Hello,
Thanks for reaching out to Hexnode Connect.
This behavior indeed occurs when the APNs (Apple Push Notification service) certificate used by Hexnode to communicate with Apple devices expires. When it is expired, commands such as Rename, Scan, Lock, Wipe, and other remote actions cannot reach managed iOS devices, even if they are online and connected.
To answer your second question first: A single APNs certificate in Hexnode covers communication with all managed Apple devices enrolled under that portal. There is no separate APNs certificate renewal required per device. Once the existing certificate is successfully renewed, remote actions will resume for all your enrolled iPhones and iPads.
Here is the exact procedure to renew your APNs certificate.
Crucial note: Make sure you renew the existing certificate instead of creating a new one. Creating a new APNs certificate with a different Apple ID will permanently break communication with already enrolled devices and require complete re-enrollment.
1.Generate CSR in Hexnode:
Log in to the Hexnode UEM portal, navigate to Admin > APNs, click Renew Certificate, and then click Generate CSR to download the CSR file.
2.Sign in to Apple Push Certificates Portal:
Proceed to the Apple Push Certificates Portal and sign in using the exact same Apple ID that was used to create the existing APNs certificate.
3.Renew the existing certificate:
Locate your existing certificate in the Apple portal using the expiration date, click Renew, and upload the CSR file you just generated from Hexnode.
4.Download the renewed certificate:
Download the newly renewed APNs certificate from Apple in .pem format.
5.Upload to Hexnode:
Return to the Hexnode portal, upload the renewed .pem certificate, and click Finish to complete the renewal process.
I hope this helps or resolves your issue. Feel free to reach out if you have any more doubts or need further assistance.
Best regards,
George,
Hexnode UEM