Warranty Updater Tool Configuration for GSX AppleCare Expirations

Last updated:

The Watchman Monitoring Warranty Updater tool leverages your existing GSX access to provide AppleCare status updates for monitored computers.

Watchman Monitoring cannot grant you GSX access.


  • Sold-To: An existing GSX Sold-To number. We cannot grant you GSX Access.
  • AppleID: The Warranty Updater requires an AppleID which has been granted GSX’s “Can Access Web Services” permission.
  • Prod.apple.com.chain.pem: The signed SSL Certificate bundle, which you received from AppleCare.
    • The certificate request process is documented here)
  • Private Key: The keyfile from which your .csr was generated. If the key was created with a password, it will also be required.
  • Whitelisted IP: The tool must be installed on a computer which access GSX from an IP which AppleCare has white-listed.
  • A single online computer: The Warranty Updater will poll your account every 5 minutes, and update all AppleCare status as needed.
  • Watchman Monitoring API key: access to one or more Watchman Monitoring subscriptions.

The Warranty Updater tool uses few CPU cycles and can be run alongside any other service. A computer running AST would be a fine place to install the Warranty Updater.app.

The Warranty Updater tool can update multiple Watchman Monitoring subscriptions, including Managed Accounts.

Enable GSX Integration

Configure GSX Integration

Visit the GSX Integrations tab of your dashboard, set to Automatic, and choose your preferred Date Format. Click Show API Key.

Copy Watchman Monitoring API Key

Click the Copy button next to the API Key.

Configure Warranty Updater Tool


Find the Watchman-Monitoring-warranty-updater-installer.pkg in your Downloads folder and launch.

Watchman-Monitoring-warranty-updater-installer.pkg Installer

Install the Warranty Updater as you would any packaged application.

Warranty Updater.app

Locate the Warranty Updater.app in your Applications folder.

Unlock Warranty Updater Tool

To make changes, and add your subdomain for AppleCare Expiration lookups, click the lock in the lower left corner of the Warranty Updater Tool.

Warranty Updater Authentication

Provide administrator credentials.

Add a new Watchman Subdomain

Click the + below the Watchman Subdomain list.

Watchman Subdomain details
  • Subdomain: The first part of the URL at which you access Watchman Monitoring.
  • API Key: Paste in an API key from this subdomain.
    API keys can be found at
  • Sold To: Enter your Sold to’s GSX account number, add leading zeros (0) to ensure 10 digits.
  • Apple ID: Enter an Apple ID which has been granted Can Access Web Services.
    To prevent errors, ensure the Apple ID is used to log into gsx.apple.com within each 30 day period.
  • Certificate Chain File: Select complete certificate file which you received from Apple. This file’s name will include the word ‘chain’, and will be the following format:
  • Private Key: This is the Private Key you created during the certificate creation process.
    If you followed Apple’s instructions, this file is likely named
    privatekey.pem and has a related password. Enter the password in the box below the key.
    If you followed our instructions, this file will be named
    gsx-production.key and will not have a password. Your key file may be named different.

After entering these settings, click OK to save your company setup.

If you have a password on your Private Key, enter the Private Key Password.

Successful Warranty Updater Tool Lookups

If successful, you should see a recent Last Successful Run Date & Timestamp.

Repeat these steps to add additional Managed Accounts and other Watchman Monitoring Subscriptions to the Warranty Updater Tool.

Viewing the AppleCare Expiration Records

Computer Record

AppleCare Expirations are displayed on their respective Computer Record.

AppleCare Eligible Expiration Summary
AppleCare Protection Plan Expiration Summary

Group Listing

Additional serial numbers can be tracked manually by adding them to their related Group

Expiration Overview

Expirations can be viewed, searched and sorted at https://app.monitoringclient.com/expirations

See Expiration Tracking for additional information on using Expiration Tracking in Watchman Monitoring.

Expiration details are included in emails about the related computers.


Many issues related to looking up warranty information are related to the user permissions for the GSX user.  The following should be verified within GSX and MyAccess.

GSX - Web Services

The Warranty Updater requires an AppleID which has been granted GSX’s “Can Access Web Services” permission.

  • Use an existing Apple ID, or create a new Apple ID at https://appleid.apple.com. 
  • Using the same Appled ID as your AST Server should work fine.
  • Confirm that this AppleID can login to your GSX Account at https://gsx.apple.com .
  • Note: Two-Factor Authentication is required, and can take up to 3 days to activate.
  • Click Settings at the top. Click Permissions.
  • Confirm "My Privileges" can “Access Web Services”.
GSX Permissions: Can access Web Services


Ensure Web Services is selected Global Service Exchange in the MyAccess account management area.

  1. Log into MyAccess
  2. Go to My Team
  3. Select the User
  4. Select Global Service Exchange
  5. If you do not see Web Services in Access Roles > Optional Privileges, click Update Access and select Web Services.
  6. Locate the confirmation email and approve the change.

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request


Please sign in to leave a comment.