Skip to main content

I need to remove the signature from a profile so that it is readable. In the past I have used this command: 


openssl smime -inform DER -verify -in /Path/To/Profile

I get a "Verification failure" when I try this. How can I remove the signature? It has been a while since I have needed to do this so has the procedure changed? I found some websites that said I can do this using Configurator but the profile won't open in Configurator. 

been a while.. iMazing? 

you can also try this:

/usr/bin/security cms -D -i /path/to/yourProfile.mobileconfig | xmllint --format -

For some reason the security command wasn't consistent for me, I went back to;


openssl smime -inform DER -verify -in /path/downloaded.mobileconfig -noverify -out /path/to/de-signed.mobileconfig

To fix formatting;


plutil -convert xml1 /path/to/de-signed.mobileconfig

 

@TheAngryYeti and @Bol Both of your suggestions worked. Thanks!

For anyone looking for a GUI tool for signing/un-signing profiles and packages I'd suggest taking Hancock for a spin.

For anyone looking for a GUI tool for signing/un-signing profiles and packages I'd suggest taking Hancock for a spin.


Nice one, I forgot about GUI.


Ive also tried LowProfile


https://github.com/ninxsoft/LowProfile



 


 

Reply


Terms & ConditionsCookie settings