"Unsigned profile" warning when adding box profile to OSX

When adding my box profile to my mac, I get the following warning:

Screenshot 2026-03-20 at 7.13.07 AM

In clear text:

Unsigned Profile

This profile is unsigned, so the author cannot be known. Make sure that you trust the sender of this profile before installing.

It’s not a problem for me personally but when I start asking others with accounts on the box to set it up I’d prefer to not have them see this warning, which might cause them to be alarmed or confused.

Is there this could be fixed this so the warning does not show?

What box profile?

This is about the mobileconfig hosted by mail-in-a-box. Some light googling suggests it needs to be signed to avoid this warning. I’m not sure you need an Apple developer account to sign it, or that it can also be done using a letsencrypt certificate.
One way or the other, there’s no support for that signing in mail in a box right now, someone needs to build and test it, then create a pull request for it a the github.

1 Like

Yes, I am referring to the /admin/mail-guide instructions:

iOS and macOS only: Open this configuration link on your iOS device or on your Mac desktop to easily set up mail (IMAP/SMTP), Contacts, and Calendar. Your username is your whole email address.

That link is https://box.DOMAIN.org/mailinabox.mobileconfig - you can give that to anyone with an account on your box. I used it myself and it appears to work incredibly well! I love how on the device you can then set up all three apps at the same time.

There is some awkwardness with the procedure, including this “Unsigned profile” which might cause some people to hesitate.

The other awkwardness is that once you get past that step you are instructed to go to your accounts to set it up but the instructions aren’t so clear on how to do that. I forgot to take a screenshot, but do remember that the keyword to search for in the apple settings is “profiles” (with s). On the iphone it’s the same place you set up your VPN.

Yes, this is how I understand the situation and I accept it. I hope someone with the skill to do it takes this up at some point.