Intune APNS certificate should be valid for more than 30 days
MT.1092HighIntuneTenant administration
Part of Maester · Intune · Tenant administration · All checks
Invoke-Maester -TestId MT.1092Overview
Section titled “Overview”Check the validity of the Apple Push Notification Service (APNS) Certificate for Intune. The Apple Push Notification Service (APNS) Certificate is required for managing Apple devices with Microsoft Intune. This test checks if the APNS certificate is valid and not expired.
Remediation action
Section titled “Remediation action”It is critical that you renew your APNs certificate, not request a new one. This means you must ensure that you use the same Apple ID and renew the same certificate from Apple’s site. If you request a new certificate instead of renewing your existing certificate, you will be forced to unenroll and re-enroll all of your existing iOS devices.
See the Microsoft learn instructions to Renew Apple MDM certificate.
Details
Section titled “Details”Every attribute of this check
| Field | Value |
|---|---|
| Test ID | MT.1092 |
| Severity | High |
| Suite | Maester |
| Product | Intune |
| Feature | Tenant administration |
| Area | Devices and endpoints |
| Resource type | Connector |
| User impact | Low |
| Implementation cost | Low |
| MITRE ATT&CK | None |
| PowerShell test | Test-MtApplePushNotificationCertificate |
| Services | Graph |
| Compatible licenses | INTUNE_A |
Source
Section titled “Source”- Test:
tests/maester/intune/Test.MT.1092.ps1 - Documentation:
tests/maester/intune/Test.MT.1092.md