Guidelines for installing custom enterprise apps on iOS

Follow these security guidelines to install custom apps created for your organization.

Organizations can use the Apple Developer Enterprise Program to create proprietary enterprise apps for iOS devices and to distribute them to employees for internal use. Before one of these apps can be opened, it must be trusted.

Trust is established automatically if the app is installed by Mobile Device Management (MDM). If you install an app manually you must also manually establish trust as described below.

Apple recommends using an (MDM) solution to distribute the apps because it is secure and requires no user interaction. Users can also install these custom apps from a secure website operated by their organization. If you're not installing an app from your organization, the best way to protect your iPhone, iPad, or iPod touch is to download and install apps only from the Apple App Store.

Manually Installing and Trusting an Enterprise App

When you first open an enterprise app you've manually installed, you see a notification that the developer of the app isn't trusted on your device. You can dismiss this message but you can't open the app.

After dismissing this message you can establish trust for this app developer. Tap Settings > General > Profiles or Profiles & Device Management. You then see a a profile for the developer under the "Enterprise App" heading.

Tap the profile to establish trust for this developer.

You're then prompted to confirm your choice. Once you trust this profile, you can manually install other apps from the same developer and open them immediately. This developer remains trusted until you use the Delete App button to remove all apps from the developer.

An Internet connection is required to verify the app developer's certificate when establishing trust. If you're behind a firewall, make sure it's configured to allow connections to https://ppq.apple.com. If you aren't connected to the Internet when you trust an app, the device displays "Not Verified" instead. In order to use the app, you need to connect to the Internet, and tap the Verify App button.

Information about products not manufactured by Apple, or independent websites not controlled or tested by Apple, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the selection, performance, or use of third-party websites or products. Apple makes no representations regarding third-party website accuracy or reliability. Risks are inherent in the use of the Internet. Contact the vendor for additional information. Other company and product names may be trademarks of their respective owners.

Last Modified: