Important Notes Before You Start

• Use the same Apple ID that was used to create the original push certificate.

• Renew the existing certificate — do NOT create a new certificate.
  Creating a new one will break all enrolled devices.

• Renewing must be done once per year before the expiration date.

Step-by-Step Instructions

1. Sign in to your MDM portal

Go to your MDM solution’s admin console (Jamf, Intune, Workspace ONE, etc.).

Navigate to where the Apple MDM Push Certificate is listed.
You will usually see:

• The certificate’s expiration date

• A Renew or Download CSR button

Click Renew (or Download CSR if required).

2. Download the Certificate Signing Request (CSR) file

Your MDM will generate a file such as:

MDM_Apple_CSR.csr

Save this file — you will upload it to Apple in the next step.

3. Go to the Apple Push Certificates Portal

Visit:

Sign in using the exact same Apple ID that created the original certificate.
❗ If you use a different Apple ID, you will not see your existing certificate and risk breaking all devices.

4. Locate your existing MDM Push Certificate

Once logged in, you will see a list of all push certificates associated with that Apple ID.

Find the one matching:

• Your MDM vendor name

• The UID shown in your MDM console

• The expiration date

Click Renew next to it.

5. Upload the CSR

Upload the CSR file you downloaded from your MDM system.

Apple will then generate a renewed file:

MDM_Apple_Push_Certificate.pem

Download this file.

6. Upload the renewed certificate back into your MDM

Return to your MDM admin console and upload the renewed .pem file.

Save/applies changes.

7. Verify the renewal

Your MDM should now show:

• A new expiration date (one year later)

• Status: Active

Devices will continue working with no interruption.