Action required: Customers with on-premise ENS servers must update CNS public certificate by September 30th 2016

Action required: Customers with on-premise ENS servers must update CNS public certificate by September 30th 2016

Customers using the AirWatch Email Notification Service (ENS) must update the AirWatch Cloud Notification Service (CNS) public certificate used in their environment by September 30th, 2016.  On September 30th, 2016, the current certificate will expire and email notifications will no longer be sent to devices using VMware Boxer or AirWatch Inbox until it is successfully renewed.  AirWatch has created a tool that can be used to update this certificate on all on-premise ENS servers.  Please follow the steps below to ensure your certificate is updated.

Note: if you have installed ENS prior to the posting of this announcement (August 19, 2016), then you must follow the steps below to update the CNS certificate.

How to update the CNS public certificate on ENS servers

  • Download the AirWatch ENS Config Tool from myAirWatch.
  • Download the CNS public certificate from myAirWatch.  This .zip file contains both the old and new CNS public certificates.
  • Copy both files onto the ENS server.
  • Move the AW.ENS.ConfigTool.exe file into the ENS deployment folder.  Typically, this filepath is C:\AirWatch\Email Notification Service.
  • In the ENS deployment folder, rename the file AW.ENS.ServiceAccountConfigTool.exe.config to AW.ENS.ConfigTool.exe.config.
  • Run the ENS Config Tool (AW.ENS.ConfigTool.exe) on the ENS server.
  • Select Upload SSL Pinning Certificate.
  • Select Upload Certificate.
  • Choose the new CNS public certificate to be uploaded (Supported certificate file extensions are .cer, .crt, .der, .pem, .p7b).
  • Select Submit.


The following steps apply to on-premise AirWatch Console environments only:

  • Navigate in a web browser to your AirWatch Console environment and log in.
  • Navigate to Settings > System > Security > SSL Pinning.
  • If it does not already exist, add the host  Make sure both the old and new CNS certificates (downloaded in the steps above) are added to this host.


Once the CNS public certificate has been properly updated, the ENS Config Tool will restart the ENS service.


Support Contact Information

To open a Support Request, please call your local AirWatch support line or submit a Support Request via myAirWatch

Have more questions? Submit a request


Article is closed for comments.