Every mobile device management (MDM) system needs an Apple Push Notification System (APNs) certificate to facilitate secure communications with your enrolled devices. Historically, someone would go to appleid.apple.com to create a personal Apple ID. Then the organization would share the credentials among the IT department. Every year someone in the organization needs to use that Apple ID to renew the APNs certificate.
One challenge with using a personal Apple ID for an organization’s assets such as the APNs certificate is that anyone with access to the Apple ID credentials can effectively hijack the Apple ID simply by changing the email address associated with the Apple ID.
Moving forward, we recommend that organizations that are in Apple Business Manager or Apple School Manager create a Managed Apple ID to create and maintain the APNs certificate for their organization. This guide will show you how to create a managed Apple ID for APNS in Apple Business Manager or Apple School Manager.
