trusted root certificates removed after iOS 18 on iPads

[taz_mcbr1]

After upgrading to iOS 18, students are seeing trusted certificates being removed from their iPads.  In our case, they are root certificates that get pushed via Jamf Pro during enrolment - one for wifi access, one is the JSS built in certificate.  

(click on settings, about, certificate trust settings to see the certificates that get pushed)

Is anyone else seeing this please?  We are seeing this sitewide, as the OS update rolls out.

No fix at the moment other than wipe the device and enrol all over again to get the certificates back - not feasible when you have over 1000 iPads!

[dferter]

---

@taz_mcbr1mcdvoice wrote:

After upgrading to iOS 18, students are seeing trusted certificates being removed from their iPads.  In our case, they are root certificates that get pushed via Jamf Pro during enrolment - one for wifi access, one is the JSS built in certificate.  

(click on settings, about, certificate trust settings to see the certificates that get pushed)

Is anyone else seeing this please?  We are seeing this sitewide, as the OS update rolls out.

No fix at the moment other than wipe the device and enrol all over again to get the certificates back - not feasible when you have over 1000 iPads!

---

Yes, this seems to be a known issue with iOS 18 where trusted certificates are being removed after the upgrade. Unfortunately, the only current workaround is to wipe and re-enroll devices, which isn’t feasible for large deployments. Monitor the Jamf community for updates or patches, and consider reporting this issue to both Jamf and Apple for quicker resolution. Hope! it would be helpful.

[ryan_w]

We are still seeing this issue even on iPads running 18.1.1.  I even tried to manually reinstall the certificate that was not trusted and the option to trust it just never shows up under Settings > General > About > Certificate Trust Settings.  However, not all of our iPads are impacted.

[taz_mcbr1]

Thanks for the heads up. We are seeing the same - not all are impacted but we cannot find a common thread that links the ones that are impacted.