# Import a CA Root Certificate to an iOS device

Recording iOS device (e.g., iPhone and iPad) sessions require that you have installed your self-generated CA root certificate on these devices. This is a quick review of the steps to get this on your iPhone or iPad.

### Transferring the Certificate <a href="#transferring-the-certificate" id="transferring-the-certificate"></a>

The first step is getting the CA root certificate on the device. You can **e-mail your CA root certificate** to an Apple iOS device or **put it on any Web server** and address its URL directly in Safari. You can even use an application that syncs to each device (e.g., Evernote/Dropbox, etc.) and save that certificate to your iPhone/iPad Files folder.

After clicking on the certificate in the e-mail, entering the URL in Safari, or clicking on the certificate in your iPhone/iPad, your CA root certificate can be imported:

### iPad <a href="#ipad" id="ipad"></a>

| **Step**                                                                                                                                                                                                                                                                                                                                                                                                           | **ScreenShot**                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| <h4 id="install-profile">Install Profile</h4><p>After you click on your certificate file, there will be a new Profile downloaded.</p><ol start="1"><li>Under Settings--> General, the “Profile Downloaded” will open a dialog to install the certificate.</li><li>Click Install</li></ol><p>You also can remove the Downloaded Profile if this was either mistakenly downloaded or a no longer needed Profile.</p> | Open image-20201230-183600.png![](blob:https://apica-kb.atlassian.net/cb164cae-fdd8-44e9-8b7b-8a3fc1e71429#media-blob-url=true\&id=6f2cbdb2-127f-40c6-ad47-ca75af31c43b\&collection=contentId-1092714708\&contextId=1092714708\&mimeType=image%2Fpng\&name=image-20201230-183600.png\&size=445445\&width=1026\&height=770\&alt=)                                                                                                                                                                                                                                                            |
| <h4 id="enter-passcode">Enter Passcode</h4><ol start="1"><li>Enter your passcode to Continue</li><li>Do <strong>not</strong> enter your Apple ID password.</li></ol>                                                                                                                                                                                                                                               | Open image-20201230-183946.png![](blob:https://apica-kb.atlassian.net/8570d4e1-a939-4ded-ab4a-f8facdd4e41b#media-blob-url=true\&id=9d98e1c7-de5d-4f75-9d36-7e6552f5421d\&collection=contentId-1092714708\&contextId=1092714708\&mimeType=image%2Fpng\&name=image-20201230-183946.png\&size=219121\&width=540\&height=464\&alt=)                                                                                                                                                                                                                                                             |
| <h4 id="ios-warning">iOS Warning</h4><ol start="1"><li>iOS will warn you that this certificate has no trust or a trusted Root CA</li><li>Since this is self-generated, you can install this certificate</li><li>iOS will ask for final confirmation before doing the install</li></ol>                                                                                                                             | Open image-20201230-184143.png![](blob:https://apica-kb.atlassian.net/dafc267c-438c-4e9b-b895-e80250bcab67#media-blob-url=true\&id=5590755d-aebb-449e-9b80-c8b99d0211a0\&collection=contentId-1092714708\&contextId=1092714708\&mimeType=image%2Fpng\&name=image-20201230-184143.png\&size=152532\&width=543\&height=450\&alt=)Open image-20201230-184358.png![](blob:https://apica-kb.atlassian.net/67813f7f-3e38-41db-8088-3ee4824c335d#media-blob-url=true\&id=7cf927dc-8793-4873-8eb4-27f500946709\&collection=contentId-1092714708\&contextId=1092714708\&width=543\&height=463\&alt=) |
| <h4 id="profile-installed">Profile Installed</h4><ol start="1"><li>Once completed, the Certificate will read now as Verified.</li><li>Click More Details to check.</li></ol>                                                                                                                                                                                                                                       | Open image-20201230-184542.png![](blob:https://apica-kb.atlassian.net/91380bcd-dcc1-4584-ad0b-09f0f3150074#media-blob-url=true\&id=a47553de-aaf9-4863-8d97-18ef2fca66b0\&collection=contentId-1092714708\&contextId=1092714708\&width=541\&height=377\&alt=)                                                                                                                                                                                                                                                                                                                                |
| <h4 id="zebratester-root-ca-sample-cert">ZebraTester Root CA Sample Cert</h4><p>All the details originally provided at certificate creation should be listed here.</p>                                                                                                                                                                                                                                             | Open image-20201230-184808.png![](blob:https://apica-kb.atlassian.net/3a0f7b5c-859a-442b-8289-f722ece27020#media-blob-url=true\&id=69ec45b1-8f2e-4781-bc19-e33e5c98c218\&collection=contentId-1092714708\&contextId=1092714708\&width=543\&height=623\&alt=)                                                                                                                                                                                                                                                                                                                                |
| <h4 id="settings">Settings </h4><p>You can find the Configuration Profiles underneath the <strong>Settings</strong> → <strong>General</strong> → <strong>Profiles</strong> menus.</p>                                                                                                                                                                                                                              | Open image-20201230-184937.png![](blob:https://apica-kb.atlassian.net/4fb85a64-4fb5-4c8f-9eec-e844117aea5b#media-blob-url=true\&id=f9b29c01-a604-480e-8642-c1f2048e6a76\&collection=contentId-1092714708\&contextId=1092714708\&width=1026\&height=770\&alt=)                                                                                                                                                                                                                                                                                                                               |

&#x20;

***

### iPhone <a href="#iphone" id="iphone"></a>

| **Step**                                                                                                                                                                                                                                                                                                                                                                      | **ScreenShot**                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| <h4 id="settings-profile-downloaded">Settings: Profile Downloaded</h4><p>After you click on your certificate file, there will be a new Profile downloaded.</p><ol start="1"><li>Under <strong>Settings,</strong> → “<em>Profile Downloaded</em>” will open a dialog to install the certificate.</li><li>Click the right “<strong>></strong>” to start Installation.</li></ol> | Open image-20201230-185455.png![](blob:https://apica-kb.atlassian.net/f1e632ac-447c-4d37-9efb-e985ab5aaa77#media-blob-url=true\&id=ecf4654f-412f-4a7a-ad09-caf4cd02461e\&collection=contentId-1092714708\&contextId=1092714708\&width=377\&height=669\&alt=)                                                                                                                                                                                                                                                                                                                                                        |
| <h4 id="install-profile.1">Install Profile</h4><ol start="1"><li>Notice that the Profile has a <strong>Not Verified</strong> label beneath it.</li><li>Click <strong>Install</strong></li></ol><p>You also have the option to <em>Remove the Downloaded Profile</em> if this was either mistakenly downloaded or a no longer needed Profile.</p>                              | Open image-20201230-185812.png![](blob:https://apica-kb.atlassian.net/74a8313a-e365-41f4-95d3-3e0265cd96db#media-blob-url=true\&id=856cce3f-1130-4d97-a7e0-547797ac583f\&collection=contentId-1092714708\&contextId=1092714708\&width=377\&height=424\&alt=)                                                                                                                                                                                                                                                                                                                                                        |
| <h4 id="enter-passcode.1">Enter Passcode</h4><ol start="1"><li>Enter your passcode to Continue</li><li>Do <strong>not</strong> enter your Apple ID password.</li></ol>                                                                                                                                                                                                        | <p>Open image-20201230-190040.png<img src="blob:https://apica-kb.atlassian.net/8f5d8fe2-4776-4c3e-8e6a-3d1b094d767c#media-blob-url=true&#x26;id=645ef2f3-275d-4d5c-b99e-1fa218a1852e&#x26;collection=contentId-1092714708&#x26;contextId=1092714708&#x26;width=377&#x26;height=219&#x26;alt=" alt=""></p><p> </p>                                                                                                                                                                                                                                                                                                   |
| <h4 id="ios-warning.1">iOS Warning</h4><ol start="1"><li>iOS will warn you that this certificate has no trust or a trusted Root CA</li><li>Since this is self-generated, you can install this certificate</li><li>Click <strong>Install</strong></li><li>iOS will ask for final confirmation before doing the install</li><li>Click <strong>Install</strong></li></ol>        | <p>Open image-20201230-190100.png<img src="blob:https://apica-kb.atlassian.net/15aa1087-f0c1-4537-befb-5e60dc8ce6a1#media-blob-url=true&#x26;id=0a5b8ec7-dddc-443f-bf06-d937d64ad7c4&#x26;collection=contentId-1092714708&#x26;contextId=1092714708&#x26;width=377&#x26;height=413&#x26;alt=" alt="">Open image-20201230-190138.png<img src="blob:https://apica-kb.atlassian.net/4f375cde-7db2-4cf0-9f8d-f095d8180459#media-blob-url=true&#x26;id=6df67a75-3ac7-4914-ac81-ae206a997742&#x26;collection=contentId-1092714708&#x26;contextId=1092714708&#x26;width=377&#x26;height=561&#x26;alt=" alt=""></p><p> </p> |
| <h4 id="profile-installed.1">Profile Installed</h4><ol start="1"><li>Once completed, the Certificate will read now as Verified.</li></ol>                                                                                                                                                                                                                                     | Open image-20201230-190308.png![](blob:https://apica-kb.atlassian.net/d7fe21b6-20d3-41c5-a473-fa802cc8155e#media-blob-url=true\&id=eb942bc0-6a9f-438b-b056-29456e67d276\&collection=contentId-1092714708\&contextId=1092714708\&width=377\&height=398\&alt=)                                                                                                                                                                                                                                                                                                                                                        |
| <h4 id="profile-for-zebratester-root-ca-sample-cert">Profile for ZebraTester Root CA Sample Cert</h4><ol start="1"><li>Click <strong>Profile</strong> –> More to see the certificate.</li><li>Drill down again to get certificate details.</li></ol><p>All the details originally provided at certificate creation should be listed here.</p>                                 | Open image-20201230-190446.png![](blob:https://apica-kb.atlassian.net/45d83f76-edb5-43f9-bc6b-ef48bf5e69bf#media-blob-url=true\&id=4e90f8e4-5c44-4ade-8986-5dd64e8a0a5e\&collection=contentId-1092714708\&contextId=1092714708\&width=377\&height=210\&alt=)Open image-20201230-190525.png![](blob:https://apica-kb.atlassian.net/e2db7158-609a-4b66-99fe-27f1741297fe#media-blob-url=true\&id=ff4736ed-d960-4aa9-9ed0-90fa0d8786c1\&collection=contentId-1092714708\&contextId=1092714708\&width=377\&height=214\&alt=)                                                                                            |
| <h4 id="zebratester-root-ca-sample-cert.1">ZebraTester Root CA Sample Cert</h4><p>All the details originally provided at certificate creation should be listed here.</p>                                                                                                                                                                                                      | <p>Open image-20201230-190716.png<img src="blob:https://apica-kb.atlassian.net/8712b08a-4f8e-47ef-975a-586241baf059#media-blob-url=true&#x26;id=e6251833-6d3b-4206-88ee-21f4be94b072&#x26;collection=contentId-1092714708&#x26;contextId=1092714708&#x26;width=377&#x26;height=669&#x26;alt=" alt=""></p><p> </p>                                                                                                                                                                                                                                                                                                   |

***

### Trust <a href="#trust" id="trust"></a>

Trust manually installed certificate profiles in iOS In iOS 10.3, and later, when you manually install a profile that contains a certificate payload, that certificate isn't automatically trusted for SSL.

The Screenshots for

*You must manually turn on trust for SSL when you install a new profile.*

| **Step** | **Screenshot** |
| -------- | -------------- |

| **Step**                                                                                                                                                                                                                                                                                                                                                  | **Screenshot**                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
| --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| <h4 id="certificate-trust-settings">Certificate Trust Settings</h4><p>If you want to turn on SSL trust for a certificate:</p><ul><li>Go to <strong>Settings > General > About > Certificate Trust Settings</strong></li><li>Find the <strong>Enable Full Trust For Root Certificates</strong> section.</li><li>Enable trust for the certificate</li></ul> | <h4 id="iphone.1">iPhone</h4><p>Open image-20201230-191919.png<img src="blob:https://apica-kb.atlassian.net/fc079e68-7e85-4017-9b74-8645335bf3b4#media-blob-url=true&#x26;id=b26d6a38-4a1b-49ac-8d1b-f8136cf832c1&#x26;collection=contentId-1092714708&#x26;contextId=1092714708&#x26;width=377&#x26;height=322&#x26;alt=" alt=""></p><hr><h4 id="ipad.1">iPad</h4><p>Open image-20201230-193119.png<img src="blob:https://apica-kb.atlassian.net/a9cb78d3-5aea-4fcd-aa4d-7475f0d94fe0#media-blob-url=true&#x26;id=4a99209b-3614-4349-85f8-4f8f431429d4&#x26;collection=contentId-1092714708&#x26;contextId=1092714708&#x26;width=1026&#x26;height=770&#x26;alt=" alt=""></p> |
| <h4 id="root-certificate-warning">Root Certificate Warning</h4><ul><li>Click <strong>Continue</strong></li></ul>                                                                                                                                                                                                                                          | <h4 id="iphone.2">iPhone</h4><p>Open image-20201230-192136.png<img src="blob:https://apica-kb.atlassian.net/21b439d9-0207-4ad3-acf8-c55987f404bc#media-blob-url=true&#x26;id=bf6edd5d-0971-4ff1-b343-766ddb5a45b2&#x26;collection=contentId-1092714708&#x26;contextId=1092714708&#x26;width=377&#x26;height=439&#x26;alt=" alt=""></p><hr><h4 id="ipad.2">iPad</h4><p>Open image-20201230-193338.png<img src="blob:https://apica-kb.atlassian.net/2c0dd6d1-ae4d-4d5d-9f2c-d8ac9b089c90#media-blob-url=true&#x26;id=c1c15d7c-fac4-42cb-8dba-9dc367ed3d44&#x26;collection=contentId-1092714708&#x26;contextId=1092714708&#x26;width=1026&#x26;height=770&#x26;alt=" alt=""></p> |
| <h4 id="certificate-trust-settings-completed">Certificate Trust Settings Completed</h4>                                                                                                                                                                                                                                                                   | <h4 id="iphone.3">iPhone</h4><p>Open image-20201230-192439.png<img src="blob:https://apica-kb.atlassian.net/704b42a8-0f40-4dfc-a410-5f156a9c92af#media-blob-url=true&#x26;id=846f89cd-36d3-4a21-bbc1-6cb9679ecf73&#x26;collection=contentId-1092714708&#x26;contextId=1092714708&#x26;width=377&#x26;height=325&#x26;alt=" alt=""></p><hr><h4 id="ipad.3">iPad</h4><p>Open image-20201230-193544.png<img src="blob:https://apica-kb.atlassian.net/229365f9-4519-4c43-a056-828051514206#media-blob-url=true&#x26;id=524283b1-64c7-49e4-8c1a-5f55206ddfd9&#x26;collection=contentId-1092714708&#x26;contextId=1092714708&#x26;width=1026&#x26;height=770&#x26;alt=" alt=""></p> |

&#x20;

**Recommendation**

Apple recommends deploying certificates via Apple Configurator or Mobile Device Management (MDM). Certificate payloads installed with Configurator, MDM, or as part of an MDM enrollment profile are *automatically trusted* for SSL.