247999.XYZ Tools / Check / Apple profile inspector Sign inCreate account

Apple profile inspector

Read unsigned XML and binary Apple configuration profiles locally. Review VPN, DNS, proxy, certificate and MDM payloads without installing the profile.

Unsigned XML or binary plists up to 16 MiB. CMS-signed and encrypted profiles cannot be inspected here.

Review VPN, DNS, proxy, certificate and management payloads without installing them. A readable report is not proof that a profile is safe or that its certificate is trusted.

Choose a file to begin.






    
  

  
Read a profile before installing it


Apple configuration profiles can set up VPNs, DNS, proxies, Wi-Fi, certificates and device management. This inspector reads unsigned XML and binary property lists and explains recognized payload types. It never installs the profile or contacts its servers.


Pay attention to trust and management


A VPN or proxy can route supported traffic through another service. A DNS payload can change the resolver that receives queries. A root-certificate payload may add a certificate authority, while an MDM payload can enroll a device into management. Actual controls depend on the device, enrollment method, supervision and operating-system policy.


Embedded certificate and credential data is counted rather than decoded. Password-like fields are hidden in the report, but addresses and identifiers can remain. This is not a signature check, certificate-chain check or safety verdict.


Unsupported profiles


CMS-signed and encrypted profiles are reported as unsupported instead of producing an empty settings report. XML and binary plists are limited to 16 MiB and bounded object counts and nesting. Unknown payload types are identified for manual review.