---
title: Enroll in the Apple certificate and iDEP programs
slug: epmm/on-premise/installation-guide/enroll-in-the-apple-certificate-and-idep-programs
createdAt: 2026-10-06T07:51:53.938Z
---

Managing iOS devices using Mobile Device Management (MDM) requires a certificate from Apple. Ivanti EPMM uses Apple’s enhanced MDM certificate infrastructure to streamline the process of acquiring and uploading an MDM certificate. You can now complete the following tasks from a single screen within the Admin Portal:

- Generate a Certificate Signing Request (CSR)
- Upload the CSR
- Access the Apple Push Certificates Portal to request a certificate
- Upload the MDM certificate

If you already have an MDM certificate, but have not uploaded it, you can upload it from the same screen.

- If the Apple MDM certificate is created with a personal Apple ID, control of the certificate is retained by the user. While administrators cannot control the certificate, they can revoke it.
- We recommend the account and credentials used to create the MDM certificate be documented and stored in a secure location as this information will be required to generate a new MDM certificate when the existing certificate expires.
- If you are configuring Ivanti EPMM to support only MAM-only devices, skip these steps. For more information, see “Managing apps on MAM-only devices” in the Ivanti Apps\@Work Guide.

Go to the following topics if you intend to do or have one of the following scenarios:

- [Develop and distribute in-house apps](docId:6UrMRPuv21iNM6nSVP3SA)
- [Requesting an MDM certificate](docId:6UrMRPuv21iNM6nSVP3SA)
- [Uploading an MDM certificate](docId:6UrMRPuv21iNM6nSVP3SA)

## Develop and distribute in-house apps

If you intend to develop in-house apps for distribution, then you still need to participate in Apple’s iDEP program. The enhanced MDM certificate infrastructure does not eliminate this requirement.

## Requesting an MDM certificate

You can request a mobile device management (MDM) certificate from Apple.

:::hint{type="info"}
Make sure that appgw\.mobileiron.com is reachable from Ivanti EPMM.
:::

**Procedure **

1. From the Ivanti EPMM Admin Portal, select <font color="#323232">Settings &gt; System Settings &gt; iOS &gt; MDM</font>.
2. Select the <font color="#323232">Enable MDM Profile</font> option.
3. Click <font color="#323232">Install MDM Certificate</font> to open the **MDM Certificate Generation** window.
4. Click **I want to create a new MDM certificate**.
5. Click <font color="#323232">Download Certificate Signing Request</font>.
6. Click the <font color="#323232">Apple Push Certificates Portal</font> link to start the process of requesting the MDM certificate.
7. When you receive the certificate, click <font color="#323232">Upload MDM Certificate</font> to open the **Upload MDM Certificate** window.
8. Click<font color="#323232"> Browse </font>to select the MDM certificate.
9. Click <font color="#323232">Upload Certificate</font>.

- Securely store, in an escrow-like account accessible to more than one individual, the username and credentials used to register with Apple.
- Make a note of the date when the MDM certificate expires and set a reminder to renew the certificate before it expires to avoid service outage.
- You have the option to create an alert which will notify you if the MDM certificate is revoked.

## Uploading an MDM certificate

If you have already requested and received your MDM certificate from Apple, you can upload the certificate using the following steps:

**Procedure&#xA0;**

1. Log into the Admin Portal.
2. Select <font color="#323232">Settings &gt; System Settings &gt; iOS &gt; MDM</font>.
3. Select the <font color="#323232">Enable MDM Profile</font> option to open the **MDM Certificate Generation** window.
4. Select <font color="#323232">I already have an MDM Certificate, and want to upload it</font>.
5. Note: If you already had a MDM certificate installed, you will see warning dialog. Click <font color="#323232">OK</font>.
6. Click <font color="#323232">Upload MDM Certificate</font> to open the **Upload MDM Certificate** window.
7. Click <font color="#323232">Browse</font> to select the MDM certificate.
8. Click <font color="#323232">Upload Certificate</font>.