Documentation
Create and renew your Apple push certificate
Create the Apple push certificate that lets Vamiq reach your devices, and renew it every year with the same Apple Account so devices stay enrolled.
Last checked · 2 min read
What it does
The Apple push certificate lets Vamiq reach your workspace’s devices through Apple. Every enrolment needs it: links, profiles and zero-touch. Each workspace that uses device management has its own Apple push certificate; there is no shared platform certificate.
Which Apple Account to use
- Sign in with a company Apple Account that the business will keep, not a personal one.
- The same Apple Account must renew the certificate every year.
Create your first certificate
Download the signing request
In Vamiq, open Settings → Apple and download the certificate signing request (a .plist file).
Create the certificate at Apple
Open Apple’s push certificate site, identity.apple.com/pushcert, sign in with your company Apple Account, choose Create a Certificate and upload the .plist file.
Upload it to Vamiq
Download the certificate Apple gives you (a .pem file) and upload it in Settings → Apple.
Renew it every year
Vamiq cannot reach devices between Start renewal and the upload, so do the renewal in one sitting: start it, renew at Apple and upload the new certificate.
Start the renewal
In Settings → Apple, choose Start renewal, then Download signing request.
Renew at Apple
At identity.apple.com/pushcert, sign in with the same company Apple Account and choose Renew next to the certificate that is about to expire, not Create a Certificate. Upload the new signing request.
Upload the renewed certificate
Download the renewed certificate (a .pem file) and upload it in Settings → Apple. Devices stay enrolled, with no need to enrol again.
Reminders
Vamiq emails the first Organisation Admin in your workspace 90, 30, 7 and 1 days before the certificate expires, and again if it expires. Settings → Apple shows the expiry date.
Questions
- What happens if the certificate expires?
- App installs and device commands stop reaching devices until a valid certificate is in place. Try Apple’s Renew on the same certificate with the same Apple Account first: a new certificate means every device has to enrol again.
- Should we renew or create a new certificate?
- Renew. Renewing keeps every device enrolled; creating a new certificate means devices must enrol again.
- Which Apple Account should own it?
- A company Apple Account that the business will keep, not a personal one. The same account must renew it every year.
- Do customers share a push certificate?
- No. Each workspace that uses device management has its own Apple push certificate; there is no shared platform certificate.