Certificate List

URL

PUT https://yourmdmhost.example.com/mdm#CertificateListCommand

Response Codes

Discussion

This command allows the server to retrieve the list of installed certificates on the device. The command requires that the server has the Inspect Profile Manifest privilege. For user enrollment, this request returns only certificates pushed by MDM.

This command doesn’t return certificates that Declarative Device Management installs. Instead, use the Declarative Device Management StatusSecurityCertificateList status item to monitor the Declarative Device Management certificates.

Starting with iOS 15.4, this command returns a Not Now response before the passcode-protected device’s first unlock after a device boots. Between iOS 15.0 and iOS 15.4, devices in that state didn’t respond with Not Now, but the response might not contain all identity certificates.

Refer to the following sections to determine supported channels and requirements, and to see an example request and response.

Command availability

Example request and response

HTTP Body

The request object the server returns for the Certificate List Command.

Topics

Commands and responses

• CertificateListCommand
• CertificateListResponse

See Also

Security

• Security Info
• Activation Lock Bypass Code
• Clear Activation Lock Bypass Code
• Rotate FileVault Key