Set up an Apple push certificate (2024)

Supported editions for this feature: Frontline Starter and Frontline Standard; Business Plus; Enterprise Standard and Enterprise Plus; Education Standard, Education Plus, and Endpoint Education Upgrade; Enterprise Essentials and Enterprise Essentials Plus; GSuite Basic and GSuite Business; Cloud Identity Premium. Compareyouredition

To use advanced management with Apple iOS devices, you needan Apple push certificate. The certificate establishes a trusted connection between iOS devices and your organization's domain.

Renew the certificate yearly

You get alerts in the alert center 30 days, 10 days, and 1 day before the certificate expires and another alert when it expires. For details, go toRenew an Apple push certificate.

Before you begin

You needan Apple ID and password to complete this procedure. If you don't have an Apple ID, you can create one during the procedure. Use a work email address when you create the ID so an administrator can easily renew the certificate.
Don’t reload your browser window or navigate away from any displayed page while youcreatethe certificate. This process helps ensure that the certificate-signing request you submit matches the signed certificate you receive.

Create an Apple push certificate

You must be signed in as asuper administratorfor this task.

Step 1: Download a certificate signing request

Sign in to your GoogleAdminconsole.
See Also
Is MDM push certificate is free to renew …APNS Key Vs Certificate Security Apple Push Notification service certificates Download the Apple Developer Certificate
Sign in using an account with super administrator privileges(does not end in @gmail.com).
In the Admin console, go to MenuDevicesMobile & endpointsSettingsiOS.
Click Apple certificatesSet Up New Certificate.
UnderCertification Request, click Get CSR.
Save the certificate signing request (.csr) file to a convenient location where you can access it later. Download this file only once.

Step 2: Get a signed certificate from Apple

(Optional) If you don’t have an Apple ID, click Create an Apple ID and enter your details.
From your Admin console, click Apple Push Certificates Portal and sign in to the portal with your Apple ID and password.
Click Create a Certificate and accept the terms of use.
Click Choose File and select the certificate signing request (.csr) file you saved earlier.
To submit the request file, click Upload.
Apple accepts the request and displays a confirmation page with your service type, vendor domain, and the expiration date for this certificate.
Click Download and save the signed certificate (.pem) file.Download this file only once.
Go back to your Admin console tab or window.

Step 3: Upload your signed certificate

UnderEnter Business Apple ID, enter the Apple ID you used to create the certificate. Your ID is automatically saved to remind you when you renew the certificate.
Click Upload Certificate and select the certificate (.pem) file you saved from the Apple Confirmation page.
ClickSave & Continue.
The system verifies and uploads the signed certificate. If you have problems, make sure the signed certificate you submitted is the one you saved in step 1. If you find multiple signing requests on your system, delete them all and start again.

What's next?

iOS devices that already synchronizework data get a notification to install the Google Device Policy profile. The profile checks if the device is compliant with the policies you set. Compliant devices can continue to sync work data. Users of noncompliant devices get a notification and need to fix the problem before they can sync work data. New devices that enroll for management must install the Device Policy profile before they can sync work data.

Was this helpful?

How can we improve it?

Need more help?

Try these next steps:

Post to the help community Get answers from community members Contact us Tell us more and we’ll help you get there

Manage devices for your organization

1 of 11
Set up basic mobile device management
2 of 11
Set up advanced mobile management
3 of 11
About Android device management with Google endpoint management
4 of 11
Set up an Apple push certificate
5 of 11
Require admin approval for device access
6 of 11
Require passwords for managed mobile devices
7 of 11
Add company-owned devices to the inventory
8 of 11
Set up company-owned iOS device management
9 of 11
Set up Android zero-touch enrollment
10 of 11
Stop managing mobile devices for your organization
11 of 11
Switch device management before downgrading Google Workspace

Start your free 14-day trial today

Professional email, online storage, shared calendars, video meetings and more. Start your free Google Workspace trial today.