If you've ever tried to install an iOS app from a source outside of the App Store—perhaps a beta version from your company or a specialized internal tool—you've likely encountered the intimidating "Untrusted Enterprise Developer" popup.
This scary-looking message stops you from opening the app, but it doesn't mean the app is broken. It simply means Apple requires you to manually verify that you trust the organization that created the app. In this guide, we'll walk you through exactly how to fix this in under a minute.
What Causes This Error?
Apple has a strict "Walled Garden" approach to security. Normally, apps are vetted by Apple and downloaded from the App Store. However, corporations often need to distribute proprietary apps to their employees without making them public. To do this, they use the Apple Enterprise Developer Program.
When you install one of these enterprise apps, the certificate used to sign it isn't "trusted" by your specific iPhone by default. This is a deliberate security layer to prevent malicious websites from tricking users into installing spyware.
Enterprise vs. Ad Hoc: Why the Distinction Matters
This exact wording—"Untrusted Enterprise Developer"—only appears for builds signed with an Apple Enterprise (in-house) certificate. If you instead see "Unable to Install" or "could not be installed at this time," you're likely dealing with an Ad Hoc build whose provisioning profile doesn't include your device's UDID. Trusting a profile won't fix that second case—the device has to be registered first. You can confirm your device identifier with our UDID checker and send it to whoever built the app.
Step-by-Step Fix
To run the app, you need to tell your iPhone to trust the certificate belonging to the developer.
1. Dismiss the Message
Tap Cancel on the popup error. You cannot verify the app directly from the error message.
2. Open Settings
Go to your device's Settings app and tap on General.
3. Find Device Management
Scroll down and look for a menu item labeled VPN & Device Management.
Note: On older iOS versions (iOS 14 or earlier), this might be called "Profiles & Device Management" or simply "Profiles".
4. Select the Enterprise App
Under the section header ENTERPRISE APP, you will see the name of the developer profile (e.g., "Acme Corp Inc."). Tap on it.
5. Trust the Developer
Tap the blue link that says Trust "[Developer Name]".
6. Confirm
A dialog will appear asking you to confirm. Tap Trust.
Once done, you can go back to your home screen and open the app immediately. You won't have to do this again for any other apps from the same developer.
Troubleshooting: When "Trust" Doesn't Work
The steps above cover the normal case. A few situations trip people up:
- The profile isn't listed. The ENTERPRISE APP section only shows up after the app finishes installing. If you cancelled mid-install, re-tap the install link and wait for the icon to stop showing "Loading…" before opening Settings.
- The Trust button is greyed out or the confirmation fails. iOS checks the certificate against Apple's servers the moment you tap Trust, so the device needs internet. On a locked-down corporate Wi-Fi or a captive portal, switch to cellular data and try again.
- The app crashes on launch even after trusting. This usually means Apple has revoked the developer's enterprise certificate. Trusting it again won't help—the developer has to re-sign and re-distribute the build.
- You want to undo it. Deleting the app does not remove the trust. Go back to Settings > General > VPN & Device Management, tap the profile, and choose Remove Profile to fully revoke it.
Is It Safe?
Ideally, yes—if you know where the app came from.
- Safe: Downloading an internal HR app from your company's official download portal.
- Risky: Downloading a "Free Paid Games" app from a random 3rd party website.
Enterprise certificates are powerful permissions. If you trust a malicious profile, that app could potentially access sensitive data. Always verify the source before tapping "Trust".
Getting the App onto Testers' Phones in the First Place
The trust prompt is the last step of an over-the-air (OTA) install—the part testers see. Getting there means hosting a signed .ipa behind HTTPS with a correctly formatted manifest, which is exactly the boilerplate BetaDrop's IPA upload handles for you. Drop in a build (up to 512 MB) and you get an instant install link plus a QR code; testers open it in Safari, install straight from the browser, and hit the trust step above—no TestFlight, no App Store review wait, no tester accounts, and no cables.
If you're weighing hosting options, our Diawi alternative breakdown compares the OTA workflow side by side, and the full guide to installing IPA files over the air covers the manifest and certificate mechanics end to end.
Frequently Asked Questions
Why am I seeing "Untrusted Enterprise Developer" on my iPhone?
The error appears when you open an app signed with an Apple Enterprise (in-house) certificate that you have not manually trusted on this device yet. iOS blocks the app until you approve the developer under Settings > General > VPN & Device Management. It does not mean the app is corrupt or broken.
Where is the Profiles or Device Management menu on iOS?
Go to Settings > General > VPN & Device Management. On iOS 14 and earlier it may be labeled "Profiles & Device Management" or simply "Profiles". The ENTERPRISE APP section only appears after the app has been installed on the device.
Why is the Trust button greyed out or not working?
iOS verifies the enterprise certificate with Apple servers when you tap Trust, so the device needs an active internet connection. If you are offline or on a restricted corporate or captive-portal network, connect to Wi-Fi or cellular data and try trusting the profile again.
Is it safe to trust an Enterprise Developer?
Only trust developers you know and expect builds from, such as your employer or a beta program you signed up for. An enterprise certificate grants broad permissions, so trusting an unknown profile from a random website can expose your device to malware.
What is the difference between this error and "Unable to Install"?
"Untrusted Enterprise Developer" comes from apps signed with an Enterprise certificate and is fixed by trusting the developer in Settings. "Unable to Install" or "could not be installed at this time" usually means an Ad Hoc build whose provisioning profile does not include your device UDID, which trusting a profile will not fix.
Does deleting the app remove the trusted certificate?
No. Deleting the app leaves the developer profile in place, and iOS will trust future builds from that developer automatically. To fully revoke access, open Settings > General > VPN & Device Management, tap the profile, and choose Remove Profile or Delete App.
Conclusion
The "Untrusted Enterprise Developer" error is just a speed bump, not a roadblock. It's there to ensure you are making a conscious decision to install software from outside the official App Store. Once you've trusted a source you recognize, you can open your beta apps and internal tools seamlessly.
