Skip to main content
Solved

How to remove signature from a configuration profile?

  • August 22, 2024
  • 6 replies
  • 229 views

howie_isaacks
Forum|alt.badge.img+23

I need to remove the signature from a profile so that it is readable. In the past I have used this command: 

openssl smime -inform DER -verify -in /Path/To/Profile

I get a "Verification failure" when I try this. How can I remove the signature? It has been a while since I have needed to do this so has the procedure changed? I found some websites that said I can do this using Configurator but the profile won't open in Configurator. 

Best answer by TheAngryYeti

you can also try this:

/usr/bin/security cms -D -i /path/to/yourProfile.mobileconfig | xmllint --format -

6 replies

jamf-42
Forum|alt.badge.img+17
  • Esteemed Contributor
  • August 22, 2024

been a while.. iMazing? 


TheAngryYeti
Forum|alt.badge.img+8
  • Employee
  • Answer
  • August 22, 2024

you can also try this:

/usr/bin/security cms -D -i /path/to/yourProfile.mobileconfig | xmllint --format -

Bol
Forum|alt.badge.img+11
  • Contributor
  • August 22, 2024

For some reason the security command wasn't consistent for me, I went back to;

openssl smime -inform DER -verify -in /path/downloaded.mobileconfig -noverify -out /path/to/de-signed.mobileconfig

To fix formatting;

plutil -convert xml1 /path/to/de-signed.mobileconfig

 


howie_isaacks
Forum|alt.badge.img+23
  • Author
  • Esteemed Contributor
  • August 22, 2024

@TheAngryYeti and @Bol Both of your suggestions worked. Thanks!


sdagley
Forum|alt.badge.img+25
  • Jamf Heroes
  • August 23, 2024

For anyone looking for a GUI tool for signing/un-signing profiles and packages I'd suggest taking Hancock for a spin.


Bol
Forum|alt.badge.img+11
  • Contributor
  • August 23, 2024

For anyone looking for a GUI tool for signing/un-signing profiles and packages I'd suggest taking Hancock for a spin.


Nice one, I forgot about GUI.

Ive also tried LowProfile

https://github.com/ninxsoft/LowProfile