Restoring MDM Server Certificates

1. RestoreBackup of the Management Utilities

2. Import MDM Trusted Root Certificate

3. Import Personal Apple Push Certificate

4. Import into IIS Server Certificate Personal MDM Certificate

5. Bind Port to SSL Certificate HASH

**PLEASE NOTE** - If you are restoring to a server that has a different IP Address than the original please re configure your firewall port forwarding for the port used in the MDM Server to route to this new IP address - if this is not updated you will loose connectivity to all of your MDM Managed Devices. 

Also Update your Site Manager IP address in Service if you have changed IP Address.

Importing MDM Trusted Root Certificate

Select Trusted Root Certificate - Right Click to open up the menu, select All Tasks and choose Import

This will open up the Import wizard - press Next

Browse to where you have the certificate you wish to import

Select the certificate file

Press Next

Enter the Password that was used when exporting the certificate, select Mark this Key as Exportable and Include all extended properties

Press Finish to complete the import

Restoring the Apple Push Server Certificate

Select Personal Certificate - Right Click to open up the menu, select All Tasks and choose Import

This will open up the Import Wizard

Browse to where you have the certificate to import - Press Next

Select Place All Certificates in the Personal Certificate Store

Press Finish to complete the Import

Importing the Trusted MDM Server Certificate into the Internet Information Services (IIS) Server Certificates

Open Internet Information Services (IIS ) Manager

On the left hand tree click on the server - then select Server Certificate in the main panel - then Select Import on the right hand menu

Select the Trusted Root MDM Certificate file - enter the password used when exporting the certificate.

Binding MDM Server Port to SSL Certificate Imported

Now the certificate has been imported we need to bind the certificate to the port used for the secure MDM Server

Open up a command shell and run as administrator

Type in netsh

Now type in the following to bind the certificate ID to the port - change the port number to the MDM server port used on your configuration - this can be found on the MMD Administration page

Follow the instructions below to obtain the certhash for your certificate

Open up notepad and paste in the command line, then you can edit this - when pasting into the command shell, check to make sure the ? character is not inserted after the certhash=

http add sslcert ipport=0.0.0.0:18032 certhash=61cbc790c7eb9a9b8df67071f52a70f4af36e96 appid={0482bcfc-e80e-49c7-b83a-8a7750458cae}

To get your certificate cert hash which is required for the binding command double click on the MDM Certificate within Trusted Root Certificate

Click on the Details tab and select Thumbprint - copy these values into notepad and remove the spaces - the paste into your netsh command