User Installed CA Certificates Detection

Definition:

User Installed CA (Certificate Authority) Certificates Detection check detects whether any custom or third-party CA certificates have been manually installed on a mobile device (outside the system’s default certificate).

Security implications of third-party CA certificate:

• Man-in-the-Middle (MITM) Risk: Malicious or debugging certificates can intercept and decrypt secure HTTPS traffic.
• Data Exposure: Sensitive information like login credentials, tokens, and API responses can be monitored.
• App Integrity Threat: Attackers may analyze or manipulate app communication.
• Compliance Issues: Presence of unauthorized certificates may violate security policies or regulatory requirements.

How to Fix This Issue:

If the app is not running due to this User Installed CA Certificates detection, follow these steps to make your device secure:

On Android

1. Go to Settings → Security More Security & Privacy (might differ from device to device) → Encryption & Credentials
2. Tap User Credentials
3. Review the installed certificates
4. Remove any unknown or unnecessary certificates
5. Restart the application

On iOS

1. Go to Settings → General → VPN & Device Management
2. Open Profiles / Certificates
3. Identify any untrusted or unfamiliar certificates
4. Remove them if not required
5. Relaunch the application