I just hit the APN Certificate setup page in Hexnode. Do I really need to configure this for testing, or can I skip it?
How to set up APN certificate?Solved
Replies (5)
From what I’ve seen, if you’re only testing Android or Windows devices, you can go ahead without it. But if you’re planning to test iOS, the APN certificate is kind of the backbone, it’s what lets Hexnode talk to Apple’s servers.
Yeah, I tried skipping it once with iPads, and nothing worked. Policies didn’t apply, apps didn’t install, and I couldn’t push restrictions. The APN certificate is basically the trust handshake with Apple.
To clarify: the APN certificate is mandatory for managing apple devices in Hexnode. It establishes a secure channel with Apple Push Notification service, which is how Hexnode delivers commands like app installs, restrictions, or device wipes. Without it, iOS devices simply won’t respond. Configuration steps are straightforward:
Step 1: Create a Certificate Signing Request
- To create a certificate signing request,
-
Login to your Hexnode UEM Portal.
-
Go to Admin > APNs.
-
Click on Configure APNs Certificate.
-
Click on Generate CSR to download the self-signed certificate from Hexnode.
Step 2: Upload the Self-Signed certificate in the Apple Server
Once the self-signed certificate is downloaded,
-
Go to Apple Push Certificates Portal website and login with your personal or corporate Apple ID. Click here to create a new Apple ID if you don’t have one.
-
Click on Create a Certificate to create APNs certificate.
-
Upload the self-signed certificate from Hexnode.
-
Download the APNs certificate generated by Apple.
Step 3: Upload the APNs certificate back to the portal
Upload the APNs certificate back to Hexnode MDM Portal.
Once the Certificate is uploaded, you will have the following details displayed under Admin > APNs.
Regards,
Mary Romero
That makes sense now. I was wondering why my iPhone wasn’t picking up any policies. Looks like I’ll have to set up the certificate before continuing.
Exactly. It’s a one-time setup, and after renewal each year, you’re good to go. Better to get it done early so your testing isn’t half-baked.