topic Re: iOS - Server Certificate "Not Trusted" Despite Root Cert in Trust Store in Endpoint Security

iOS - Server Certificate "Not Trusted" Despite Root Cert in Trust Store

jtillman11 — Fri, 28 Oct 2022 15:29:07 GMT

We have an internal site accessed over HTTPS. The certificate chain is: RootCert -> ServerCert. We pushed the RootCert to an iPad using a Meraki profile. The certificate shows as being trusted on the iPad under General -> About -> Certificate Trust Settings but the site is still warning about unsecured, untrusted cert. So I push the server certificate (signed by the root ca that's already trusted). It shows under General -> VPN and Device Management -> MDM -> Meraki... but does not show in the Certificate Trust Settings page...so I'm guessing only root certs are added to this page? At any rate, the browser is still complaining that the cert is untrusted. Everything works fine on desktops (Windows/MacOS/Linux) with only the Root Cert trusted, as expected.

Has anyone run into this before? Is it a limitation of iOS or Meraki or something else?

Re: iOS - Server Certificate "Not Trusted" Despite Root Cert in Trust Store

ShawnWillard — Wed, 13 Nov 2024 14:12:38 GMT

Did you ever find a solution to this issue? We are facing the same issue.

Re: iOS - Server Certificate "Not Trusted" Despite Root Cert in Trust Store

Arthur Dent — Mon, 18 Nov 2024 08:54:19 GMT

Is your Root CA validity longer than 398 days?

https://discussions.apple.com/thread/252689988?sortBy=rank

and

https://support.apple.com/en-us/102028

Re: iOS - Server Certificate "Not Trusted" Despite Root Cert in Trust Store

ShawnWillard — Mon, 18 Nov 2024 13:28:35 GMT

Paul that was exactly the issue. Thanks.