This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(198.4, 96%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES%3C/text%3E%3C/svg%3E)
Hello,
I am running a web app with a web job to send push notifications to Apple. Apple have announced that they are updating their certificate, see email below. Please can someone answer whether I need to do anything with my app to enable my web jobs to continue to send pushes to Apple?
Many thanks
Stewart
| Hello, |
|---|
| Hello, |
| We’re reaching out with a final reminder that the Certification Authority (CA) for Apple Push Notification service (APNs) is changing. APNs updated the server certificates in sandbox on January 21, 2025. APNs production server certificates will be updated on February 24, 2025. To continue using APNs without interruption, you’ll need to update your application’s Trust Store to include the new server certificate: SHA-2 Root: USERTrust RSA Certification Authority certificate. |
| To ensure a smooth transition and avoid push notification delivery failures, please make sure that both old and new server certificates are included in the Trust Store before the cut-off date for each of your application servers that connect to sandbox and production. At this time, you don’t need to update the APNs SSL provider certificates issued to you by Apple. |
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(211.20000000000002, 61%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBS%3C/text%3E%3C/svg%3E)
maybe.
if the new certificate is not already installed as trusted on the hosting webserver, then you will get a certificate error when apple switches. you app could override certificate validation if you can not access the hosting server. but it should be updated.
note: it was already installed on my computer.
Thanks for the answer. I guess I was trying to seek reassurance that Microsoft would be adding this certificate to the Web App trust store. I can't see a way of doing that on the Azure portal page. I am assuming that Microsoft will do it automatically?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 15%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBN%3C/text%3E%3C/svg%3E)
Hi @Stewart,
Thank you for the question!
Microsoft generally maintains the trusted root certificates for Azure Web Apps so, in general, you shouldn't have to do anything here manually. when Apple does an update to its certificate, then Microsoft will add it into the trust store, and hence your web job should continue to send push notifications without any problem.
If you find the answer helpful, Kindly Upvote it
Hi @Stewart,
Just want to check if the above answer worked for you or else let us know if you need any help, please do not forget to "Accept the answer” and “upvote it” wherever the information provided helps you, this can be beneficial to other community members.it would be greatly appreciated and helpful to others.