IOSProfileSigning.manage.microsoft.com certificate has expired

Question

Hi all,

Some of my Macbook devices has an expired certificate for IOSProfileSigning.manage.microsoft.com, which is under management profile, and this profile is linked to the enrollment profile in intune. However, i can still manage the device from intune console, and i couldnt find any expired certificate in Intune Console and Apple School Manager. My questions is what is the cause of this expired certificate, and why it only happen in some devices, what is the impact for the device with expired certificate, and how can i fix it?

Thank you

Answer 1

@mirzaindra,Thanks for posting in Q&A.

Based on my research, this iOSProfileSigning certificate is only needed to install the management profile on iOS devices during the enrollment process. After the enrollment is done, this certificate is not used anymore.

So, what you will see is that devices that are already are enrolled will work as expected. And newly enrolled devices will receive an iOSProfileSigning certificate with the new date.

Similar threads for your reference:

IOSProfileSigning cert expiring on March 26th? No worries!

Does anyone know what the IOSProfileSigning.manage.microsoft.com cert is?

Therefore, there is no need worry about this expired certificate.

Hope above information can help you.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Not an answer but a rebut:

Hi, I see the answer as somewhat remiss as to 'red' -eq 'bad', after all it is a warning that something is wrong, but benign considering the device has the status as 'verified' in green colour when things are not 'bad'. This is throwing a red herring, and I would expect that professional/skill developers would also write the code to suppress such red herrings to the end user. I think that the engineers need to do better and code according, and whether this be an Apple engineering task or Microsoft, to an end user it looks bad, when we are all worried about cybersecurity, you stumble across something - and this is a security certificate that we are trying to teach people to pay attention too - that looks like it is security related and broken, it is no surprise people are questioning, "Why is my iPad 'not verified?" (or maybe it is just the five or so people in this thread!) All love and peace.....and a better UX.