Renew APNS certificate for Custom Afaria client

[Former Member]

  Hi Experts,

My APNS certificate for custom Afaria client is expiring soon. I have renewed the certificate by generating the new one under the same APP ID.

Now i have 2 certificates listed in production SSL certificate section 

     1.Old Certificate (Type: APNS production IOS) expiring soon

     2.New Certificate (Type: Apple Push Services) expiring year later.

Now my question is, if i import the new certificate into the Afaria Administrator-->Server Configuation-->IOS Notification--> APNS Push Certificate for custom-signed Afaria will this complete the renewal process or  Do i have to re-enroll the device?

I am confused because of this note https://launchpad.support.sap.com/#/notes/2106704/E. It says i have to create the new Afaria enterprise client and deploy to all the IOS device as per resolution step 2 and 3.

As per me if we have to re-enroll all the device it requires lot of effort. Please help.

As per this note 2106704 - APNS renewal for custom afaria client

Reproducing the Issue

Users are unable to locate the "renew" button on the developer.apple.com website for the Afaria Custom Signed Client.

Resolution

1. Create this additional certificate to use for the required App ID. There are only two slots available.
2. Create a new Afaria Enterprise Client. This Enterprise Client will now have both certificates.
3. Deploy this new Enterprise Client to all IOS devices.
4. Once the new Enterprise Client is deployed to all devices, import the new certificate into the Afaria Administrator-->Server Configuation-->IOS Notification--> APNS Push Certificate for custom-signed Afaria Application
5. Revoke the old certificate that will expire from the developer.apple.com website, so that there is atleast one free slot for next years certificate renewal process.

[former_member44015 · Accepted solution]

Hi Doak,

>> if i import the new certificate into the Afaria Administrator-->Server Configuation-->IOS Notification--> APNS Push Certificate for custom-signed Afaria will this complete the renewal process

You are not complete yet.

You have to re-create your custom signed Afaria client.

(It is step 2 and 3 in KBA#2106704.)

If you have a question for create custome sigend client, please read this document.

SAP Afaria Custom Client Requirement Details (PDF)

>> Do i have to re-enroll the device?

You don't have to re-enroll.

Please refer additional information.

https://launchpad.support.sap.com/#/notes/0001904111

Regards,

Yasutaka Yano

[Former Member · Accepted solution]

Thanks for the clarification Yasutaka .

How can i redeploy the custom signed Afaria Client to all device?  If i upload the recreated custom Afaira Client  in Server->configuration->IOS Afaria Application will that update all the device enrolled?

Since we don't have any other system other than the production (Afaira cloud edition) i want be sure before i make any changes in production.

Also i want to know, if we use this option, will it affect other application already installed in the device which is MDM managed . I mean will other application gets automatically reinstalled?

Thanks,

Doak Regis

[Former Member · Accepted solution]

What i did was, created a new configuration policy in Afaria and added the provisioning profile of the custom Afaria client and assign this policy to the group.

Thank you.