The Apple iOS Push Certificate must be renewed every year. If the certificate expires (or is revoked) all devices must be re-enrolled in Afaria. Something you want to avoid at any cost.
This blog will show you how to do this for a single Afaria 7 (SP 08) installation on Windows (Server 2008 R2). The information this post relies on is spread over following SAP knowledgebase articles: