iOS Mail S/MIME cert installed and trusted but “No valid certificates found”

I reformatted my 12 Pro Max to iOS 16 and when I reinstalled my working SMIME certs and the Identrust root/intermediate certs, my certs appear in place and show Trusted status but the sliders to enable Signing and Encryption are greyed out and the No valid Certificates error is shown.

Why my problem isn’t like similar questions:

-The same setup was working in ios 15 and in an update-in-place to ios16. The problem appeared after a reformat-to-“new-phone”/ios16.2. (Not really a new phone)

-these commercial certs appear to be properly installed and trusted. I installed the vendor intermediate cert prior to installing mine.

-even last year when I was using unverified certs, I could install, sign and encrypt, albeit with no trust.

-these certs are nit expired, and they have the required data for signing and encrypting (client authentication/email protection)

-i have two email accounts with certs, both show the same problem.

-this is already a new fresh install


Anyone seen this combination of factors before? Anyone successfully load SMIME certs into 16.2?


[Image Edited by Moderator to Remove Personal Information]

iPhone 12 Pro Max, iOS 16

Posted on Dec 31, 2022 7:00 AM

Reply
4 replies

Jan 1, 2023 7:57 PM in response to Drew_7

Yeah, unfortunately IdenTrust is no help, as I have A) done their installation correctly and B) their install procedure is the same as any SSL cert with Macs (into the KeyChain, export from Key Store, email the crts.) worked fine with iOS 15 and 16, until I restored-as-a-new-phone. Something in a new 16.2 environment is different than it was before, and it doesn't seem to have to do with trust. I could load and use even untrusted certs for signing before the reformat, iOS Mail didn't care beyond warning me. My situation is probably rare because nobody starts with a fresh install of iOS 16.2 if they can at all help it, they upgrade in place or they pull in an iCloud backup with their previous settings. I wonder if 3rd party certs are included in an iCloud backup?


Jan 2, 2023 9:30 AM in response to M.Daguerre

Hello M.Daguerre,


Third-party certificates wouldn't be included in an iCloud backup, according to the following: Keep third-party app data up to date on all your Apple devices with iCloud


Given the issue doesn't include any of your data and a restored device (not new), it would be best to continue working with the administrators that manage these certificates, as only they can provide you with a solution moving forward with iOS 16.2 or later versions.


We'd contact them to discuss this further for a resolution.


Wishing you well, take care.

Jan 2, 2023 7:26 PM in response to M.Daguerre

Thanks for the clarification that 3rd-party certs would not be stored in an iCloud backup for restore, good to know.

Retail S/MIME certs, well there's just not much to them, as long as they are properly formatted, contain the values you need, are valid and hopefully trusted, there's not much to administration and there's no insight the cert vendor can make that isn't already contained within the cert. My certs were known-good when installed into iOS 15. They are not recognized in a freshly reformatted iOS16.2 environment, and iOS is the only variable. I get that there's little to no data available yet for the install of certs into vanilla 16.2, for instance it could be that the certs are fine but that the problem is with my configured Gmail accounts....with iOS Mail using OAuth I don't get to specify any Gmail settings, it's auto-configured. I am hoping someone else with this issue finds this thread. As my latest Apple Genius pointed out, many bugs absolutely don't exist until more than a few people show up to complain. Then it gets on someone's to-do list. Thanks again!

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

iOS Mail S/MIME cert installed and trusted but “No valid certificates found”

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.