Sophos Mobile in Central
6
5 Apple Push Notification service certificates
To use the built-in Mobile Device Management (MDM) protocol of iOS and macOS devices, Sophos
Mobile must use the Apple Push Notification service (APNs) to trigger the devices.
APNs certificates have a validity period of one year.
The following sections describe the requirements that must be fulfilled and the steps you must take to get access to the APNs servers with your own client certificate.
5.1 Requirements
For communication with the Apple Push Notification Service (APNs), TCP traffic to and from the following ports must be allowed:
• The Sophos Mobile server needs to connect to gateway.push.apple.com:2195 TCP
(17.0.0.0/8)
• Each iOS device with Wi-Fi only access needs to connect to *.push.apple.com:5223 TCP
(17.0.0.0/8)
5.2 Create an APNs certificate
1. On the menu sidebar, under SETTINGS , click Setup > System setup and then click the APNs tab.
The description on that tab guides you through the steps you have to perform to request a certificate from Apple and to upload it to Sophos Mobile.
2. In the Download certificate signing request step, click Download certificate signing request .
This saves the certificate signing request file apple.csr
to your local computer.
3. You need an Apple ID. Even if you already have an ID, we recommend that you create a new one for use with Sophos Mobile. In the Create Apple ID step, click Create a new Apple ID .
This opens an Apple web page where you can create an Apple ID for your company.
Note
Store the credentials in a safe place where your colleagues can access them. Your company will need these credentials to renew the certificate each year.
4. For your reference, enter your new Apple ID in the Apple ID field on the top of the APNs tab.
When you renew the certificate each year, you must always use that same Apple ID.
5. In the Create or renew APNs certificate step, click Apple Push Certificates Portal .
This opens the Apple Push Certificates Portal.
6. Log in with your Apple ID and upload the certificate signing request file apple.csr
.
7. Download the .pem
APNs certificate file and save it to your computer.
8. In the Upload APNs certificate step, click Upload certificate and then browse for the .pem
file that you received from the Apple Push Certificates Portal.
Copyright © 2018 Sophos Limited
Sophos Mobile in Central
9. Click Save to add the APNs certificate to Sophos Mobile.
Sophos Mobile reads the certificate and displays the certificate details on the APNs tab.
Copyright © 2018 Sophos Limited 7
