This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Can’t remove Sophos root certificate from iOS device

I have an iPhone and iPad with the latest version of iOS/iPad OS. I had the Sophos root certificate installed since I was using HTTPS decrypt and scanning on my home network. However, I think somewhere in the process of upgrading to iOS, I’ve lost the ability to remove that root certificate. I added another Sophos certificate after MR-9 came out with the fix for Apple devices and HTTPS scanning. However, now under Certificate Trust Settings on the iPhone, I see two “Sophos SSL CA_C0123XXXXXXX” root certificates but I only have one profile listed as installed. If I delete the profile, it removes one of the root certificates but the other still remains.

Has anyone seen this issue?



This thread was automatically locked due to age.
  • Hi Shred,

    no I haven't seen the issue and I have been installing and removing certificates as I try to fix my EAP2 mail issues. Currently running IoS and IpadOS 13.2.3

    I was able to instal a new certificate this morning on my iPad after removing the previous faulty one. Mail is working fine, but I am using DPI I believe for my mail scanning which probably wrong because web browsing didn't care whether I had a certificate installed or not.

    I do have my v17.5.9 certificate installed as well.

    Ian

    XGS118 - v21.5.0

    XG115 converted to software licence v21.5.0

    If a post solves your question please use the 'Verify Answer' button.

  • Figured out a solution. 

    It appears I had a Sophos root certificate that was "stuck" within iOS. The Sophos configuration profile would not show up but the root certificate was showing up under Certificate Trust Settings. Luckily, I have a MacBook Air I never use that still had the old Sophos root certificates. I exported the old certificates, installed them on my iOS devices and removed them which resolved the issue (no root certificates showing under Certificate Trust Settings).

    ---

    Sophos XG guides for home users: https://shred086.wordpress.com/