Certificate management
Trace performs HTTPS inspection using a local root certificate authority (CA) generated on your device. You control whether that CA is trusted.
Install the root CA
- In Trace, go to Settings → Certificate.
- Tap Install Certificate.
- iOS Settings opens a profile installation screen.
- Tap Install and confirm.
Enable full trust
- Open Settings → General → About.
- Tap Certificate Trust Settings.
- Enable Trace Root CA and confirm.
Note
Without trust enabled, Trace can still capture HTTPS metadata but cannot decrypt bodies.
Export or remove the certificate
- Export: Use the certificate screen in Trace to export the root CA for testing or device management.
- Remove: Delete the profile from Settings and disable trust in Certificate Trust Settings.
Verify HTTPS inspection
- Capture a request to any HTTPS domain.
- Open the Body tab in the inspector.
- If the body is empty, re-check trust settings or reinstall the profile.
Multiple devices
Each device generates its own root CA. If you debug on multiple devices, repeat installation and trust on each one.
Security guidance
- Only trust the Trace CA on devices you control.
- Remove the CA when you are done debugging.
- Apps that use certificate pinning may bypass MITM and show passthrough traffic.