iOS 18 Bug -Certificate Trust Settings for Private Root Certificates Not Available

Business & Education Device Management Beta Device Management

Created Sep ’24

Replies 64

Boosts 32

Views 31k

Participants 53

Importing an existing self- signed trusted root certificate no longer triggers option to trust cert in Settings / About / Certificate Trust Settings In iOS 18.

Cert installed manually from internal website, as email attachment, and using profile in Configurator all produce same result.

Same cert and processes work on iOS 16.7.10, iOS 17.6.1 and iPadOS 18.0

But not on iOS 18.0 nor beta iOS 18.1 beta5 on iPhone 16

Also tried regening a new test root on macOS Sonoma and installing using Configurator. No difference.

It’s broken - I’ve reported it by Feedback - it’s a vital security flaw.

Anyone else see this or have a workaround?

Answered by DTS Engineer in 815354022

After upgrading to iOS 18.2 b4, I can finally see the missing certificates in the Certificate Trust Settings

Yep. That gels with my expectations based on the resolution I see for the bug. Thanks for checking!

After upgrading to iOS 18.2 b4, I can finally see the missing certificates in the Certificate Trust Settings

Yeah, that’s a different, but obviously related issue. And so…

I submitted FB15921702

Thanks!

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Boost

DTS Engineer OP

Apple

Nebukazar wrote:

I just updated, and the issue appears to be fixed. I can now see our self-signed CA certs under Certificate Trust Settings.

Thanks for checking. And, yes, this gels with our expectations. Yay!

chkpnt wrote:

What do you mean with “AppleSeed“. Never heard of.

See AppleSeed for IT.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

general_ro OP

Still experiencing the same issue unfortunately

wwwab OP

I encountered the same issue before, after upgrading from iOS 15 to iOS 18, I encountered the problem of not being able to trust the root certificate. After upgrading to iOS 18.2 public beta, the issue was resolved, but the previous certificate appeared in the certificate trust settings and cannot be removed (the description file has already been uninstalled). I am curious when this derivative issue will be resolved.

Nikita_Ink OP

13m

After installing IOS 18.2, certificate trust is still not showing up. When trying to access a PWA with certificate access, it gives an error and does not allow it. With IOS 17.6 everything worked correctly. Does anyone have a solution for this? In the traces, the following appears:

"Attempt to search in legacy mode Warning: No client certificate found in the context or in LegacyGetClientCertificate."

Thanks! This bug has been around for more than 2 months and is frustrating since the end user cannot access the application with their certificate. Any help is welcome!