Creating the MDM Certificates (Windows)

Creating an APN certificate involves creating a CSR, signing it through this portal, and finally submitting it to Apple's website.

Creating the Certificate Signing Request

First, go to and download the appropriate version of OpenSSL for your environment. Don't download the Lite version. Download the current 

Win64 OpenSSL v1.x.x or Win32 OpenSSL v1.x.x version depending on your server architecture. OpenSSL also requires Visual C++ 2008 Redistributables which are linked to on the OpenSSL download page. 

Now we need to make a Certificate Request.

From a command prompt type:

C:\OpenSSL-Win64\bin\openssl.exe req -out "%userprofile%\Desktop\request.csr" -new -newkey rsa:2048 -nodes -keyout "%userprofile%\Desktop\privateKey.key" -config C:\OpenSSL-Win64\bin\openssl.cfg

You will be prompted to enter some information for your certificate request. These commands will result in a request.csr and a privateKey.key on your desktop

You are done! Click here to upload your CA Request for FileWave to sign. You must have an active Filewave account. Click on “Manage Certificate” under the “Support” menu and upload the request.csr from your desktop.

After uploading to download the plist file and continue with the steps below.

Uploading to Apple's Portal

Now you need to upload your "signed_csr_1.plist" to Apple Inc. (your file's name can be different)
Go to : and log in with your Apple ID

Click "Create a Certificate" 
cerate cert

Check the box and Accept

Click "Choose File" and...

...browse to your just downloaded "signed_csr_1.plist"

Apple will confirm your file choice. Click Open.

After a moment the Apple site will return a Confirmation. Click Download.

Combining the APN cert with the private key into a .p12 file

From a command prompt type:

C:\OpenSSL-Win64\bin\openssl.exe pkcs12 -export -in "%USERPROFILE%\Downloads\MDM_ FileWave (Europe) Gmbh_Certificate.pem" -inkey "%USERPROFILE%\Desktop\privateKey.key" -out "%USERPROFILE%\Desktop\push_cert.p12" -name fw-apns

You will be prompted to enter an export password, which you can leave blank. This will merge the MDM_ FileWave (Europe) Gmbh_Certificate.pem in the downloads folder with the privateKey.key from step two on your desktop resulting in a push_cert.p12 on your desktop.


Uploading the .p12 into FileWave

Open FileWave Admin, log in to your FileWave server and open the FileWave Admin → Preferences. 

Go to the Mobile tab. Click "Browse..." next to "APN Certificate/Key:" 

Navigate to the .p12 file that you just exported, and click "Open" 

"Current Certificate" will change and show that your file was properly uploaded.

That is it. You now are able to send commands to Apples Push Notification Service! Next step is to enroll some iOS devices.