Every device management service system needs an Apple Push Notification System (APNs) certificate to facilitate secure communications with your enrolled devices. Historically, someone would go to appleid.apple.com to create a personal Apple ID. Then the organization would share the credentials among the IT department. Every year someone in the organization needs to use that Apple Account to renew the APNs certificate.
One challenge with using a personal (unmanaged) Apple Account for an organization’s assets such as the APNs certificate is that anyone with access to the Apple Account credentials can effectively hijack the Apple Account simply by changing the email address associated with the Apple Account.
Moving forward, we recommend that organizations that are in Apple Business or Apple School Manager create a Managed Apple Account to create and maintain the APNs certificate for their organization. This guide will show you how to create a managed Apple Account for APNS in Apple Business or Apple School Manager.
