Is an unknown MDM Certificate on a used iPhone a security risk?

2 points by sysrpl 3 years ago | 1 comment

Recently I bought a used iPhone for my daughter. After a factory reset, I went into its settings and noticed it still has an MDM certificate installed from the previous owner. For whatever reason, I am having difficulty removing this certificate and I would like to know if leaving this certificate on this iPhone would pose any danger, such as a remote takeover or leaking any of my daughter's information either to the original owner or a third party.

Is leaving an unknown MDM certificate from the previous owner on an iPhone a security risk? If so what is the best way to remove it?

tra3 3 years ago |

According to Apple

> 1. All profiles can be removed by wiping the device of all data. [0]

Depending on the MDM profile there's a lot that can be done. Is the profile still active or just the certificate is hanging around?

[0]: https://support.apple.com/en-ca/guide/deployment/depc0aadd3f...