Configuration profiles
A configuration profile is a signed set of settings that iOS applies to the device, such as certificates, VPN and Wi-Fi settings, restrictions, MDM enrollment and developer provisioning. This module lists installed profiles and lets you install or remove them.
View profiles
Section titled “View profiles”For each profile, KeyMob shows the display name, identifier, the settings it contains, the signer and the expiry date.
When a device behaves differently from others for no clear reason, check this list first.
Why unexpected profiles matter
Section titled “Why unexpected profiles matter”Profiles change how the device works, without visible notice:
- A root certificate allows traffic to be intercepted. If a device has one you did not install, treat all of its TLS traffic as untrusted.
- A VPN configuration routes traffic through a server you did not choose. This can cause added latency, a different apparent region, or requests that fail on one device only.
- Restrictions disable features. An app that “does not work on that phone” may be blocked from a capability the profile disabled.
- MDM enrollment gives device control to the MDM owner.
- An expired developer profile stops sideloaded builds from launching, and the error message does not say why.
Install a profile
Section titled “Install a profile”Install a .mobileconfig file from your computer over USB. iOS still requires confirmation on the device, because installing a profile is a security decision.
This is useful for applying a Wi-Fi or test configuration to many test devices without setting up each one manually.
Remove a profile
Section titled “Remove a profile”Select a profile to remove it. Note the following:
- Removing an MDM enrollment profile can delete managed apps and their data.
- Removing a Wi-Fi or VPN profile can disconnect the device from the network. On a Wi-Fi connection, this ends the session. Use USB when removing these profiles.
Provisioning profiles
Section titled “Provisioning profiles”Development and Ad Hoc profiles are also listed, with their expiry dates and the devices they include. If an IPA install fails with a signature error, check this list and the UDID. Either the device is not in the profile, or the profile has expired.
Test fleet maintenance
Section titled “Test fleet maintenance”- Review the profile list when a device joins the fleet.
- Remove certificates and VPN configurations left over from earlier work.
- Record provisioning profile expiry dates. If every device stops installing builds on the same day, a profile has usually expired.
- Review the list again before a device leaves the fleet, especially before returning it to its owner.