Gengsheng

Q: How do I delete outdated S/MIME certificates in my iphone 5s

I have the following problem with my iPhone 5S (iOS 8.1.2):

 

I am using S/MIME for email encryption. Therefore I have cerfiicates installed for certain receiver email addresses.

Some of those certificates are expired. But it is impossible to install a new valid certificate. The iPhone email application continues to use the old certificate (public key) of the receiver for encrypting the emails.

 

How can I delete the outdated certificates?

 

I already reset the iPhone to factory settings and restored from backup. However the certificates appear to be saved in the backup as well.

iPhone 5s, iOS 8.1.2, S/MIME, certificates

Posted on Jan 4, 2015 11:07 AM

Close

Q: How do I delete outdated S/MIME certificates in my iphone 5s

  • All replies
  • Helpful answers

Previous Page 2
  • by Greg Kolanek,

    Greg Kolanek Greg Kolanek Apr 29, 2016 2:53 AM in response to vukodlak75
    Level 1 (76 points)
    Apr 29, 2016 2:53 AM in response to vukodlak75

    Did you receive any response regarding the bug report?

  • by elsepa,

    elsepa elsepa May 13, 2016 9:20 AM in response to Gengsheng
    Level 1 (4 points)
    May 13, 2016 9:20 AM in response to Gengsheng

    In Settings > General > Profiles check for the expired certificate/profile you would like to delete.  Tap the profile and you'll see a remove option.  If you have no old profiles the Profiles option doesn't even appear under General Settings.  Because my certificate was associated with a profile it just hangs on to the old certificate.  I was then able to send a signed email to my iPhone from my MBP.  Unfortunately I can see the certificate and hit install but it just never actually installs so still searching for a complete solution.

  • by elsepa,

    elsepa elsepa May 13, 2016 10:01 AM in response to elsepa
    Level 1 (4 points)
    May 13, 2016 10:01 AM in response to elsepa

    Ok quick edit - I followed the instructions on the site noted below to install the certificate and it worked perfectly.  I had to use a second secure email and password protected the .p12 but it worked.... macwhiz.com/blog/2014/11/18/apple-s-mime

  • by Jamez,

    Jamez Jamez Jun 28, 2016 8:40 AM in response to elsepa
    Level 1 (4 points)
    Jun 28, 2016 8:40 AM in response to elsepa

    Thanks for that link, I think the procedure the poster mentions is preferable to deleting old profiles as, I believe, by removing your old certificate you will no longer be able to read any e-mails that might have been sent to you and encrypted using your old certificate! Instead, you can select the certificate you want to use for signing and encrypting.

     

    Great post!

Previous Page 2