use the client’s Apple ID if setting up their certificate

  8. Click Download CSR to store the .csr file locally and click Next

Renew Certificate

  1. Click the Apple Push Certificates Portal link to renew your certificate
    1. Sign into the Apple Push Certificates Portal with the same Apple ID used to create the current certificate (if required)
    2. Locate the expiring RMM Mobile Device Management certificate under, Certificates for Third-Party Servers
    3. Click Renew (do not select Revoke)
    4. Under Renew Push Certificate, click Choose file to navigate to the location of the .csr file and click Open
    5. Enter any relevant information in the Notes field and click Upload

      The Confirmation screen provides information on the Service, Vendor, and the certificate's Expiration Date

    6. Click Download to retrieve a copy of the certificate (.pem file)
  2. Return to the N-sight RMM Dashboard and click Next

Upload Certificate

  1. Drag and drop the Apple Push Notification certificate (.pem) file into the main window or use browse to navigate to the file and select it
  2. Click Finish


  1. Review the confirmation message

    Information about the certificate including its expiration date and number of days to renewal is displayed

  2. Click the back button (<) to return to the main Dashboard view

What do you want to do?