Blog Post

Security, Compliance, and Identity Blog
2 MIN READ

New APNs Certificate Expiration Alert

yvetteomeally's avatar
yvetteomeally
Icon for Microsoft rankMicrosoft
Sep 08, 2018
First published on CloudBlogs on Oct 06, 2015
Authors: Jyothi Srinivasan, Senior Software Engineer and Michael Cureton, Software Engineering Manager, Enterprise Client and Mobility Applies to: System Center 2012 R2 Configuration Manager Service Pack 1, System Center 2012 Configuration Manager Service Pack 2 A new alert was introduced in System Center 2012 R2 Configuration Manager Service Pack 1 and System Center 2012 Configuration Manager Service Pack 2 to warn administrators that their Apple Push Notification service (APNs) certificate is approaching expiration. If the APNs certificate expires, iOS devices will no longer be managed and must be enrolled again. NOTE: When renewing your APNs certificate, use the same Apple ID that was used to originally create the APNs certificate so that you don’t have to re-enroll devices. This new alert is disabled by default in the RTM and Cumulative Update 1 versions of the products listed in the Applies to section. This new alert is enabled by default in the Cumulative Update 2 and above versions of the products listed in the Applies to section. The validity period for a APNs certificate is one year. When enabled, this alert can serve as a reminder to renew the certificate before expiration. Here’s how to enable the alert.

Enabling the new alert.

  1. In the Configuration Manager console in the Administration workspace, go to Cloud Services > Microsoft Intune Subscriptions
  2. On the Home tab in the Subscription group, click Configure Platforms , and then click iOS .
  3. In the Microsoft Intune Subscription Properties dialog box, select the APNs Certificate tab and mark the Show an alert before the APNs certificate expires checkbox. Select how many days before the certificate expires you want to be warned.

Optional: Create alert subscription

Given the negative impact of letting the APNs certificate expire, you should set up an alert subscription for email notification. NOTE: For this to work, you must configure email notifications, as described in How to Configure Email Subscriptions for Alerts .
  1. In the Configuration Manager console, click Monitoring .
  2. In the Monitoring workspace, click Alerts .
  3. In the All Alerts list, select the APNs certificate expiration alert and then, on the Home tab, in the Subscription group, click Create subscription .
  4. In the New Subscription dialog box, specify the following information:
    • Name : Enter a name to identify the email subscription. You can use up to 255 characters.
    • Email address : Enter the email addresses that you want the alert sent to. You can separate multiple email addresses with a semicolon.
    • Email language : In the list, specify the language for the email.
  5. Click OK to close the New Subscription dialog box and to create the email subscription.
--Joythi Srinivasan and Michael Cureton C onfiguration Manager Resources Documentation Library for System Center 2012 Configuration Manager System Center 2012 Configuration Manager Forums System Center 2012 Configuration Manager Survival Guide System Center Configuration Manager Support Submit Configuration Manager Product Ideas Report Configuration Manager Product Issues This posting is provided "AS IS" with no warranties and confers no rights.
Published Sep 08, 2018
Version 1.0
No CommentsBe the first to comment