Report Apple Mdm Cert Expiry Scheduled

Monitor/Report expiry of Apple device management certificates.

Description

Monitors expiration dates of Apple Push certificates, VPP tokens, and DEP tokens in Microsoft Intune. Sends an email report with alerts for certificates/tokens expiring within the specified threshold.

Setup regarding email sending

This runbook sends emails using the Microsoft Graph API. To send emails via Graph API, you need to configure an existing email address in the runbook customization.

This process is described in detail in the Setup Email Reportingarrow-up-right documentation.

Location

Organization → General → Report Apple MDM Cert Expiry_Scheduled

Permissions

Application permissions

  • Type: Microsoft Graph

    • DeviceManagementManagedDevices.Read.All

    • DeviceManagementServiceConfig.Read.All

    • DeviceManagementConfiguration.Read.All

    • Mail.Send

Parameters

Days

The warning threshold in days. Certificates and tokens expiring within this many days will be flagged as alerts in the report. Default is 300 days (approximately 10 months).

Property
Value

Required

false

Default Value

30

Type

Int32

EmailTo

Can be a single address or multiple comma-separated addresses (string). The function sends individual emails to each recipient for privacy reasons.

Property
Value

Required

false

Default Value

Type

String

EmailFrom

The sender email address. This needs to be configured in the runbook customization

Property
Value

Required

false

Default Value

Type

String

Back to Runbook Reference overview

Last updated

Was this helpful?