> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getprimo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Renew the original Apple Push certificate and install it in Fleet

> Renew the original Apple Push certificate with the Apple Account that created it, install it in Fleet, check the installed topic in Primo, and purge the enrollment profile cache.

Use this article when you return to the original certificate. Primo refuses a certificate whose topic differs from the installed one, so the original certificate cannot be uploaded from **MDM > Settings**: it is installed in Fleet. If you keep the new certificate instead, skip this article and go to [Move devices to the kept certificate](https://docs.getprimo.com/mdm/guides/apple-push/move-devices.md).

> [!NOTE]
>
> **\[À CONFIRMER : qui a accès à Fleet pour cet upload, l'admin ou le support Primo.]** If you have no access to Fleet, contact Primo support before you start.

## Prepare the renewal

* Sign-in details for the Apple Account that created the original certificate.
* The topic of the original certificate: the **APNs topic** of a device enrolled before the change. See [Diagnose devices on another Apple Push certificate](https://docs.getprimo.com/mdm/guides/apple-push/diagnose.md).
* Do not turn off MDM on any device yet. Devices move only once this certificate is installed and the cache is purged.

## Renew the original certificate

**1. Get a CSR from Fleet**

**\[À VÉRIFIER dans la documentation Fleet de la version déployée : où télécharger la CSR (Certificate Signing Request).]**

**2. Sign in to the Apple Push Certificates Portal with the original Apple Account**

Open [identity.apple.com/pushcert](https://identity.apple.com/pushcert) and sign in with the Apple Account that created the original certificate. The certificate does not appear under any other account.

**3. Click Renew on the original certificate**

Under **Certificates for Third-Party Servers**, find the **Mobile Device Management** certificate and click **Renew** in its **Actions** column. Do not click **Create a Certificate**: it would create a third topic. Upload the CSR from Fleet.

If several certificates are listed, check their **Expiration Date** and renew the one that matches the original certificate.

**4. Download the certificate**

Download the `.pem` file from Apple.

## Install the certificate in Fleet

**1. Upload the certificate in Fleet**

**\[À VÉRIFIER dans la documentation Fleet de la version déployée : où uploader le certificat Apple Push.]**

**2. Check the installed topic in Primo**

Go to **MDM > Settings**, then click **Apple** in the **Platforms** section. Hover **Installed certificate topic** to see the whole topic. It must match the **APNs topic** of the devices enrolled before the change.

If it does not match, the certificate renewed is not the original one. Stop, and contact Primo support before turning off MDM on any device.

**3. Purge the enrollment profile cache**

In the same window, click **Purge enrollment profile cache**, then **Purge**. See [Purge the enrollment profile cache](https://docs.getprimo.com/mdm/settings#purge-the-enrollment-profile-cache).

The devices on the original certificate receive MDM commands again. The devices on the new certificate now have to move: see [Move devices to the kept certificate](https://docs.getprimo.com/mdm/guides/apple-push/move-devices.md).

## Contact

If the portal does not show the original certificate, or the installed topic does not match, contact [support@getprimo.com](mailto:support@getprimo.com) with:

* the installed certificate topic, and the topic you expected
* the expiration dates listed in the Apple Push Certificates Portal
* the Apple Account you signed in with

## Related articles

* [Choose which Apple Push certificate to keep](https://docs.getprimo.com/mdm/guides/apple-push/choose-certificate.md)
* [Move devices to the kept Apple Push certificate](https://docs.getprimo.com/mdm/guides/apple-push/move-devices.md)
* [Apple Push certificate setup and renewal](https://docs.getprimo.com/mdm/get-started/set-up-apn-certificate.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.