Skip to main content
The Apple Push Migration Agent follows a migration for you. It recommends which certificate to keep, opens the tickets you choose, watches each device’s APNs topic, and tells you what changed. It does not replace the steps described in Move devices to the kept certificate: the people involved still carry them out. [À CONFIRMER : le nom public de l’agent, et sa disponibilité pour les clients.]

​
Start the agent

Open Primo AI and describe the problem in the chat, for example: “Part of our iPhones stopped receiving MDM commands since we renewed the Apple Push certificate.”

​
Answer its questions

The agent asks:
  • whether you still have access to the Apple Account of the original certificate
  • who renews the certificate, if you return to the original one
  • who follows the migration
  • your time zone
From your answers and the devices on each certificate, the agent recommends keeping the new certificate or returning to the original one, with the devices each option moves. The criteria are the ones in Choose which Apple Push certificate to keep.

​
Choose the tickets

The agent proposes tickets. Keep the ones you want:
  • A certificate ticket, assigned to the person who renews the certificate, with a link to Renew the original certificate and install it in Fleet. They comment on the ticket once the certificate is installed.
  • One ticket per device to re-enroll by hand, for the employee who uses it.
Without tickets, the agent creates a task for the admins and lists the devices in its summary.

​
Set the notifications

Choose when the agent reports progress:
  • at every change, or once a day at the time you choose, for example 8:00
  • by email, or in a Slack channel if your company has a Slack connection

​
How the agent works

  • It runs every hour and compares each device’s APNs topic with the installed certificate topic.
  • It never erases, locks, removes, deletes, or unenrolls a device.
  • It cannot turn off MDM yet. Ask Primo support to do it, with the list of devices.
  • It ignores devices with no APNs topic.
  • A Dry run records what the agent would do without doing it.
  • Turn the agent off once every device is migrated. [À CONFIRMER : où le désactiver.]