> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getprimo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Apple

> Learn how to set up MDM for your Apple devices below.

## Introduction to APNs

The Apple Push Notification Service (APNs) is an essential component of MDM for Apple devices. It enables Primo to communicate remotely, securely, and instantly with the devices.

To use this service, Primo requires an APN certificate which is tied to your organisation and has to be renewed every 12 months.

Once configured, APNs allows Primo to:

* **Push remote configurations** (encryption, firewall, updates, password settings, sleep settings, app installation, WiFi deployment, etc.)
* **Send real-time commands**, even when the device is locked or in sleep mode
* **Ensure silent communication**, without user interaction

## Import your APN certificate

<Steps>
  <Step title="Get your CSR from Primo">
    Go to **MDM** > **Apple** and download the CSR (Certificate Signing Request) file.
  </Step>

  <Step title="Go to the Apple Push Certificates portal">
    Open [identity.apple.com/pushcert](https://identity.apple.com/pushcert).
  </Step>

  <Step title="Create a certificate">
    Click **Create a certificate** and upload the CSR file downloaded from Primo.
  </Step>

  <Step title="Sign in with your Apple ID">
    <Info>
      We recommend using a shared Apple ID — the certificate is tied to the Apple ID used to create it and must be renewed every 12 months using that same account.
    </Info>
  </Step>

  <Step title="Download the APN certificate">
    Once generated, download the `.pem` certificate file from Apple.
  </Step>

  <Step title="Upload the certificate to Primo">
    Go back to **MDM** > **Apple** and upload the certificate. Your MDM instance is now fully configured and operational.
  </Step>
</Steps>

## Renew your APN certificate

The certificate remains valid for 12 months. Primo will notify you by email and display a banner in the cockpit when renewal is due. Repeat the steps above using **the same Apple ID** used to create the original certificate.

## Next steps

* [Zero Touch deployment for Mac](/mdm/zero-touch/zero-touch-macs)
* [Deploy App Store apps (VPP)](/mdm/policies/app-store-apps)