Expired macOS APNs certificate missing from Apple Push Certificates PortalSolved

Hello,

Thanks for reaching out to Hexnode Connect.

If the APNs certificate is not visible in the Apple Push Certificates Portal, first double-check that you are signed in with the exact Apple ID used to create the original certificate, checking both the Active and Expired sections.

If it still appears missing under the correct Apple ID, you have two possible paths forward:

1. Contact Apple Support: Request assistance with locating or restoring the missing APNs certificate. Be sure to provide the certificate details available in Hexnode, such as the Unique Identifier and Common Name. If Apple can restore it, you can renew it normally and avoid re-enrolling your Macs.
2. Create a New Certificate: If Apple cannot recover it, you will need to generate a new Certificate Signing Request (CSR) from Hexnode, create a brand-new certificate in the Apple portal, and upload it. However, doing this changes the APNs topic, meaning all existing macOS devices will stop receiving MDM commands and must be completely re-enrolled.

I hope this helps you outline your recovery options! If you find any more issues or need further assistance, feel free to reach out.

Best regards,
George,
Hexnode UEM

I checked other Apple IDs we might have used, but I still can’t find the Hexnode APNs certificate. I also noticed that the APNs page in Hexnode does not let me remove the old certificate while devices are still enrolled. Is removing the old certificate required before uploading a new one if we have to go down the path of creating a new one?

Hello,

Thanks for reaching out to Hexnode Connect.

No, you do not need to delete the old APNs certificate from Hexnode before proceeding. Hexnode intentionally prevents the deletion of an existing APNs configuration while active devices are enrolled as a safety measure to avoid accidentally breaking communication with your fleet.

If you cannot recover the original certificate via Apple Support and must create a new one, use the renew/upload option on the APNs page instead of deleting the entry:

1. Go to Admin > APNs in the Hexnode portal and download a new Certificate Signing Request (CSR).
2. In the Apple Push Certificates Portal, choose Create a Certificate (not Renew) since the original is missing.
3. Upload the CSR and download the new .pem certificate.
4. Return to Hexnode and upload the new .pem file using the existing APNs upload interface.

Note: As a final reminder, try reaching out to Apple Support first with your Hexnode certificate details. If they can restore the original certificate for renewal, you will preserve the APNs topic and completely save yourself from a full macOS re-enrollment.

I hope this clarifies the APNs certificate replacement workflow! If you find any more issues or need further assistance, feel free to reach out.

Best regards,
George,
Hexnode UEM