IT Admin Change Calendar Apple

APNs server certificates changed in sandbox and production in early 2025

Apple changed APNs server certificates in January-February 2025. Push/MDM servers must trust USERTrust RSA Certification Authority.

HighSecurity changeAction requiredIn effectVerified

Product

Apple Push Notification service (APNs)

Announced

17 October 2024

Effective from

20 January 2025

Completes

24 February 2025

Who is affected

Organizations running self-managed MDM infrastructure or in-house apps/services that connect directly to APNs rather than relying entirely on a managed provider.

Admin roles to involve: Apple/MDM admin, Infrastructure admin, Application owner

What administrators should do

Update any application, MDM, or notification server trust store that connects directly to APNs so it trusts the SHA-2 Root: USERTrust RSA Certification Authority certificate. Apple changed APNs sandbox server certificates on January 20, 2025 and production certificates on February 24, 2025. APNs SSL provider certificates issued by Apple did not need to be replaced for this change.

What happens if this is ignored

Servers that do not trust the updated APNs server certificate chain can fail to deliver push notifications, including MDM wake-up notifications.

Why this is rated high: severity comes from a fixed rubric — this entry is a security change that requires administrator action. Time-to-deadline is shown separately and never changes the rating.

Official source

Apple Push Notification service server certificate update

Published by Apple · Source dated 17 October 2024 · Checked 24 August 2026

Last verified 24 August 2026