In order to communicate with Apple devices, CapaInstaller relies on the Apple Push Notification service (APNs). The APNs require requires that each service identifies itself by using a certificate issued by Apple, ensuring that only authorized services can contact Apple devices.
Upgrading from CapaInstaller 6.0 to CapaInstaller 6.1
In CapaInstaller 6.1 Push messages for Apple and Android are sent from CapaOne and new features are available only on the MDM Portal. To link between your installation and CapaOne you must have a Portal Access Token in the console.
Check if you already have a Portal Access Token:
|Portal Access Token|
Open System Administration module in CapaInstaller Console, select Software Accounts and then select CapaOne.
If you have a Portal Access Token you don't need to do further.
When you upgrade to CapaInstaller 6.1, you must upload the Apple Push Notification Certificate to https://mdm.capaone.com. Check you have access to https://mdm.capaone.com/certificates. Use the same credentials as to https://portal.capaone.com. If you do no have access contact your CapaInstaller Account Manager.
To generate a new APN Certificate follow the Apple Push Certificate Request from CapaInstaller Console. Uploading the certificate is done automatically. See Just follow the guide below.
Request and generate or update an Apple Push Certificate
In the "System Administration" module, select menu item "Actions", then select "Apple Push Certificate request.."
Wizard starts, press the "Next" button to proceed
If the "Verify OpenSSL" isn't status Passed go to Install OpenSSL
If the "Verify access to
CapaInstaller certificate request signing service" isn't status passed you must:
First, try to open a browser on the machine from which you run this wizard. Open the following URL: http://certservice.capainstaller.com:7000/status
Ensure that port 7000 is opened from the CapaInstaller server out to the internet. The certificate request signing service is placed on a
CapaInstaller server at port 7000.
Select an output folder. Press the "Start" button, and click "Next" when the certificate request is finished
|5||Now you have created the certificate request which has been signed by CapaSystems and stored in the previously selected output folder|
Press the "Open Apple Push Certificates Portal"
Log in with your Apple Push Certificates Portal account
Press the "Renew" tab
If this disclaimer appears then just accept it
Press "Choose File" and select the file named: plist_encoded, it is stored in the output directory, and click "upload"
Now you should get the real certificate as shown in the picture.
First, you should open your calendar and insert an alert that will expire a month before the certificate's expiring date. This will help you recall when to get a new certificate.
You should now press the "Create Certificate File" button in the CapaInstaller certificate Wizard in order to continue the certificate issuing process.
In the "Apple certificate File" select the certificate downloaded from the Apple push Cert page. (Named: MDM_something.pem)
When that is done, press the start tab and then click next
Now you have the Apple Push Certificate in your output folder (File extension is pfx)
Now you need to open MMC
A new Apple Push Certificate has been generated and uploaded to CapaOne.
Logon to https://mdm.capaone.com and
Check the certificate is uploaded and valid