In order to send push notifications to your app, an APNS certificate is needed for your app, and the same has to be converted to a  .pem format and uploaded to our dashboard. Follow the steps below to do the same:

Creating APNS Certificate

Generating the Certificate Signing Request (CSR)

First Open Keychain Access on your Mac and choose the menu option Request a Certificate from a Certificate Authority as shown below:

You should now see the window shown below. Enter your email address here and your app name for Common Name. Check Saved to disk and click Continue. Save the file as “.certSigningRequest”:

Create an APNS Certificate in Developer Account

Log-in to your developer account and go to Certificates, Identifiers and Profiles. Select Certificates Section and Click on the + icon to create a new certificate. In Create a New Certificate screen select Apple Push Notification service SSL(Sandbox & Production) and click Continue as shown below:

Next, select the App ID(App Bundle ID) for which you are creating the APNS certificate and click Continue

Now choose the certificate signing request file created in the first step and click Continue as shown below:

That's it! Your APNS certificate has been successfully created. Go ahead and download the same and open it to include it in your Mac Keychain Access

Converting Certificate to PEM format

Follow the below steps to convert the APNS certificate obtained in the previous step to .pem file:

1. First, go to Keychain Access and select your APNS certificate, then right-click on it select Export option. Now export your certificate in .p12 format. You will be prompted to provide a password for .p12, do the same.

2. Convert the .p12 file obtained in the previous step into a .pem file by using openssl commands as shown below, here you will have to provide the Import Password:

openssl pkcs12 -in p12Cert.p12 -out pemAPNSCert.pem -nodes -legacy
Enter Import Password:
MAC verified OK

Verify .pem file

Before uploading the certificate to MoEngage Dashboard, verify the .pem file obtained:

1. First, open the .pem in a text editor to view its content. The certificate content should be in format as shown below. Make sure the pem file contains both Certificate content(from BEGIN CERTIFICATE to END CERTIFICATE) as well as Certificate Private Key (from BEGIN PRIVATE KEY to END PRIVATE KEY)
   Text

   Bag Attributes
       friendlyName: Apple Push Services:<Bundle ID>
       localKeyID: <>
   subject=<>
   -----BEGIN CERTIFICATE-----
   
   <Certificate Content>
   
   -----END CERTIFICATE-----
   Bag Attributes
       friendlyName: <>
       localKeyID: <>
   Key Attributes: <No Attributes>
   -----BEGIN PRIVATE KEY-----
   
   <Certificate Private Key>
   
   -----END PRIVATE KEY-----

2. Also, you check the validity of the certificate by going to SSLShopper Certificate Decoder and pasting the Certificate Content (from BEGIN CERTIFICATE to END CERTIFICATE) to get all the info about the certificate as shown below:

   As you can see, the Common Name should contain Apple Push Services and the App's Bundle ID. Confirm the organization's information and also the Validity of the Certificate. Once everything is verified, upload the certificate to our dashboard.

Uploading PEM file to MoEngage Dashboard

1. Navigate to Settings > Channels > Push > App Push.
2. Select iOS (APNS) in the Platforms available on the menu at the top.
3. Click on APNS provider certificate. 
4. Upload the .pem file. Enter the password for the .pem file, or leave it blank if there isn't any. 
   

Test/Live Builds

• If you are testing the app on Test Flight or a live app store build, make sure you upload the ad-hoc or production pem to our dashboard. And also in this case you have to send push notifications from the Live environment of your account.

• For the dev build, you can upload the development or production certificate in the dashboard, but make sure that you create your campaign in the Test environment, as you cannot send push notifications to the dev build from the Live environment.