iOS - Delete and manage profiles

Managing Profiles on iOS and Setting Up S/MIME for Secure Mail Communication

Note: This article explains how to manage and remove profiles on your iPhone or iPad. It also describes how to install and activate an S/MIME certificate to securely sign and encrypt your mail communication with mailbox.

On iOS devices, so-called profiles can be used to automatically install certain settings or certificates. These include profiles for Mail, calendar, or contacts integration via CalDAV and CardDAV, VPN or MDM profiles (Mobile Device Management), as well as certificate profiles. These profiles can be viewed at any time in the system settings and removed if needed.

Viewing and Removing Profiles on iOS – Step by Step

View profiles

1. Open Settings.
2. Navigate to General | VPN & Device Management.
   Note for older iOS versions: General | Profiles.
3. View the list of installed configuration profiles (e.g., Mail/CalDAV/CardDAV, VPN, MDM, certificates).
4. Tap a profile to see details such as issuer, purpose, and included certificates.

Remove a profile

1. Open the desired profile in the list.
2. Tap Remove Profile.
3. Confirm the prompt and enter your device passcode if required.
4. Wait until the process is finished. The profile and the associated settings will be removed.

Important notes

• MDM profiles: Removing an MDM profile typically deletes managed Mail, calendar, contacts, or VPN configurations.
• CalDAV/CardDAV profiles: Removing these profiles deletes the associated account entries in Calendar and Contacts.
• Data backup: Back up important data beforehand if the profile controls related content.

Tip: Reinstall a profile later

If you need to reinstall a profile – for example, to access calendar and contacts with mailbox – you can do so at any time using the corresponding instructions in our Knowledge Base. You can find the relevant article here:

Overview article

Installing and Setting Up an S/MIME Certificate

S/MIME (Secure/Multipurpose Internet Mail Extensions) enables you to digitally sign and encrypt mail. This ensures that your messages genuinely originate from you and cannot be altered or read during transmission. This technology is ideal for secure communication with mailbox, especially when exchanging sensitive information.

Installing an S/MIME Certificate on iOS – Step by Step

Requirements

• Personal S/MIME certificate in .p12 or .pfx format (including the private key).
• The corresponding certificate password.
• Access to the respective Mail account on the iPhone/iPad.

Transfer the certificate to the device

1. Send the .p12/.pfx file to your iOS device via Mail or transfer it using AirDrop/the Files app.
2. Open the message or file and tap the certificate attachment.

Install the certificate

1. Tap Install.
2. Enter the certificate password and confirm.
3. Complete the assistant.

Verification:
The certificate appears under Settings | General | VPN & Device Management | Profile, or on newer iOS versions possibly directly under Settings | General | About | Certificate Trust Settings.

Activating S/MIME in the iOS Mail App – Step by Step

Enable S/MIME for an account

1. Open Settings | Mail | Accounts.
2. Select the desired account and tap Account.
3. Open Advanced (or Advanced | S/MIME).
4. Enable S/MIME.
5. Tap Sign → select your certificate.
6. Tap Encrypt → select your certificate.

Check default behavior

• Set Sign to On if outgoing messages should be signed by default.
• Set Encrypt to Automatic/Yes if messages should be encrypted whenever possible.

Signing and Encrypting While Sending

When composing a mail

1. Open Mail and create a new message.
2. Check the checkmark next to your sender address:
   Checkmark = message will be signed.
3. Check the lock symbol:
   • Closed lock: message will be encrypted.
   • Open lock: encryption not possible (public certificate of the recipient is missing).

Public certificate of recipients

• To encrypt a message, you need the recipient’s public certificate.
• This is automatically stored when you receive a signed mail from that person. Afterwards, the closed lock will appear when composing mail.

Troubleshooting

Certificate not displayed

• Check whether the .p12/.pfx file contains the private key.
• Reinstall the certificate and enter the correct password.

Signature/encryption not possible

• Check whether your certificate is selected under
  Settings | Mail | Accounts | Account | Account | Advanced | S/MIME.
• For encryption: Is a public certificate for the recipient available? If not, ask them to send a signed mail.

Multiple accounts

Repeat the S/MIME activation steps for each Mail account separately.

Digital Signature and Encryption in Everyday Use

When composing a new mail, you will see a lock icon in the subject line. An open lock means that the message will be sent unencrypted, while a closed lock indicates that the mail will be encrypted.