As manager of a web administration team, we’ve encountered several teams who have had trouble adding internal Certificate Authorities to iPads and iPhones… and I don’t blame them, it’s not obvious.
To add private CA certs to your iPhone or iPad, you will need:
- The iPhone Configuration Utility (windows or mac)
- Your iPhone or iPad physically connected via cable to said windows or mac machine. It’s tempting to try to add the resulting .mobileconfig by downloading it wirelessly over a browser, but it will not be trusted.
- The cert file(s)
Once the above requirements are met, do the following:
- Start the iPhone Configuration Utility.
- Under “Library”, select “Configuration Profiles”
- Click the Add New button on the top left.
- Fill out the mandatory general information tab contents
- Under the Credentials section, add the CA cert or certs.
- Attach your iOS device if it is not already connected.
- Select your device in the iPhone Configuration Utility, and select its Configuration Profiles tab.
- You should see the profile you just created with an “install” button on the right – click it.
- On your device, you will see a profile installation dialog – hit the install button and follow directions.
That’s all, the CA profile should be installed and verified with a geen check. I hope this helps some of you out there.
This process can also be used to install client SSL certs on the iPad.