HT201334: Apple Configurator: Enrolling devices in Profile Manager

Learn about Apple Configurator: Enrolling devices in Profile Manager
mmkhan2005
Level 1 (0 points)

Q: how to install Internal Certificate on Iphone and IPAD with IOS9

Dear Team,

 

We are in the process of upgrading Skype for business from Lync 2010.

 

We testing mobile internally with Skype for business.

 

We found Android and Windows phone and Tablet working fine but ipad and iPhones not able to connect.

 

After research we found it require certificate as we have internal CA we are not able to installed internal CA on IPhone and Ipad.

 

Kindly assist

 

Thanks

Mazhar Khan

iPhone 6s, iOS 9.2

Posted on Dec 15, 2015 11:41 PM

Close
mmkhan2005

Q: how to install Internal Certificate on Iphone and IPAD with IOS9

  • All replies
  • Helpful answers

  • by John Lockwood,

    John Lockwood John Lockwood Dec 16, 2015 2:15 AM in response to mmkhan2005
    Level 6 (9,411 points)
    Servers Enterprise
    Dec 16, 2015 2:15 AM in response to mmkhan2005

    There are three main ways to install certificates on iOS devices -

     

    1. Make the certificate file(s) available to the iOS device e.g. via email attachment or web URL, when the iOS device opens the certificate it will offer to install it and if needed allow you to trust it
    2. Use Apple Configurator via a USB connection to the iOS device to install the certificate(s)
    3. Use Profile Manager or other similar MDM solution to push a profile containing the certificate(s)

     

    Each of these methods should result in the certificate(s) being installed in the standard iOS certificate store and as long as Skype for Business for iOS has been written correctly it should automatically find and use these certificates. Whether Microsoft have written it correctly is for you to determine.

  • by mmkhan2005,

    mmkhan2005 mmkhan2005 Dec 16, 2015 2:29 AM in response to John Lockwood
    Level 1 (0 points)
    Dec 16, 2015 2:29 AM in response to John Lockwood

    Dear John,

     

    Thanks for the update,

    I tried for step 1 and it failed with error unable to open the file. Apple configurator is available for windows ?

  • by John Lockwood,

    John Lockwood John Lockwood Dec 16, 2015 2:53 AM in response to mmkhan2005
    Level 6 (9,411 points)
    Servers Enterprise
    Dec 16, 2015 2:53 AM in response to mmkhan2005

    mmkhan2005 wrote:

     

    Dear John,

     

    Thanks for the update,

    I tried for step 1 and it failed with error unable to open the file. Apple configurator is available for windows ?

     

    I don't believe it is. There was iPhone Configuration Utility for Windows but this does not itself upload via USB to the iPhone, if you use this you would build a mobileconfig file and then send that again via email or a web link. (Looks like Apple no longer provide iPhone Configuration Utility for Windows either.)

     

    The rootCA and any intermediate CA certificates need to be a standard .cer file with no password, if it is a client certificate it would be a .p12 containing both the private key and the public certificate and would need to be encrypted with a password. You would not need to send a server certificate to the iOS device.