What you’re seeing
- The Intune admin center shows the Apple MDM push certificate as expired or about to expire.
- iPhones, iPads and Macs stop receiving new apps, policies and configuration changes.
- Remote lock, wipe or passcode reset commands never reach Apple devices.
- New Apple devices cannot enroll in Intune at all.
- Apple devices' last check-in dates all stop at about the same day.
Common causes
Every environment is different, but these are the causes our engineers find most often:
- The Apple Push Notification service certificate must be renewed every year and was not renewed in time.
- The certificate was created with a personal or former employee's Apple ID, so nobody can renew it.
- A new certificate was created instead of renewing the existing one, breaking the link to enrolled devices.
- Expiration reminders went to an email address nobody monitors.
- The renewal was started but never finished by uploading the new certificate to Intune.
Why it matters
The Apple push certificate is the link between Intune and every managed iPhone, iPad and Mac. When it expires, devices stop responding to management, so you cannot push updates, enforce security, or lock and wipe a lost device. If a new certificate is created instead of renewing the old one, devices may need to be re-enrolled, which can mean touching every Apple device in the business. Acting quickly limits the disruption and avoids a much bigger cleanup.
How AskTechGurus fixes it
Skip the trial and error. A certified engineer works on your actual system, finds the root cause, and fixes it properly.
Tell us what’s happening
Submit a ticket in about two minutes. Paste the error, describe what changed, and pick your tier. No charge to submit.
A certified engineer diagnoses it
A vetted, US-based systems engineer claims your ticket, usually within minutes during business hours, and investigates over a secure remote session you can watch and end at any time.
Fixed and verified with you
The engineer resolves the root cause and confirms with you that it’s working. You don’t just get a workaround, and you get a plain-English summary of what was wrong.
Pay only when it’s resolved
Fixed price from $99, invoiced only after you approve the fix. If it isn’t resolved, you don’t pay.
Frequently asked questions
Do we have to re-enroll all our iPhones?
Not if the original certificate can still be renewed with the same Apple ID. Re-enrollment usually becomes necessary only when a new certificate replaces the old one.
What if the person who set it up has left?
Access to the Apple ID used for the certificate is critical. If it belonged to a former employee, recovering that account is often the first step.
Can AskTechGurus help restore Apple management?
Yes. A certified US engineer can work through the renewal with you over a remote secure session, starting at $99, and you pay only when your Apple devices are responding again.