'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
Can You Delete an Apple MDM Push Certificate Account in Intune?
Question details
An organization is enrolling Apple devices in Microsoft Intune and needs to know if deleting the profile or account associated with an existing MDM push certificate will disrupt other devices or accounts.
- Product
- Microsoft Intune
- Device & OS
- not provided
- Scenario
- Managing Apple device enrollment and MDM push certificates in an enterprise environment.
- Observed behavior
- Seeking expert confirmation on the potential impact of deleting the certificate account before taking action.
Do not delete the existing Apple MDM push certificate or its associated account until you have confirmed the exact impact with Microsoft, as doing so may break management communication with all enrolled Apple devices.
Request Specialized Guidance via Microsoft Q&A
Because deleting MDM certificates can permanently sever communication with enrolled devices, it is highly recommended to consult Microsoft Intune specialists first.
Apple MDM push certificates are critical for Intune to communicate with iOS and macOS devices. Deleting the certificate or the Apple ID account associated with it typically breaks trust between the devices and the management server, meaning you might have to re-enroll every device.
Open your web browser and navigate to the Microsoft Q&A Intune section at https://learn.microsoft.com/en-us/answers/tags/415/intune.
Log in using your organizational Microsoft credentials.
Click on 'Ask a question' and explain that you want to delete the account used to create an existing Apple MDM push certificate, asking specifically about the impact on currently enrolled devices.
Do not make any changes in the Intune admin center or the Apple Push Certificates Portal until a Microsoft engineer or Intune expert verifies the exact impact on your environment.
Manage Your IT Documentation with WPS Office
While waiting for Microsoft Intune support to assist with your MDM push certificate queries, consider using WPS Office to manage your IT documentation, device deployment plans, and policy spreadsheets. It is a powerful, lightweight suite that acts as a perfect alternative to Microsoft Office.
- 1. Download the Installer: Visit the official WPS Office website and download the free installer for your operating system.
- 2. Install the Suite: Run the setup file and follow the on-screen instructions to install the application.
- 3. Start Creating: Launch WPS Office to instantly begin managing your IT deployment plans and documentation.
Frequently Asked Questions
What happens if an Apple MDM push certificate expires in Intune?
If the certificate expires, Microsoft Intune can no longer communicate with your enrolled Apple devices. You must renew the certificate using the original Apple ID before it expires to maintain management capabilities and deploy new policies.
Can I use a different Apple ID to renew my Intune MDM push certificate?
No, you must use the exact same Apple ID that was used to create the original MDM push certificate. Changing the Apple ID generates a completely new certificate, which breaks the connection to all existing devices and requires them to be re-enrolled.
How do I find out which Apple ID was used for the MDM certificate?
In the Microsoft Intune admin center, go to Devices > iOS/iPadOS > iOS/iPadOS enrollment > Apple MDM Push Certificate. The Apple ID used to create the original certificate is usually displayed in the certificate details section.
