Installing SSL Certificates on iPhone and iPad

Installing a self-signed certificate on iOS for Dermi Atlas Professional is a two-step process: Install and Enable Trust.

Getting the Certificate onto the Device

There are two paths, and both end at the same profile installation and trust steps below.

Dermi Atlas Companion: The iOS app retrieves the certificate directly from the host over the local network. Open the server, tap Install Certificate, and save the downloaded file when the share sheet appears. The screen also shows the certificate fingerprint, which can be compared against the fingerprint in Dermi Atlas Manager under Atlas Status => SSL Certificate => Certificate Details, and a Verify Installation action confirms the certificate is trusted once the steps below are complete.

Safari only: Download the certificate from Dermi Atlas Manager (Atlas Status => SSL Certificate => Download) and transfer it to the device. See SSL Certificate Setup for HTTPS Access.

Step 1: Install Profile

1. Transfer the .crt file to the device (AirDrop is easiest), or, in Dermi Atlas Companion, save the downloaded certificate to Files and open it there.
2. Tap Allow when prompted to download the configuration profile.
3. Open Settings.
4. Tap Profile Downloaded (near the top) or go to General => VPN & Device Management.
5. Tap the dermi-atlas.local profile (the certificate Common Name shown by iOS; it is issued by Dermi Inc. with organizational unit Dermi Atlas Professional).
6. Tap Install, enter the passcode, and confirm.

Step 2: Enable Trust

1. Go to Settings => General => About.
2. Scroll to the bottom and tap Certificate Trust Settings.
3. Under "Enable full trust for root certificates," toggle the switch for dermi-atlas.local.
4. Tap Continue.

Verification

Navigate to the HTTPS URL of the Dermi Atlas Professional instance (e.g., https://192.168.1.100:15045). The browser should now load the page without security warnings and display a padlock icon.

If the host IP address changes or the certificate is rotated, the certificate is regenerated and the old one becomes invalid. The new certificate must be downloaded and reinstalled on each iOS device, and full trust must be re-enabled after reinstall. To avoid repeating this on every device, assign the host a static IP. See Configuring a Static IP for Dermi Atlas Professional.