4 weeks ago
I need to remove the signature from a profile so that it is readable. In the past I have used this command:
openssl smime -inform DER -verify -in /Path/To/Profile
I get a "Verification failure" when I try this. How can I remove the signature? It has been a while since I have needed to do this so has the procedure changed? I found some websites that said I can do this using Configurator but the profile won't open in Configurator.
Solved! Go to Solution.
4 weeks ago
you can also try this:
/usr/bin/security cms -D -i /path/to/yourProfile.mobileconfig | xmllint --format -
4 weeks ago
been a while.. iMazing?
4 weeks ago
you can also try this:
/usr/bin/security cms -D -i /path/to/yourProfile.mobileconfig | xmllint --format -
4 weeks ago
For some reason the security command wasn't consistent for me, I went back to;
openssl smime -inform DER -verify -in /path/downloaded.mobileconfig -noverify -out /path/to/de-signed.mobileconfig
To fix formatting;
plutil -convert xml1 /path/to/de-signed.mobileconfig
4 weeks ago
@TheAngryYeti and @Bol Both of your suggestions worked. Thanks!
4 weeks ago
For anyone looking for a GUI tool for signing/un-signing profiles and packages I'd suggest taking Hancock for a spin.
4 weeks ago