# How to Renew APNs Certificates in Hexnode UEM

Apple Push Notification service (APNs) certificates allow the Hexnode UEM server to communicate with and manage Apple devices. These certificates must be renewed annually to maintain device management.

#### Critical Prerequisites 

Before starting the renewal process, ensure you meet these two conditions:

- **Same Apple ID**: You must use the same Apple ID that was originally used to create the certificate. Using a different ID will require the re-enrollment of all devices.
- **Renewal vs. Replacement**: Renewing an existing certificate maintains your current device connections. Revoking or creating a new certificate from scratch will typically require re-enrolling all devices (with some exceptions – see FAQ).

### Step 1: Obtain signed CSR from Hexnode 

To begin, you need a Certificate Signing Request (CSR) signed by Hexnode.

1. Navigate to the **Admin** tab in the Hexnode UEM console.
2. Select **APNs Settings**. Here you can verify the current certificate topic, creation/expiration dates, and the associated Apple ID.
3. Click the **Renew Certificate** button.
4. In the setup window, click **Generate CSR**.
5. Download the file: **hexnode_signed_casr.txt**.

### Step 2: Renew Certificate via Apple Portal 

1. Upload the Hexnode CSR to Apple to generate the updated certificate.
2. Click **Next** in the Hexnode console, then click **Go to Apple push terminal** to open the [Apple Push Certificates Portal](https://idmsa.apple.com/IDMSWebAuth/signin?appIdKey=3fbfc9ad8dfedeb78be1d37f6458e72adc3160d1ad5b323a9e5c5eb2f8e7e3e2&rv=2).
3. Sign in using the original Apple ID.
4. Locate the correct certificate by matching the Expiration Date shown in the portal with the data in your Hexnode console.
5. Click Renew next to the specific certificate.
6. Upload the hexnode_signed_casr.txt file you downloaded in Step 1.
7. Once processed, the APNs certificate (.pem format) should download automatically. If not, click **Download** next to the certificate in the portal list.

### Step 3: Finalize Renewal in Hexnode

1. Complete the process by linking the new Apple certificate to Hexnode UEM.
2. Return to the Hexnode UEM console and click Next.
3. Upload the .pem file you just received from Apple.
4. Click Finish to complete the renewal.