Trust manually installed certificate profiles in iOS, iPadOS, and visionOS

If you manually install a profile that contains a certificate payload in iOS, iPadOS, and visionOS, that certificate isn't automatically trusted for SSL. Learn how to manually trust an installed certificate profile.

This article is intended for system administrators for a school, business, or other organization.

You must manually turn on trust for SSL/TLS when you install a profile that is sent to you via email or downloaded from a website.

If you want to turn on SSL/TLS trust for that certificate, go to Settings > General > About > Certificate Trust Settings. Under "Enable full trust for root certificates," turn on trust for the certificate.*

iPhone Certificate Trust Settings

Apple recommends deploying certificates via Apple Configurator or Mobile Device Management (MDM). Certificate payloads are automatically trusted for SSL when installed with Configurator, MDM, or as part of an MDM enrollment profile.

*If “Enable full trust for root certificates” doesn’t appear, you haven't installed any additional certificates.

Published Date: