Install Trusted Root Certificate on iOS 10 iPhone

PKI Tutorials - Herong's Tutorial Examples

∟Install Trusted Root Certificate on iOS 10 iPhone

This section provides a tutorial example on how to install a trusted root certificate on iOS 10 iPhone.

Sometimes you may need to add a trusted root certificate on your iPhone. For example, a Website is using a new root certificate, which is not included the current trusted root certificate store on your iPhone.

If you think the new root certificate can be trusted, you can install it on your iPhone as a trusted certificate. Here is an example of installing the "GlobalSign Root R1":

1. Open Safari Web browser and go to GlobalSign Support website at support.globalsign.com.

2. Enter "GlobalSign Root R1" in the search box and select "GlobalSign Root Certificates" from the search result. The list of root certificates is displayed.

3. Scroll down to see the "GlobalSign Root R1" certificate.

4. Tap on "Download Root-R1". A warning message is displayed.

This website is trying to open Settings to show you
a configuration profile. Do you want to allow this?

5. Tap on "Allow". The "Install Profile" screen is displayed.

6. Tap on "Install". And enter your iPhone passcode, if it is asked. Another warning message is displayed.

UNMANAGED ROOT CERTIFICATE
Installing the certificate "GlobalSign Root CA"
will add it to the list of trusted certificates on
your iPhone...

UNVERIFIED PROFILE
The authenticity of "GlobalSign Root CA"
cannot be verified.

7. Tap on "Install". "GlobalSign Root R1" certificate will be installed in two places:

"Settings > General > Profiles" - Representing an entity called "GlobalSign Root CA" based on the "Subject" field of the certificate.
"Settings > General > About > Certificate Trust Settings" - Representing a trusted root CA to be used to authenticate other certificates.