...
Please review the instructions below to learn what actions are required when the Apple Push Notification service (APNs) for Application certificate expires in an On Premise environment.
APNs for Application is the certificate that you are required to renew so that all enterprise applications continue to communicate with the Workspace ONE UEM Console.If the APNs for Application is not renewed, the existing applications on the devices will lose communication with Workspace ONE. The applications will not function on the device and will lose communication with the console. This means the applications will not receive new commands and any new changes made in the console. In order to prevent downtime associated with the iOS versions of Boxer, Content, Web, and Intelligent Hub, all On Premise customers who are utilizing these applications must execute a script on their Workspace ONE database. This APNs for Application certificate needs to be renewed every year and the script is available in the My Workspace ONE portal.Additionally, a few weeks before expiration, an email notification will be generated from the Workspace ONE UEM Console and distributed to all active individuals with the current role of Console Administrator. This notification will inform customers of the upcoming certificate expiration and prompt them to renew the certificate to avoid any downtime on the servers. To ensure receipt, please verify that emails from Workspace ONE and VMware have been added to your email client's accepted domains. Instructions for running the database script Note: Please ensure to log into the Workspace ONE portal to access the renewal script. Download the APNs for Applications renewal script and copy it onto the database server.Double click the .sql file to open SQL Server Management Studio. Verify that the active database is set to your Workspace ONE instance (typically named "Workspace ONE" or "AirWatch"). Click Execute.Wait a few moments until you see the "Query executed successfully" message.You can validate that the certificate has been updated for these applications by navigating in the Workspace ONE UEM Console to Groups & Settings > All Settings > Devices & Users > Apple > Apple iOS > APNs for Applications. This does not require a reboot of the server itself. For more details on the standard APNs certificate renewal process, please refer to this resource: How to renew an Apple Push Notification service (APNs) certificate
Change Log:July 7, 2023:The APNs for Applications Renewal Script has been updated to renew certificates expiring on August 6, 2023.Note this will be the last year the APNs for Application renewal script will be updated, as we'll be using the Console Notification Service (CNS) going forward. With CNS implemented, manually renewing APNs certificates via script will not be necessary. For more information on this topic, please see the following KB article Upcoming changes to APNs for Applications for On-Premises Workspace ONE UEM (91116).