how to install Internal Certificate on Iphone and IPAD with IOS9

Question

mmkhan2005 Author

Level 1

5 points

how to install Internal Certificate on Iphone and IPAD with IOS9

Dear Team,

We are in the process of upgrading Skype for business from Lync 2010.

We testing mobile internally with Skype for business.

We found Android and Windows phone and Tablet working fine but ipad and iPhones not able to connect.

After research we found it require certificate as we have internal CA we are not able to installed internal CA on IPhone and Ipad.

Kindly assist

Thanks

Mazhar Khan

iPhone 6s, iOS 9.2

Posted on Dec 15, 2015 11:41 PM

Reply

Answer 1

Best reply

John Lockwood

Level 6

13,685 points

Dec 16, 2015 2:15 AM in response to mmkhan2005

There are three main ways to install certificates on iOS devices -

Make the certificate file(s) available to the iOS device e.g. via email attachment or web URL, when the iOS device opens the certificate it will offer to install it and if needed allow you to trust it
Use Apple Configurator via a USB connection to the iOS device to install the certificate(s)
Use Profile Manager or other similar MDM solution to push a profile containing the certificate(s)

Each of these methods should result in the certificate(s) being installed in the standard iOS certificate store and as long as Skype for Business for iOS has been written correctly it should automatically find and use these certificates. Whether Microsoft have written it correctly is for you to determine. 😉

Reply

Answer 2

mmkhan2005 Author

Level 1

5 points

Dec 16, 2015 2:29 AM in response to John Lockwood

Dear John,

Thanks for the update,

I tried for step 1 and it failed with error unable to open the file. Apple configurator is available for windows ?

Reply

Answer 3

Dec 16, 2015 2:53 AM in response to mmkhan2005

mmkhan2005 wrote:

Dear John,

Thanks for the update,

I tried for step 1 and it failed with error unable to open the file. Apple configurator is available for windows ?

I don't believe it is. There was iPhone Configuration Utility for Windows but this does not itself upload via USB to the iPhone, if you use this you would build a mobileconfig file and then send that again via email or a web link. (Looks like Apple no longer provide iPhone Configuration Utility for Windows either.)

The rootCA and any intermediate CA certificates need to be a standard .cer file with no password, if it is a client certificate it would be a .p12 containing both the private key and the public certificate and would need to be encrypted with a password. You would not need to send a server certificate to the iOS device.

Reply