Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

How do I delete outdated S/MIME certificates in my iphone 5s

I have the following problem with my iPhone 5S (iOS 8.1.2):


I am using S/MIME for email encryption. Therefore I have cerfiicates installed for certain receiver email addresses.

Some of those certificates are expired. But it is impossible to install a new valid certificate. The iPhone email application continues to use the old certificate (public key) of the receiver for encrypting the emails.


How can I delete the outdated certificates?


I already reset the iPhone to factory settings and restored from backup. However the certificates appear to be saved in the backup as well.

iPhone 5s, iOS 8.1.2, S/MIME, certificates

Posted on Jan 4, 2015 11:07 AM

Reply
27 replies

Mar 27, 2016 6:26 PM in response to essandess

I reported the bug.

I ended up changing the date on my MBP to BEFORE my certificate expired.

Installed my old certificate and signed an email with it and sent it out to the other iPhones.

I now can view that certificate through the email on the other iPhones and click the "remove" button. That took care of my issue.

A pain but better than a wipe/reinstall.

May 13, 2016 9:20 AM in response to Gengsheng

In Settings > General > Profiles check for the expired certificate/profile you would like to delete. Tap the profile and you'll see a remove option. If you have no old profiles the Profiles option doesn't even appear under General Settings. Because my certificate was associated with a profile it just hangs on to the old certificate. I was then able to send a signed email to my iPhone from my MBP. Unfortunately I can see the certificate and hit install but it just never actually installs so still searching for a complete solution.

Jun 28, 2016 8:40 AM in response to elsepa

Thanks for that link, I think the procedure the poster mentions is preferable to deleting old profiles as, I believe, by removing your old certificate you will no longer be able to read any e-mails that might have been sent to you and encrypted using your old certificate! Instead, you can select the certificate you want to use for signing and encrypting.


Great post!

Dec 10, 2016 4:08 AM in response to Gengsheng

I have just run into the same problem on a iPhone 6s running iOS 10.1.1.

Obviously this issue has still not been fixed. Apple Support was not able to help. I got forwarded to a senior iOS Advisor right away and it took 40 minutes to get the advice of resetting all settings - which did not do the trick.

I am reluctant to wipe the entire phone, in particular as others have tried it without success.

I don´t have access to the email with the expired signature anymore and also no means to setup a backdated system to recreate it. Hence the only option that has been reported to work is of no use for me.

Just filed a bug report with Apple but from my encounter with the Apple Support team, using encryption on the iPhone seems to be not very frequently used and hence changes of that getting fixed soon seem rather slim.

It is a shame that Apple promotes privacy and encryption even against authorities and then leaves such fundamental functions defective for users.

As a manager I am alway told to "walk the talk". If Apple is serious about encryption then they better get their act together quickly.

How do I delete outdated S/MIME certificates in my iphone 5s

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.