Apple Push Notification service server certificate update

1 users found this article helpful

Introduction

On March 29, 2021, Apple will update the Apple Push Notification service root certificate to AAA Certificate Services which replaces the old GeoTrust Global CA root certificate. To ensure a seamless transition and to avoid push notification delivery failures, verify that the new root certificate is included in the Trusted Root Certification Authorities store on the server hosting Parallels Configuration Manager Proxy service before March 29.

Generally, certificates are auto-updated by operating systems. Your environment can be impacted if automatic management of root certificates is disabled and the new certificate has not been manually installed.

Note that Apple Push Notification service certificates issued to you by Apple (https://identity.apple.com/pushcert/) do not need to be updated at this time.

Determine if the new APNS root certificate is already added

  1. Open the Microsoft Management Console on the server hosting the Parallels Configuration Manager Proxy service for the Primary site.
  2. Click the File menu and choose Add/Remove Snap-in. Add the Certificates snap-in for the local computer account.
  3. Select the Trusted Root Certification Authorities > Certificates node in the left pane.




  4. Look for a certificate with AAA Certificate Services in the Issued To and the Issued By columns.
  5. Double-click the certificate and check its Thumbprint - d1eb23a46d17d68fd92564c2f1f1601764d8e349.
  6. If the certificate exists, no action is required.

Adding new APNS root certificate to the Trusted Root CA store

  1. Download the new root certificate (AAACertificateServices 5/12/2020) from https://support.sectigo.com/Com_KnowledgeDetailPage?Id=kA03l00000117cL.
  2. Open the certificates console:
    1. Open the Microsoft Management Console on the server hosting the Parallels Configuration Manager Proxy service for the Primary site.
    2. Click the File menu and choose Add/Remove Snap-in. Add the Certificates snap-in for the local computer account.



  3. Select the Trusted Root Certification Authorities > Certificates node in the left pane.

    Click the Action menu and choose All Tasks > Import.

    The Certificate Import Wizard opens.



 

Was this article helpful?

Tell us how we can improve it.