Profile Signer

Profile signer.

PKCS#7-sign a .mobileconfig with SSL or P12 so installation can show Verified.

Profile *

Click or drop an unsigned .mobileconfig

XML plist · max 8MB

Signing method

For a green Verified badge, use a publicly trusted SSL cert (e.g. Let’s Encrypt). Self-signed or typical developer P12 usually still show Unverified.

Certificate file *

Upload cert.pem / fullchain.pem / .crt

May include the full chain

Private key *

Upload privkey.pem / .key

Private key matching the certificate

Intermediate chain (optional)

Upload chain.pem / ca-bundle

Skip if the cert is already a fullchain

Key password

P12 / PFX *

Upload .p12 / .pfx

Must include certificate and private key

P12 password

Uses PKCS#7 (openssl smime -sign -nodetach -outform der). Materials are processed temporarily and not stored.

Signing…

PKCS#7-signing the profile with your certificate.

Signed profile download started.

Check the certificate and private key, then retry.