Guides
Log InSign Up

iOS: p12 Generate Certificates

Step-by-step guide for creating an iOS / macOS Push Authentication Certificate (.p12)

Suggest Edits

To send push notifications to iOS apps, an authenticated connection to Apple Push Notification Services (APNs) is required. You can authenticate using a token-based (.p8 key) or a certificate-based (.p12 file) method — but only one is necessary.

This guide will walk you through setting up a certificate-based (.p12 file). This is not recommended because you must renew it annually. This includes logging into your Apple Developer Account to generate the new certificate and uploading it to your OneSignal dashboard every year.

Requirements

Make sure you have the following before starting:

Generate a Push Certificate

You first need to create a Certificate Signing Request .certSigningRequest File (CSR) on macOS.

  1. Open Keychain Access: Applications > Utilities > Keychain Access
  2. Launch the Certificate Assistant
  • From menu bar, click:
    Keychain Access > Certificate Assistant > Request a Certificate From a Certificate Authority...


  1. Enter Your Information

Fill in the required fields:

  • User Email Address: [email protected]
  • Common Name: Your name or the name for the certificate
  • CA Email Address: Leave this blank
  • Request is: Select Saved to disk


  1. Click Continue
  • Choose a location to save the .certSigningRequest file
  • Click Save to finish

You now have your .certSigningRequest file ready to use!

Enable Push Capabilities for the App ID

Skip if you use Automatically manage signing within Xcode.

  1. Go to the Identifiers section of the Apple Developer portal, locate and select your app's App ID from the list.

  1. Enable the Push Notifications capability by checking the box. ⚠️ Do not click "Configure" — just enable the toggle.

Create a Push Certificate

Follow these steps to generate the Apple Push Notification service (APNs) SSL certificate:

  1. Visit the Apple Certificates page.

  2. Click the plus (+) button to create a new certificate.

  3. Under Services, select:

    • Apple Push Notification service SSL (Sandbox & Production)
    • Then click Continue

  4. Select your App ID from the list and click Continue.


  1. Upload your previously generated .certSigningRequest file.

  1. Click Continue, then click Download to save the resulting .cer file to your computer.

You’ll use this .cer file to configure push notification services.

Create a Private Key and export the .p12 certificate

  1. Double-click the downloaded .cer file to import it into Keychain Access.
  2. In Keychain Access, navigate to:
    • Keychains > Login
    • Category > My Certificates
  3. Locate the certificate named Apple Push Services.
  4. Right-click the certificate and select Export.

  1. Choose a location to save the file, and select the file format as .p12. When prompted, you can set a password for the .p12 file (this password is required when uploading to services like OneSignal).

Upload the .p12 to OneSignal

  1. In your OneSignal dashboard, go to your app > Settings > Push & In-App > Apple iOS.
  2. Upload the .p12 file (and enter the password if you set one). Click Save.

✅

Success!

You’ve successfully set up APNs authentication using a .p12 certificate in OneSignal.

Your iOS app is now ready to send and receive push notifications! 🎉

.p12 troubleshooting

Invalid Certificate Format Error

  • Cause: The uploaded file is not in .p12 format.
  • Fix: Ensure you export the certificate from Keychain Access as .p12 (not .cer or .pem).

"Incorrect Password" When Uploading to OneSignal

  • Cause: Password was entered incorrectly or not set.
  • Fix:
    • Try exporting again and set a new password.
    • Ensure no extra spaces are added when pasting.
    • If using Provisionator, the password is shown in the UI.

Missing Private Key in Exported File

  • Cause: Certificate was imported but not paired with a private key.
  • Fix:
    • Make sure you generate the CSR from Keychain Access on the same machine.
    • After downloading the .cer file, double-click to install and check if the key appears under My Certificates.

Push Notifications Not Working After Upload

  • Cause: Incorrect App ID, or Provisioning Profile missing capabilities.
  • Fix:
    • Confirm the .p12 matches the App ID used in the app.
    • In Apple Developer Portal, ensure the App ID has Push Notifications enabled.
    • Make sure the Provisioning Profile includes Push.

Expired Certificate

  • Cause: .p12 certificate is no longer valid.
  • Fix:
    • Go to Apple Developer > Certificates and check expiry.
    • Revoke the old certificate and create a new one.

FAQ

Do I need a provisioning profile and how to create it?

Yes, Apple requires different types of profiles for development, testing (Ad Hoc), and distribution to the App Store.

In Xcode, you should be able to select Automatically manage signing to create one automatically.

Automatically manage signing in Xcode

Otherwise, see Apple's docs on provisioning profiles for details.

Updated about 2 months ago