Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Recording iOS device (e.g., iPhone and iPad) sessions require that you have installed your self-generated CA root certificate on these devices. This is a quick review of the steps to get this on your iPhone or iPad.

...

After clicking on the certificate in the e-mail, entering the URL in Safari, or clicking on the certificate in your iPhone/iPad, your CA root certificate can be imported:

iPad

Step

ScreenShot

Install Profile

After you click on your certificate file, there will be a new Profile downloaded.

  1. Under Settings--> General, the “Profile Downloaded” will open a dialog to install the certificate.

  2. Click Install

You also can remove the Downloaded Profile if this was either mistakenly downloaded or a no longer needed Profile.

Image Modified

Enter Passcode

  1. Enter your passcode to Continue

  2. Do not enter your Apple ID password.

Image Modified

iOS Warning

  1. iOS will warn you that this certificate has no trust or a trusted Root CA

  2. Since this is self-generated, you can install this certificate

  3. iOS will ask for final confirmation before doing the install

Image ModifiedImage Modified

Profile Installed

  1. Once completed, the Certificate will read now as Verified.

  2. Click More Details to check.

Image Modified

ZebraTester Root CA Sample Cert

All the details originally provided at certificate creation should be listed here.

Image Modified

Settings

You can find the Configuration Profiles underneath the SettingsGeneralProfiles menus.

Image Modified

...

iPhone

Step

ScreenShot

Settings: Profile Downloaded

After you click on your certificate file, there will be a new Profile downloaded.

  1. Under Settings, → “Profile Downloaded” will open a dialog to install the certificate.

  2. Click the right “>” to start Installation.

Image Modified

Install Profile

  1. Notice that the Profile has a Not Verified label beneath it.

  2. Click Install

You also have the option to Remove the Downloaded Profile if this was either mistakenly downloaded or a no longer needed Profile.

Image Modified

Enter Passcode

  1. Enter your passcode to Continue

  2. Do not enter your Apple ID password.

Image Modified

iOS Warning

  1. iOS will warn you that this certificate has no trust or a trusted Root CA

  2. Since this is self-generated, you can install this certificate

  3. Click Install

  4. iOS will ask for final confirmation before doing the install

  5. Click Install

Image ModifiedImage Modified

Profile Installed

  1. Once completed, the Certificate will read now as Verified.

Image Modified

Profile for ZebraTester Root CA Sample Cert

  1. Click Profile –> More to see the certificate.

  2. Drill down again to get certificate details.

All the details originally provided at certificate creation should be listed here.

Image ModifiedImage Modified

ZebraTester Root CA Sample Cert

All the details originally provided at certificate creation should be listed here.

Image Modified

...

Trust

Trust manually installed certificate profiles in iOS In iOS 10.3, and later, when you manually install a profile that contains a certificate payload, that certificate isn't automatically trusted for SSL.

...

Note

You must manually turn on trust for SSL when you install a new profile.

Step

Screenshot

Certificate Trust Settings

If you want to turn on SSL trust for a certificate:

  • Go to Settings > General > About > Certificate Trust Settings

  • Find the Enable Full Trust For Root Certificates section.

  • Enable trust for the certificate

iPhone

Image Modified

iPad

Image Modified

Root Certificate Warning

  • Click Continue

iPhone

Image Modified

iPad

Image Modified

Certificate Trust Settings Completed

iPhone

Image Modified

iPad

Image Modified

Tip

Recommendation

Apple recommends deploying certificates via Apple Configurator or Mobile Device Management (MDM). Certificate payloads installed with Configurator, MDM, or as part of an MDM enrollment profile are automatically trusted for SSL.