---
title: Certificate Revocation Checking Configuration
slug: device-management-apple/certificate-revocation-checking-configuration
createdAt: 2026-10-06T07:47:37.382Z
---

This configuration allows the administrators to check an array of certificates revoked from a device. Administrators can specify a certificate authority (CA) that allows the configuration to enable revocation checking for all the certificates that are linked to the specified CA.

Applicable to: iOS 14.2+

**Procedure **

1. Go to Policies & Configurations > Configurations.
2. Click Add New > Apple > iOS / tvOS > Certificate Revocation.
   The New Certificate Revocation Setting dialog box opens.
3. Enter a Name and Description of the configuration.
4. Click the Add+ button.
5. Select the Hash Algorithm (SHA 256 is the default) and enter the Hash of the root certificate.

:::hint{type="info" indent="1"}
In Hash, you have to enter a Base64 encoded (binary) SHA-256 hash of the certificate’s public key. See [Apple documentation](https://support.apple.com/en-us/HT209143) for the available trusted root certificates for Apple operating systems. You can add multiple root certificates in this configuration.
:::

6. Click Save.