Skip to main content
Use this article when you return to the original certificate. Primo refuses a certificate whose topic differs from the installed one, so the original certificate cannot be uploaded from MDM > Settings: it is installed in Fleet. If you keep the new certificate instead, skip this article and go to Move devices to the kept certificate.
[À CONFIRMER : qui a accès à Fleet pour cet upload, l’admin ou le support Primo.] If you have no access to Fleet, contact Primo support before you start.

​
Prepare the renewal

  • Sign-in details for the Apple Account that created the original certificate.
  • The topic of the original certificate: the APNs topic of a device enrolled before the change. See Diagnose devices on another Apple Push certificate.
  • Do not turn off MDM on any device yet. Devices move only once this certificate is installed and the cache is purged.

​
Renew the original certificate

1

Get a CSR from Fleet

[À VÉRIFIER dans la documentation Fleet de la version déployée : où télécharger la CSR (Certificate Signing Request).]
2

Sign in to the Apple Push Certificates Portal with the original Apple Account

Open identity.apple.com/pushcert and sign in with the Apple Account that created the original certificate. The certificate does not appear under any other account.
3

Click Renew on the original certificate

Under Certificates for Third-Party Servers, find the Mobile Device Management certificate and click Renew in its Actions column. Do not click Create a Certificate: it would create a third topic. Upload the CSR from Fleet.If several certificates are listed, check their Expiration Date and renew the one that matches the original certificate.
4

Download the certificate

Download the .pem file from Apple.

​
Install the certificate in Fleet

1

Upload the certificate in Fleet

[À VÉRIFIER dans la documentation Fleet de la version déployée : où uploader le certificat Apple Push.]
2

Check the installed topic in Primo

Go to MDM > Settings, then click Apple in the Platforms section. Hover Installed certificate topic to see the whole topic. It must match the APNs topic of the devices enrolled before the change.If it does not match, the certificate renewed is not the original one. Stop, and contact Primo support before turning off MDM on any device.
3

Purge the enrollment profile cache

In the same window, click Purge enrollment profile cache, then Purge. See Purge the enrollment profile cache.
The devices on the original certificate receive MDM commands again. The devices on the new certificate now have to move: see Move devices to the kept certificate.

​
Contact

If the portal does not show the original certificate, or the installed topic does not match, contact support@getprimo.com with:
  • the installed certificate topic, and the topic you expected
  • the expiration dates listed in the Apple Push Certificates Portal
  • the Apple Account you signed in with