Using cerificates with iOS configuration profiles

Adding an additional layer of security to the mobile config profile is not hard to accomplish. iOS devices can use X.509 certificates with RSA keys. The file extensions .cer, .crt, and .der are recognized. Use the Credentials settings payload to add certificates and identities to the device.

The easiest way to create a certificate for mobileconfig profiles is to open Terminal on a Mac computer and use openssl command:

 

openssl s_client -connect YOUR_SSL_ENABLED_WEB_SITE:443 >/Users/shared/NAME.cer </dev/null

 

You can then use the NAME.cer file in the "Configure Credentials" in iPCU to to create a .mobileconfig profile with certificate embedded.

Information on the Tufts IT Knowledgebase is intended for IT Professionals at Tufts.
If you have a question about a Tufts IT service or computer/account support, please contact your IT support group.