Uploaded July 2025 | Updated September 2026, 2 weeks ago
Magic Link Certificate between Intune and Apple: MDM Push Notification Cert | Expired | Renew
Magic Link Certificate between Intune and Apple: MDM Push Notification Cert Apple devices #msintune
"Hi there! If you use Microsoft Intune to manage iPhones, iPads, or Macs, you have an Apple MDM Push Certificate. This certificate is the magic link that lets Intune talk to your Apple devices. But it expires every year! Don't worry, renewing it is easy. In the next few minutes, I'll show you exactly how to do it."
==============
Mastering Intune: How to Create, Renew, and Manage Your Apple MDM Push Certificate
In this comprehensive tutorial, we dive deep into the essential process of managing the Apple MDM Push Certificate within Microsoft Intune. Whether you're a seasoned IT pro or new to mobile device management, this guide will walk you through everything you need to know about creating, renewing, revoking, and deleting this critical certificate.
Learn why the Apple MDM Push Certificate is the "magic link" that enables communication between Intune and your Apple devices (iPads, iPhones, and macOS). We'll provide a step-by-step walkthrough of the entire process, from downloading the Certificate Signing Request (CSR) from the Intune portal to uploading it to the Apple Push Certificates Portal and successfully activating the link.
Key Topics Covered:
What is the Apple MDM Push Certificate? Understanding its role in managing Apple devices.
Creating a New Certificate: A detailed guide for setting up your MDM connection for the first time.
Renewing Your Certificate: Don't let your certificate expire! Learn the proper steps to renew it and maintain management of your devices.
Revoking and Deleting: Understand the process and implications of revoking a certificate.
Best Practices: Tips on using the correct Apple ID and ensuring a smooth setup.
Video Timestamps:
0:00 - Intro: Intune Tips
0:05 - Topic Introduction: Apple MDM Push Certificate
0:11 - What the Video Covers: Create, Renew, Revoke, Delete
0:18 - Who This Is For: Intune and other MDM users
0:31 - The Necessity of the Apple MDM Push Certificate
0:36 - The "Magic Link" Explained
0:54 - How-To: Intune Portal and Apple Portal
1:00 - Navigating the Intune Admin Center
1:10 - Finding the Apple MDM Push Certificate Section
1:22 - Creating a New Certificate
1:26 - The Need for a Certificate Signing Request (CSR) File from Intune
1:38 - Understanding the Application Process
1:47 - Moving to the Apple Portal
1:59 - Downloading the New Certificate
2:12 - Uploading the CSR File to the Apple Portal
2:21 - Using the Same Apple ID
2:33 - Finalizing the Magical Link Creation
2:40 - Conclusion: Manage Apple Devices with Intune
===========
First, let's start in the Microsoft Intune admin center.
On the left menu, click on Devices.
Next, under 'Device onboarding', select Enrollment.
Now, at the top, click on the Apple tab.
You’ll see an option called Apple MDM Push Certificate. Click on it.
Before we can ask Apple for a new certificate, we need a special request file from Intune.
First, check the box to agree to Microsoft's permission.
==========
Step 1: Go to Devices - Enrollment - Apple
Step 2: Click "Apple MDM Push Certificate"
Step 3: Download the CSR (Certificate Signing Request)
===
Use the File on Apple's Website
"Great! Now that we have our request file, let's go to Apple.
Now, this next step is very important. You must sign in with the exact same Apple ID you used when you first created the certificate. If you use a different ID, your devices will stop communicating with Intune.
Sign in with your Apple ID, password, and complete the two-factor authentication.
Once you're in, you will see your existing certificates.
we are creating a new certificate. Click Create a Certificate.
On the next page, click Choose File and select the IntuneCSR.csr file you just downloaded from Intune.
You can add a note to help you remember what this certificate is for, like 'Intune MDM for 2025'.
Click Upload.
You'll see a confirmation screen. Now just click the Download button to get your new, active certificate. Save this new file – it will end in .pem."
CRITICAL: Use the SAME Apple ID as before!
Step 4: Sign in to Apple Portal
Step 5: Upload your CSR file
Step 6: Download your new Certificate (.pem file)
====
"We're on the final step! Let's head back to the Intune portal where we left off.
In the field that says Apple ID, type in the Apple ID you just used on the Apple portal.
Next, click the small folder icon to Browse for the Apple MDM push certificate you just downloaded. It’s that .pem file.
Select the file and click Open.
Finally, click the Upload button at the bottom.
You'll see a 'loading' message, and then a notification that the upload was successful."
Step 7: Enter your Apple ID in Intune
Step 8: Upload the new certificate from Apple
Step 9: Click Upload!
Magic Link Certificate between Intune and Apple: MDM Push Notification Cert | Expired | Renew
Magic Link Certificate between Intune and Apple: MDM Push Notification Cert Apple devices #msintune
"Hi there! If you use Microsoft Intune to manage iPhones, iPads, or Macs, you have an Apple MDM Push Certificate. This certificate is the magic link that lets Intune talk to your Apple devices. But it expires every year! Don't worry, renewing it is easy. In the next few minutes, I'll show you exactly how to do it."
==============
Mastering Intune: How to Create, Renew, and Manage Your Apple MDM Push Certificate
In this comprehensive tutorial, we dive deep into the essential process of managing the Apple MDM Push Certificate within Microsoft Intune. Whether you're a seasoned IT pro or new to mobile device management, this guide will walk you through everything you need to know about creating, renewing, revoking, and deleting this critical certificate.
Learn why the Apple MDM Push Certificate is the "magic link" that enables communication between Intune and your Apple devices (iPads, iPhones, and macOS). We'll provide a step-by-step walkthrough of the entire process, from downloading the Certificate Signing Request (CSR) from the Intune portal to uploading it to the Apple Push Certificates Portal and successfully activating the link.
Key Topics Covered:
What is the Apple MDM Push Certificate? Understanding its role in managing Apple devices.
Creating a New Certificate: A detailed guide for setting up your MDM connection for the first time.
Renewing Your Certificate: Don't let your certificate expire! Learn the proper steps to renew it and maintain management of your devices.
Revoking and Deleting: Understand the process and implications of revoking a certificate.
Best Practices: Tips on using the correct Apple ID and ensuring a smooth setup.
Video Timestamps:
0:00 - Intro: Intune Tips
0:05 - Topic Introduction: Apple MDM Push Certificate
0:11 - What the Video Covers: Create, Renew, Revoke, Delete
0:18 - Who This Is For: Intune and other MDM users
0:31 - The Necessity of the Apple MDM Push Certificate
0:36 - The "Magic Link" Explained
0:54 - How-To: Intune Portal and Apple Portal
1:00 - Navigating the Intune Admin Center
1:10 - Finding the Apple MDM Push Certificate Section
1:22 - Creating a New Certificate
1:26 - The Need for a Certificate Signing Request (CSR) File from Intune
1:38 - Understanding the Application Process
1:47 - Moving to the Apple Portal
1:59 - Downloading the New Certificate
2:12 - Uploading the CSR File to the Apple Portal
2:21 - Using the Same Apple ID
2:33 - Finalizing the Magical Link Creation
2:40 - Conclusion: Manage Apple Devices with Intune
===========
First, let's start in the Microsoft Intune admin center.
On the left menu, click on Devices.
Next, under 'Device onboarding', select Enrollment.
Now, at the top, click on the Apple tab.
You’ll see an option called Apple MDM Push Certificate. Click on it.
Before we can ask Apple for a new certificate, we need a special request file from Intune.
First, check the box to agree to Microsoft's permission.
==========
Step 1: Go to Devices - Enrollment - Apple
Step 2: Click "Apple MDM Push Certificate"
Step 3: Download the CSR (Certificate Signing Request)
===
Use the File on Apple's Website
"Great! Now that we have our request file, let's go to Apple.
Now, this next step is very important. You must sign in with the exact same Apple ID you used when you first created the certificate. If you use a different ID, your devices will stop communicating with Intune.
Sign in with your Apple ID, password, and complete the two-factor authentication.
Once you're in, you will see your existing certificates.
we are creating a new certificate. Click Create a Certificate.
On the next page, click Choose File and select the IntuneCSR.csr file you just downloaded from Intune.
You can add a note to help you remember what this certificate is for, like 'Intune MDM for 2025'.
Click Upload.
You'll see a confirmation screen. Now just click the Download button to get your new, active certificate. Save this new file – it will end in .pem."
CRITICAL: Use the SAME Apple ID as before!
Step 4: Sign in to Apple Portal
Step 5: Upload your CSR file
Step 6: Download your new Certificate (.pem file)
====
"We're on the final step! Let's head back to the Intune portal where we left off.
In the field that says Apple ID, type in the Apple ID you just used on the Apple portal.
Next, click the small folder icon to Browse for the Apple MDM push certificate you just downloaded. It’s that .pem file.
Select the file and click Open.
Finally, click the Upload button at the bottom.
You'll see a 'loading' message, and then a notification that the upload was successful."
Step 7: Enter your Apple ID in Intune
Step 8: Upload the new certificate from Apple
Step 9: Click Upload!
