Enterprise, MDM, and managed apps
Internal enterprise distribution, Custom Apps, and why leaked enterprise certificates are not a consumer sideloading strategy.
The Apple Developer Enterprise Program is for eligible organizations distributing proprietary apps internally to employees. It is not a general public distribution shortcut.
Prefer managed routes
Apple recommends MDM for enterprise apps because installation, trust, updates, and removal can be managed as part of the organizational relationship. Before choosing Enterprise, assess whether a public, unlisted, or Custom App through Apple Business or School Manager already solves the problem.
Apple describes Enterprise as appropriate only for internal use cases not adequately handled by the App Store, Custom Apps, ad hoc distribution, or TestFlight (Apple Platform Deployment).
Manual enterprise installation
An organization can also serve an in-house IPA and manifest over HTTPS. Manually installed enterprise apps require user trust; iOS 18 and later may require Allow & Restart. The device periodically revalidates trust, and a revoked certificate stops the app launching.
Why public “enterprise certs” fail
A certificate shared publicly is easy for Apple to identify, revoke, or associate with misuse. It also gives users no durable relationship with the actual certificate owner. DNS blocking does not transform a revoked or ineligible certificate into a valid one.
Do not install a mystery configuration profile merely to obtain a leaked enterprise app. A profile may carry management or network settings unrelated to the app.
Certificate lifecycle
Apple says in-house distribution profiles expire after 12 months. Organizations should overlap certificate rotation and update apps before profiles expire. Revoking the distribution certificate invalidates apps signed with it, so revocation is a last resort when keys are lost or compromised.