Set up an Apple push certificate

Supported editions for this feature: Frontline Starter and Frontline Standard; Business Plus; Enterprise Standard and Enterprise Plus; Education Standard, Education Plus, and Endpoint Education Upgrade; Enterprise Essentials and Enterprise Essentials Plus; G Suite Basic and G Suite Business; Cloud Identity Premium. Compare your edition

To use advanced management with Apple iOS devices, you need an Apple push certificate. The certificate establishes a trusted connection between iOS devices and your organization's domain.

Renew the certificate yearly

You get alerts in the alert center 30 days, 10 days, and 1 day before the certificate expires and another alert when it expires. For details, go to Renew an Apple push certificate.

Before you begin

• You need an Apple ID and password to complete this procedure. If you don't have an Apple ID, you can create one during the procedure. Use a work email address when you create the ID so an administrator can easily renew the certificate. 
• Don’t reload your browser window or navigate away from any displayed page while you create the certificate. This process helps ensure that the certificate-signing request you submit matches the signed certificate you receive.

Create an Apple push certificate

You must be signed in as a super administrator for this task.

What's next?

iOS devices that already synchronize work data get a notification to install the Google Device Policy profile. The profile checks if the device is compliant with the policies you set. Compliant devices can continue to sync work data. Users of noncompliant devices get a notification and need to fix the problem before they can sync work data. New devices that enroll for management must install the Device Policy profile before they can sync work data.

Related topics

• Renew an Apple push certificate
• Manage a Google configuration profile