U

Visitor

 • 

17 Messages

Thursday, October 26th, 2023 7:35 AM

Closed

Why does my phone have an Xfinity profile enabling access to root certificates

The certificate settings section of my iphone (settings, general, about) says I have "enable full trust for root certificates" turned on and I can't turn it off. 

I don't know how or why this setting is active on my iPhone. It's a personal phone and I have never installed a profile or authorized a profile to be installed. 

The toggle to enable this is greyed out and my iPhone settings do not show any profile anywhere so I can't delete the profile or turn of the trust certificate setting. 

Why is this on my iPhone and how do I get rid of it? 

There is a message that says "some certificate settings are enforced by the profile Xfinity Mobile"  

Visitor

 • 

17 Messages

1 year ago

I don't know why anything I type is formatted incorrectly 

Official Employee

 • 

572 Messages

@user_ML I appreciate you taking time out of your day and want to ensure you’re able to get in touch with an awesome Xfinity Mobile expert to help get this resolved. Due to account security, our options with Xfinity Mobile accounts are very limited. We're unable to perform any device or account specific requests over this platform.

You can reach the Xfinity Mobile team via any of the options below. 
Text Message: 888-936-4968
Phone: 888-936-4968
Chat: xfinity.com/xfinityassistant/?channel=xMobile

I am an Official Xfinity Employee.
Official Employees are from multiple teams within Xfinity: CARE, Product, Leadership.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Please, mark a reply as the Accepted Answer.tick

Visitor

 • 

7 Messages

1 year ago

Just discovered this! They have full access to root certificates!!!!

"Enable Full Trust For Root Certificates" Trust Store Version 2023071300/Trust Asset Version 1002.

At some point I may have granted permission when activating Xfinity Mobile. I do not recall.

Can’t remove the profile or delete it. (Grayed out). Access to root certificates allows them to see everything run through their mobile network un-encrypted. Not exactly secure! I will be looking for another mobile carrier because of this security issue. Otherwise I was for the most part happy with Xfinity Mobile.

Visitor

 • 

7 Messages

1 year ago

I have canceled my Xfinity Mobile account for this reason. Successfully ported my number to another mobile service provider. I was as never able to find the reason they did this "Enable Full Trust For Root Certificates" other than assuming it is a data collection scam to sell our data to brokers. I have 1 more billing cycle to pay down. When this is done I will keep checking to make sure the "Auto Pay" for Xfinity Mobile is no longer active.

forum icon

New to the Community?

Start Here