Skip to content Skip to site navigation

Install a Cardinal Key on an iOS Device

Cardinal Keys simplify your login experience by reducing or eliminating the need to use your SUNet ID and password for web-based logins and VPN connections.

Cardinal Keys are installed on a per-device basis and are deployed using Cloudpath software. A Cardinal Key should not be installed on shared devices, and the same Cardinal Key should not be used on multiple devices.

After you install a Cardinal Key, you'll need to set a cookie in each browser you intend to use before you can use the Cardinal Key to authenticate to a website or service (Web SSO). See Next steps for instructions, or watch the following video.


  • iOS 10 or later
  • Installation must be done in Safari for iOS devices
  • Device must be managed by AirWatch (Mobile Device Management)
  • Faculty, staff, students, and affiliates: device must be compliant, without an exception on file, in MyDevices

Install a client certificate

To switch between the installation instructions and the installer, tap and hold the link in the instructions, below,  and then choose Open in New Tab. Tap the Show All Tabs button in the lower-right corner to see all open tabs.

  1. Go to (opens in a new window/tab)  
  2. Provide a name for the device you are using if you wish and then click Continue.
    The device name helps you identify your client certificates.

  3. Sign into WebAuth with your SUnet Username and Password when prompted.
  4. When the message is displayed, tap Allow to allow the website to open settings and show you a configuration profile.

  5. A message may appear to Choose a Device. Select the device you are using.

  6. The next screen shows that the profile has been downloaded. Tap Close and open your Settings app.

  7. In your Settings app, click on Profile Downloaded.

  8. Click Install.

  9. Enter your iPhone passcode when prompted.
  10. If an Unmanaged Root Certificate warning message displays, tap Install.

  11. Tap Install again.

  12. When the Profile Installed screen displays, tap Done.

  13. After installing the profile, a message displays saying that the installation is complete and directs you to the Cardinal Key service page for instructions on how to use it.

Web authentication

In order to use a Cardinal Key for web authentication, a cookie must be set in each browser you intend to use. Firefox browsers are not currently supported.

  1. Launch the browser that you plan to use with the Cardinal Key.
  2. Go to Accounts and verify that the Cardinal Key is enabled for this browser. If you need to log in with two-step authentication, click the Cardinal Key tab to verify.


You can use a Cardinal Key for authentication to the Stanford VPN. See iOS: Connect to the Stanford VPN with a Cardinal Key for instructions.

Last modified September 10, 2021