Recording iOS device (e.g., iPhone and iPad) sessions require that you have installed your self-generated CA root certificate on these devices. This is a quick review of the steps to get this on your iPhone or iPad.
Transferring the Certificate
The first step is getting the CA root certificate on the device. You can e-mail your CA root certificate to an Apple iOS device or put it on any Web server and address its URL directly in Safari. You can even use an application that syncs to each device (e.g., Evernote/Dropbox, etc.) and save that certificate to your iPhone/iPad Files folder.
After clicking on the certificate in the e-mail, entering the URL in Safari, or clicking on the certificate in your iPhone/iPad, your CA root certificate can be imported:
iPad
Install Profile
After you click on your certificate file, there will be a new Profile downloaded.
Under Settings--> General, the “Profile Downloaded” will open a dialog to install the certificate.
You also can remove the Downloaded Profile if this was either mistakenly downloaded or a no longer needed Profile.
Enter Passcode
Enter your passcode to Continue
Do not enter your Apple ID password.
iOS Warning
iOS will warn you that this certificate has no trust or a trusted Root CA
Since this is self-generated, you can install this certificate
iOS will ask for final confirmation before doing the install
Profile Installed
Once completed, the Certificate will read now as Verified.
Click More Details to check.
ZebraTester Root CA Sample Cert
All the details originally provided at certificate creation should be listed here.
Settings
You can find the Configuration Profiles underneath the Settings → General → Profiles menus.
iPhone
Settings: Profile Downloaded
After you click on your certificate file, there will be a new Profile downloaded.
Under Settings, → “Profile Downloaded” will open a dialog to install the certificate.
Click the right “>” to start Installation.
Install Profile
Notice that the Profile has a Not Verified label beneath it.
You also have the option to Remove the Downloaded Profile if this was either mistakenly downloaded or a no longer needed Profile.
Enter Passcode
Enter your passcode to Continue
Do not enter your Apple ID password.
iOS Warning
iOS will warn you that this certificate has no trust or a trusted Root CA
Since this is self-generated, you can install this certificate
iOS will ask for final confirmation before doing the install
Profile Installed
Once completed, the Certificate will read now as Verified.
Profile for ZebraTester Root CA Sample Cert
Click Profile –> More to see the certificate.
Drill down again to get certificate details.
All the details originally provided at certificate creation should be listed here.
ZebraTester Root CA Sample Cert
All the details originally provided at certificate creation should be listed here.
Trust
Trust manually installed certificate profiles in iOS In iOS 10.3, and later, when you manually install a profile that contains a certificate payload, that certificate isn't automatically trusted for SSL.
The Screenshots for
You must manually turn on trust for SSL when you install a new profile.
Certificate Trust Settings
If you want to turn on SSL trust for a certificate:
Go to Settings > General > About > Certificate Trust Settings
Find the Enable Full Trust For Root Certificates section.
Enable trust for the certificate
Certificate Trust Settings Completed
Recommendation
Apple recommends deploying certificates via Apple Configurator or Mobile Device Management (MDM). Certificate payloads installed with Configurator, MDM, or as part of an MDM enrollment profile are automatically trusted for SSL.
