XenMobile: Automated APNS Certificate Signing Service
XenMobile now offers customers an automated service to submit a CSR for signing. Previously customers would submit CSRs manually via a Citrix SE or Support Organization. The improved process allows customers to submit requests to Citrix at the XenMobile APNs CSR Signing website (MyCitrix ID required). Upon submission Citrix will sign the CSR with its mobile device management signing certificate and automatically return the signed file to the customer
Once the customer receives the signed CSR from Citrix they simply submit the signed CSR to Apple at Apple Push Certificate Portal (Apple ID required) and then download the APNs certificate from Apple.
The final step in the process is to import the APNs certificate from Apple into XenMobile Device Manager.
Process for requesting an APNs Certificate
In order to enroll and manage iOS devices with Device Manager, you need to set up and create an Apple Push Notification service (APNs) certificate from Apple. This section outlines the steps for requesting an APNs certificate:
|Step 1||Create a CSR on IIS
|Generate a CSR with a Windows Server 2012 R2 or Windows 2008 R2 Server and Microsoft IIS or on a Mac computer. Citrix recommends this method.|
|Step 2||To sign the CSR||Submit the CSR to Citrix at the XenMobile APNs CSR Signing website (MyCitrix ID required). Citrix signs the CSR with its mobile device management signing certificate and returns the signed file in a .plist format.|
|Step 3||Submit Signed CSR to Apple||Submit the signed CSR to Apple at Apple Push Certificate Portal (Apple ID required) and then download the APNs certificate from Apple.|
|Step 4||To create a .pfx APNs certificate by using Microsoft IIS.
|Export the APNs certificate as a PCKS #12 (.pfx) certificate (on IIS, Mac, or SSL).|
|Step 5||Import the APNs certificate into Device Manager||Import the certificate into Device Manager.|
- The APNs certificate from Apple enables mobile device management via the Apple Push Network. If you accidentally or intentionally revoke the certificate, you will lose the ability to manage your devices.
- If you used the iOS Developer Enterprise Program to create a mobile device manager push certificate, you may need to take action due to the migration of existing certificates to the Apple Push Certificates Portal. For details, see Apple MDM Push Certificate Migration Information.
- Find more information on Citrix eDocs: http://support.citrix.com/proddocs/topic/xenmobile-90/xmob-dm-config-requesting-apns-con.html