Apple MDM Push (APNS) certificates must be renewed regularly. Failure to renew your certificate before it expires may cause you to lose MDM communication with managed iOS devices.
To renew your Apple Push Notification Service MDM certificate:
Note: It's important to log into the Notification server when performing this procedure. The CSR creation process requires that you return to the Notification server with the PEM file to import it into the console. This matches the correct private key that was originaly created during the CSR request.
Symantec Mobile Management