User Guide

Chapter 3 Manually Configuring Devices 55
Installing Identities and Root Certificates
If you don’t distribute certificates using profiles, your users can install them manually by
using the device to download them from a website, or by opening an attachment in an
email message. The device recognizes certificates with the following MIME types and
file extensions:
 application/x-pkcs12, .p12, .pfx
 application/x-x509-ca-cert, .cer, .crt, .der
See “Certificates and Identities” on page 11 for more information about supported
formats and other requirements.
When a certificate or identity is downloaded to the device, the Install Profile screen
appears. The description indicates the type: identity or certificate authority. To install
the certificate, tap Install. If it’s an identity certificate, you’ll be asked to enter the
certificate’s password.
To view or remove an installed certificate, go to Settings > General > Profile. If you
remove a certificate that’s required for accessing an account or network, your device
cannot connect to those services.