With iOS, certificates are installed as part of profiles. Deleting a certificate means removing the profile.

When an iPhone with profiles is backed up, and then the backup is restored to a new device, the profiles are no longer visible under Settings > General > Profiles. So, they can't be deleted via the usual way.

The certificates however get restored to the device. One can see them e.g. under Settings > General > About > Certificate Trust Settings.

Hence my question: How can these certificates be deleted from the device?

  • Idea: maybe it's possible to create a new profile overwriting the previous one, then delete that and see if the certificate disappears with it. Maybe it's the payloadIdentifier as noted here developer.apple.com/business/documentation/… – Jonny Apr 16 at 13:31

I found a certificate in my iOS device's Certificate Trust Settings. And it was not be found in Profiles. Finally I remove it by add the cert file again, and then I can found and remove it in Profiles.

At first, I can't found the cert file, because this CA was installed years ago. So I did these things:

  1. Backup iPhone to Mac, View backup file by some software (I used iMazing)
  2. Find TrustStore.sqlite3 in Backup/KeychainDomain/ and export it to HOME DIR.
  3. Use this project https://github.com/ADVTOOLS/ADVTrustStore to export certfile

    ./iosCertTrustManager.py -t ~/TrustStore.sqlite3 -e ~/foo.crt
  4. Airdrop or Email this crt file to iOS device, and install it.

  5. Find it in Settings > General > Profiles and Remove it.

  6. It disappear in "Certificate Trust Settings"


You must log in to answer this question.

protected by Community Jan 28 '18 at 12:14

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged .