Push certificate
This certificate lets VN-MDM wake an iPhone or iPad and send a command. Without a valid certificate, an enrolled device still does not receive the work you send.
When to open this pageBefore the first enrollment, and when the certificate is about to expire.
Open the gear Settings, the Apple group, then Push & certificates.
Read this page
| Row | Meaning |
|---|---|
| Status · Configured | A certificate is present. This organization’s Apple devices use it to receive commands. |
| Topic | The Apple identifier on the certificate. The page fills it; do not type it. |
| Expires | When the certificate expires. After that, commands do not reach devices until you replace it. |
| Test connection | Tries the push path. Use it when a device stays quiet even though it is Enrolled and online. |
Replace the certificate
The Renew or replace certificate block is for when Apple issues a new certificate (renewal or a fresh one).
Get the certificate file from Apple’s push-certificate portal. The extension is .pem, .crt, or .cer. This is the push certificate, not the identity file .p12.
Certificate: choose the certificate file. Private key: choose the .pem or .key file that belongs with that certificate.
Click Save certificate. Topic is filled from the certificate. Status stays Configured and Expires shows the new date.
One certificate per organization. Do not upload another organization’s certificate here.
Common questions
- The device is Enrolled but the command sits still?
- Check that Status is still Configured and that Expires has not passed. Then click Test connection. On the device, check Wi-Fi or mobile data and unlock the screen. A command sent while the certificate is broken stays Pending on the commands page.
- How is this different from the ADE certificate?
- The push certificate is used every day to send commands. The ADE connection is separate, on Connect ADE, so a company device enrolls itself at first power-on. Neither replaces the app token on Apps & Books.