To set up the APN certificate for macOS, iOS, and iPadOS, ensure you have a professional Apple ID and administrator access to Primo, then follow the steps to create and import the certificate, which is essential for enabling Apple's Push Notification service for remote device management through Primo.
Apple's Push Notification service (APNs) is an essential component of Mobile Device Management (MDM) for iPhone, iPad, and Mac. It enables Factorial IT to communicate remotely with Apple devices.
An APNs certificate is required to activate MDM on Apple devices.
What is APN and why connect it to Factorial IT?
APNs serves as the official communication channel between MDMs and Apple devices.
Once configured, it allows Factorial IT to:
• Push remote configurations (encryption, firewall, updates, password settings, sleep settings, app installation, WiFi deployment, etc.)
• Send real-time commands, even when the device is locked or in sleep mode
• Ensure silent communication, without user interaction
To use APNs, Apple requires a Push certificate that's valid for 12 months. This certificate verifies that your MDM is authorized to manage devices.
In summary: APN is how Factorial IT "communicates" with Apple devices.
Its certificate must be renewed annually.
Prerequisites
Before starting, make sure you have:
• A professional Apple ID
• Administrator access to the Factorial IT Cockpit
Create and import the APN certificate in Factorial IT
- Go to Factorial IT Cockpit → Settings → MDM → Provide your APN certificate
- Download the CSR (Certificate Signing Request) file
- Go to the Apple Push Certificates portal
- Sign in with your Apple ID
- Click on Create a certificate
- Upload the CSR downloaded from Factorial IT
- Download the APN certificate
- Upload it to Factorial IT
Your MDM instance is now fully configured and operational!
APN certificate renewal
The certificate uploaded to Factorial IT remains valid for 12 months. Factorial IT will notify you via email and display an information banner in the cockpit when it's time to renew. Simply repeat the above steps using the same Apple ID.
Related articles
Supported platforms and OS
Migrate your device from another MDM
Set up Okta authentication integration on your devices