How to Import the ZT Root Certificate to an iOS device

Recording iOS device (e.g., iPhone and iPad) sessions require that you have installed your self-generated CA root certificate on these devices. This is a quick review of the steps to get this on your iPhone or iPad.

Transferring the Certificate

The first step is getting the CA root certificate on the device. You can e-mail your CA root certificate to an Apple iOS device or put it on any Web server and address its URL directly in Safari. You can even use an application that syncs to each device (e.g., Evernote/Dropbox, etc.) and save that certificate to your iPhone/iPad Files folder.

After clicking on the certificate in the e-mail, entering the URL in Safari, or clicking on the certificate in your iPhone/iPad, your CA root certificate can be imported:

iPad

Step	ScreenShot
Install Profile After you click on your certificate file, there will be a new Profile downloaded. Under Settings--> General, the “Profile Downloaded” will open a dialog to install the certificate. Click Install You also can remove the Downloaded Profile if this was either mistakenly downloaded or a no longer needed Profile.
Enter Passcode Enter your passcode to Continue Do not enter your Apple ID password.
iOS Warning iOS will warn you that this certificate has no trust or a trusted Root CA Since this is self-generated, you can install this certificate iOS will ask for final confirmation before doing the install
Profile Installed Once completed, the Certificate will read now as Verified. Click More Details to check.
ZebraTester Root CA Sample Cert All the details originally provided at certificate creation should be listed here.
Settings You can find the Configuration Profiles underneath the Settings → General → Profiles menus.

---

iPhone

Step	ScreenShot
Settings: Profile Downloaded After you click on your certificate file, there will be a new Profile downloaded. Under Settings, → “Profile Downloaded” will open a dialog to install the certificate. Click the right “>” to start Installation.
Install Profile Notice that the Profile has a Not Verified label beneath it. Click Install You also have the option to Remove the Downloaded Profile if this was either mistakenly downloaded or a no longer needed Profile.
Enter Passcode Enter your passcode to Continue Do not enter your Apple ID password.
iOS Warning iOS will warn you that this certificate has no trust or a trusted Root CA Since this is self-generated, you can install this certificate Click Install iOS will ask for final confirmation before doing the install Click Install
Profile Installed Once completed, the Certificate will read now as Verified.
Profile for ZebraTester Root CA Sample Cert Click Profile –> More to see the certificate. Drill down again to get certificate details. All the details originally provided at certificate creation should be listed here.
ZebraTester Root CA Sample Cert All the details originally provided at certificate creation should be listed here.

---

Trust

Trust manually installed certificate profiles in iOS In iOS 10.3, and later, when you manually install a profile that contains a certificate payload, that certificate isn't automatically trusted for SSL.

The Screenshots for

You must manually turn on trust for SSL when you install a new profile.

Step	Screenshot
Certificate Trust Settings If you want to turn on SSL trust for a certificate: Go to Settings > General > About > Certificate Trust Settings Find the Enable Full Trust For Root Certificates section. Enable trust for the certificate	iPhone iPad
Root Certificate Warning Click Continue	iPhone iPad
Certificate Trust Settings Completed	iPhone iPad

Recommendation

Apple recommends deploying certificates via Apple Configurator or Mobile Device Management (MDM). Certificate payloads installed with Configurator, MDM, or as part of an MDM enrollment profile are automatically trusted for SSL.