Renew Apple Push Notification Service (APNs)
Apple issues every push-notification certificate for 12 months; when that timer hits 0, Macs and iOS devices stop receiving MDM commands. Trio starts warning you at 30 days so you can renew with zero downtime.
What changes (and what doesn’t)
✅ Stays the same | ❌ Breaks if you skip renewal |
Enrolled devices, DEP, VPP, and profiles | Push commands (config updates, security actions, app installs) |
Certificate UID | Real-time device status and inventory sync |
Apple ID you originally used | Future DEP enrollments (certificate is required) |
Important: Always renew with the same Apple ID you used when the certificate was first created. Using a different Apple ID generates a new certificate and severs all device connections.
Step-by-Step Renewal
Open the renewal modal
MDM Setup → Apple → Apple Push Notification Service (APN) → Renew Certificate.
Review certificate details
The pop-up shows the Apple ID and exact expiration date so you can verify you’re in the right account.
Click Start Renewal to launch the wizard
You’ll see a 3-step flow in a side panel:① Download CSR file
Trio generates a new Certificate Signing Request (
trio-mdm.csr). Save it locally.
② Sign in to Apple Push Certificates Portal
Visit https://identity.apple.com/pushcert (link provided).
Log in with the same Apple ID.
Locate your existing Mobile Device Management certificate → click Renew.
Upload the
trio-mdm.csrwhen prompted and download the renewed.cerfile.
③ Upload your Push Certificate back to Trio
Drag-and-drop the
.cerfile (or click Upload) in Step 3.Click Confirm Renewal.
Success banner
A green toast confirms “APNs certificate renewed. Devices remain connected without interruption.”
Tips & Troubleshooting
Can I renew early? Yes—Trio accepts a certificate at any time; the new one simply replaces the old UID.
Wrong Apple ID? Cancel, sign out, and log in with the original Apple ID before you renew.
Lost the CSR? Hit Close, reopen the wizard, and Trio will generate a fresh CSR.
Still seeing “Not Connected”? Wait up to 5 minutes. If status doesn’t change, re-upload the same
.cerand click Confirm Renewal again.
Keep It Automatic
Trio emails Org Admins at 30, 15, 7, and 1 day before expiration. Add a recurring calendar reminder or create a Trio automation so you never miss the window.