How to remove signature from a configuration profile?

[howie_isaacks]

I need to remove the signature from a profile so that it is readable. In the past I have used this command: 

openssl smime -inform DER -verify -in /Path/To/Profile

I get a "Verification failure" when I try this. How can I remove the signature? It has been a while since I have needed to do this so has the procedure changed? I found some websites that said I can do this using Configurator but the profile won't open in Configurator. 

[jamf-42]

been a while.. iMazing? 

[TheAngryYeti · Accepted solution]

you can also try this:

/usr/bin/security cms -D -i /path/to/yourProfile.mobileconfig | xmllint --format -

[Bol]

For some reason the security command wasn't consistent for me, I went back to;

openssl smime -inform DER -verify -in /path/downloaded.mobileconfig -noverify -out /path/to/de-signed.mobileconfig

To fix formatting;

plutil -convert xml1 /path/to/de-signed.mobileconfig

[howie_isaacks]

@TheAngryYeti and @Bol Both of your suggestions worked. Thanks!

[sdagley]

For anyone looking for a GUI tool for signing/un-signing profiles and packages I'd suggest taking Hancock for a spin.

[Bol]

Nice one, I forgot about GUI.

Ive also tried LowProfile

https://github.com/ninxsoft/LowProfile