DiKAS Certificate on iPhone, iPad and Mac

In the business network, open http://<LAN-IP>/zertifikat or scan the QR code on the DikasArch page Certificates. The configuration profile dikas-local-ca.mobileconfig is also available on the download page http://<LAN-IP>/installcerts.

1. Compare the displayed fingerprint with the main POS.
2. Download the offered Apple configuration profile and allow the installation.
3. On iPhone or iPad, open Settings → General → VPN & Device Management and install the downloaded profile.
4. Then open Settings → General → About → Certificate Trust Settings and, under "Enable full trust for root certificates", enable the DiKAS CA.
5. Return to the setup page and test https://dikas-<SystemId>.local.

On a Mac, install the profile or certificate in System Settings for the desired user or system-wide and set the trust for SSL to "Always Trust".

Several business CAs may remain installed in parallel. When a CA changes, confirm the new fingerprint only after comparing it with the main POS. Only remove old profiles or certificates once they are no longer needed.

Further information is provided by Apple on TLS requirements and on trusting manually installed root certificates.

Back to the overview.