iPhone (iOS) · System Info
Manage trust for manually installed certificates
Certificate Trust Settings lets users enable or disable full trust for root certificates that were manually installed via a configuration profile, separate from Apple's built-in trusted certificate list.
How to open Certificate Trust Settings
- Open Settings and tap General.
- Tap About, then scroll to Certificate Trust Settings.
- Review the list of manually installed certificates.
- Toggle full trust on or off for each certificate as needed.
What you should know
- Found in Settings > General > About > Certificate Trust Settings.
- Only appears once at least one certificate profile has been manually installed.
- Toggling trust for a certificate allows it to validate secure websites and connections as if it were a built-in trusted authority.
- Distinct from viewing or removing the underlying profile itself, which is managed separately.
Why it matters
Manually trusted root certificates are commonly required for connecting to corporate networks, school Wi-Fi with content filtering, or testing tools that inspect network traffic, but a fully trusted malicious certificate could intercept supposedly secure traffic without obvious warning signs. This settings screen is the explicit, visible checkpoint where a user (or an IT administrator) grants that elevated trust, rather than it happening silently as part of profile installation. Understanding this screen matters for anyone troubleshooting unexpected certificate warnings or verifying that a device hasn't been configured to trust an unfamiliar authority.
Best practices
- Only enable full trust for certificates from a source you explicitly recognize, like your employer's IT department.
- Periodically review this list, since installed profiles can otherwise be forgotten over time.
- Remove the entire configuration profile, not just the trust toggle, once a certificate is no longer needed.
Common problems and fixes
- A website shows a certificate warning unexpectedly.
- Check whether an installed profile's certificate was recently disabled or expired, which can cause secure sites to fail validation.
- This screen doesn't appear in Settings.
- It only shows up after at least one certificate has been manually installed via a profile; it isn't visible on a device with none installed.
Tips and tricks
- Check Settings > General > VPN & Device Management to see and remove the profile a certificate came from.
Frequently asked questions
Does this affect Apple's default trusted certificates?
No, it only concerns certificates added manually via profiles, not the built-in list Apple maintains and updates automatically.
Can enabling trust here be dangerous?
Yes, a fully trusted malicious certificate could intercept encrypted traffic, so only trust certificates from sources you're confident in.
Related settings
- General & AboutThe About screen lists identifying and technical details about your iPhone — name, iOS version, model and serial numbers, storage capacity, and carrier information — that support staff and other apps often need.
- VPN & Device ManagementThis screen lists any VPN configuration profiles and shows whether the iPhone is enrolled in a Mobile Device Management (MDM) system, typically used by employers or schools to manage company- or school-owned devices.
More System Info guides for iPhone (iOS)
- Date & TimeDate & Time settings normally keep your iPhone's clock accurate automatically using your current location and cellular network, but they can also be set manually and switched between 12-hour and 24-hour display.
- Legal & RegulatoryLegal & Regulatory, tucked under General, lists the legal notices, open-source license acknowledgments, and regulatory certification numbers (like FCC ID) tied to your specific iPhone model.
- CarrierThe Carrier entry (and the Carrier section under General → About) shows which cellular carrier your SIM or eSIM is currently registered with, along with the installed Carrier Settings update version.
- System Diagnostics InfoThe About screen under General is the definitive source for an iPhone's exact model name/number, serial number, IMEI/MEID, modem firmware version, and other identifiers often needed for support, insurance, or trade-in.
- Model, Serial Number & IMEISettings > General > About lists the exact model name and number, serial number, and IMEI/MEID identifiers needed for warranty checks, carrier activation, and insurance claims.
- iPhone Device NameThe device name is what appears to others over AirDrop, Bluetooth pairing, and on the local Wi-Fi network, and can be personalized separately from the Apple ID name.