What's new 
I recently enrolled an iPhone in Hexnode, but it stayed stuck on “Scanning in progress.” The MDM profile installed on the phone, but the device didn’t seem to complete the scan or check in properly. After checking the setup, I noticed the APNs certificate had expired. I renewed the certificate, but the iPhone still showed “Scanning in progress” for a while. How long should it normally take for the device to start communicating again after renewing APNs?
34 Views
Replies (1)
Marked SolutionPending Review
Hexnode Expert
2 hours ago
Aug 24, 2026
Marked SolutionPending Review
An expired APNs certificate can prevent enrolled iOS devices from communicating with Hexnode. After renewing the APNs certificate, the device should usually check in within 1–2 minutes, provided it has an active internet connection.
To renew the APNs certificate:
-
In the Hexnode UEM portal, go to Admin > APNs.
-
Click Renew Certificate.
-
Generate and download the CSR from Hexnode.
-
Open the Apple Push Certificates Portal from the renewal flow.
-
Sign in with the same Apple ID used to create the existing certificate.
-
Locate the certificate to be renewed using the expiration date.
-
Click Renew and upload the CSR downloaded from Hexnode.
-
Download the newly generated .pem certificate from Apple.
-
Return to Hexnode and upload the renewed APNs certificate.Click Finish to complete the renewal.
Once renewed, make sure the iPhone is connected to the internet. You can also force a check-in from Hexnode by selecting the device and running Actions > Scan Device.
Regards,
Mary Romero
Mary Romero
Save