11

I moved a .crt certificate file onto my iPhone device via Dropbox and tried following these instructions to add it to the device keychain:

It suggests to open the certificate file but my iPhone doesn't know what to open the .crt with?

How should I proceed from here to add the certificate to my keychain?

  • Do you need the .crt for a specific app? If so, you can probably import it via iTunes, if you connect your phone and switch to the Apps tab and select the app – Kevin Grabher Mar 11 '14 at 19:49
  • I have my own .crt that I need to access an SSL app from the iPhone – amphibient Mar 11 '14 at 21:23
  • I just made my answer more thorough and confirmed that it works for iOS 12.0.1. If you think it looks helpful, consider marking it as the accepted answer. – Ryan Apr 10 at 13:19
14

Updated for iOS 12.0.1

As Andrew and Michal mentioned, apparently iOS only allows the Mail and Safari apps to open and install certificates. Other apps are blocked from opening certificates.

So here is how I got mine working:

  1. Put my certificate file (mycertificate.crt) on my private local server temporarily.
  2. Using iOS Safari (very important), browse to my https://mylocalsite.test/mycertificate.crt
  3. You'll probably see a "This Connection Is Not Private" warning and need to click "Show Details" > "visit this website".
  4. When prompted with "This website is trying to open Settings to show you a configuration profile. Do you want to allow this? [Ignore or Allow?]", choose "Allow".
  5. You'll now be in your iPhone Settings > Install Profile. Click "Install" to install the certificate.
  6. Enter your passcode to confirm.
  7. You'll see a warning telling you "This certificate will not be trusted for websites until you enable it in Certificate Trust Settings." Press "Install" to proceed.
  8. Press "Done".
  9. Visit Settings > General > About > Certificate Trust Settings
  10. "Enable full trust for root certificates" for the newly-installed certificate.
  11. (Restarting the phone does not seem to be necessary.) I was immediately able to use Chrome to browse to my site using https, and it worked as I hoped.

These other links helped me, too:

  • 1
    Is it meant to install as a 'Configuration Profile'? That doesn't make sense - or is this just some dumb Apple name for a root cert? – Simon_Weaver Jan 21 at 7:38
3

Copied from the site you linked

If you wish to use your certificate for S/MIME after you have followed this guide, please visit https://support.quovadisglobal.com/KB/a353/how-do-i-sign-and-encrypt-on-an-apple-iphone.aspx. Important Note: Apple recommends that a *.p12 or *.pfx file is sent to your device as an attachment in an email. QuoVadis does not recommend this approach unless email access to your mail server is encrypted using SSL.

You need to e-mail yourself the certificate, other 3PP programs are sandbox'd from accessing the iOS keychain.

3

From iOS 11, if the .crt file is in a location accessible using the Files app, then you just need to tap on it from within Files to install the certificate.

This also applies to other types of certificates supported by iOS.

  • This worked for me, I uploaded a .crt file to Icloud Drive, where I could install the certificate. I uploaded it first to Onedrive.. that is borderline lock-in by Apple to have such restrictions in MIME type. – Tore Aurstad Sep 11 '18 at 22:13
  • 1
    Didn't work for .pfx – fjch1997 Dec 22 '18 at 18:56
  • I use this method mainly with .pfx certificates, and it works for me. – molgar Jan 4 at 20:22
1

Be advised that iOS 12 will reject root certificates that do not have a 'common name'.

https://forums.developer.apple.com/thread/89568

Also make sure the cert has Subject Type=CA or it can't be installed as a root cert to be used for https.

1

Since you're using Dropbox, you don't need a web server of your own to solve this.

  1. Find the cert in the Dropbox iOS app.
  2. Tap the ellipsis in the upper right and select Copy Link.
  3. Open Safari, paste in the link, and go.
  4. If Dropbox offers to open it in the Dropbox app, say no.
  5. Click the link to Download the file.

From there on out, it's the normal steps for loading it from Mail or Safari.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .